From beda2e71847c30b932e48cb9da82d553b8b43554 Mon Sep 17 00:00:00 2001 From: Thirumalesh Aaraveti Date: Mon, 30 Oct 2023 08:26:46 +0530 Subject: [PATCH] Added the optmize reports policy --- .../clouds/aws/resource_explorer/__init__.py | 0 .../resource_explorer_operations.py | 52 + .../common/clouds/aws/support/__init__.py | 0 .../clouds/aws/support/support_operations.py | 44 + .../common/clouds/aws/utils/common_methods.py | 28 + .../elasticsearch/elasticsearch_operations.py | 12 +- .../main/environment_variables.py | 2 +- cloud_governance/main/test.json | 39582 ++++++++++++++++ .../policy/aws/optimize_resources_report.py | 113 + .../zombie_non_cluster_polices.py | 51 +- .../clouds/aws/daily/policies/run_policies.py | 9 + .../common/clouds/aws/support/__init__.py | 0 .../aws/support/test_support_operations.py | 70 + .../aws/test_optimize_resources_report.py | 49 + 14 files changed, 39985 insertions(+), 27 deletions(-) create mode 100644 cloud_governance/common/clouds/aws/resource_explorer/__init__.py create mode 100644 cloud_governance/common/clouds/aws/resource_explorer/resource_explorer_operations.py create mode 100644 cloud_governance/common/clouds/aws/support/__init__.py create mode 100644 cloud_governance/common/clouds/aws/support/support_operations.py create mode 100644 cloud_governance/common/clouds/aws/utils/common_methods.py create mode 100644 cloud_governance/main/test.json create mode 100644 cloud_governance/policy/aws/optimize_resources_report.py create mode 100644 tests/unittest/cloud_governance/common/clouds/aws/support/__init__.py create mode 100644 tests/unittest/cloud_governance/common/clouds/aws/support/test_support_operations.py create mode 100644 tests/unittest/cloud_governance/policy/aws/test_optimize_resources_report.py diff --git a/cloud_governance/common/clouds/aws/resource_explorer/__init__.py b/cloud_governance/common/clouds/aws/resource_explorer/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/cloud_governance/common/clouds/aws/resource_explorer/resource_explorer_operations.py b/cloud_governance/common/clouds/aws/resource_explorer/resource_explorer_operations.py new file mode 100644 index 000000000..7d5ef11de --- /dev/null +++ b/cloud_governance/common/clouds/aws/resource_explorer/resource_explorer_operations.py @@ -0,0 +1,52 @@ +import boto3 + +from cloud_governance.common.logger.init_logger import logger + +# @Todo, This class will be used in the feature releases. +# @Todo, it helps in find the resource data like tags by using search query + + +class ResourceExplorerOperations: + """ + This class performs the resource explorer operations + """ + + def __init__(self): + self.__client = self.__set_client() + + def __set_client(self): + view = self.list_views() + region = 'us-east-1' + if view: + region = view.split(':')[3] + return boto3.client('resource-explorer-2', region_name=region) + + def __search(self, search_string: str): + try: + response = self.__client.search(QueryString=search_string) + return response.get('Resources', []) + except Exception as err: + logger.error(err) + return [] + + def find_resource_tags(self, resource_id: str): + search_results = self.__search(search_string=f'"{resource_id}"') + tags = [] + for resource in search_results: + if resource_id in resource.get('Arn'): + if resource.get('Properties'): + tags = resource.get('Properties', {})[0].get('Data') + return tags + + def list_views(self): + """ + This method returns list the views + :return: + :rtype: + """ + client = boto3.client('resource-explorer-2', region_name='us-east-1') + views = client.list_views()['Views'] + if views: + return views[0] + else: + raise Exception("No Resource Explorer view found in Region: us-east-1, create one on Free of Charge") diff --git a/cloud_governance/common/clouds/aws/support/__init__.py b/cloud_governance/common/clouds/aws/support/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/cloud_governance/common/clouds/aws/support/support_operations.py b/cloud_governance/common/clouds/aws/support/support_operations.py new file mode 100644 index 000000000..4859762da --- /dev/null +++ b/cloud_governance/common/clouds/aws/support/support_operations.py @@ -0,0 +1,44 @@ +import boto3 + +from cloud_governance.common.logger.init_logger import logger + + +class SupportOperations: + """ + This class performs the support operations + """ + + def __init__(self): + self.__client = boto3.client('support', region_name='us-east-1') + + def get_describe_trusted_advisor_checks(self): + """ + This method returns the trusted advisor check results + :return: + :rtype: + """ + try: + response = self.__client.describe_trusted_advisor_checks(language='en') + return response.get('checks', []) + except Exception as err: + logger.error(err) + return [] + + def get_trusted_advisor_reports(self): + """ + This method returns the reports of the checks + :return: + :rtype: + """ + result = {} + try: + advisor_checks_list = self.get_describe_trusted_advisor_checks() + for check in advisor_checks_list: + response = self.__client.describe_trusted_advisor_check_result(checkId=check.get('id')) + result.setdefault(check.get('category'), {}).setdefault(check.get('id'), { + 'metadata': check, + 'reports': response.get('result', []) + }) + except Exception as err: + logger.err(err) + return result diff --git a/cloud_governance/common/clouds/aws/utils/common_methods.py b/cloud_governance/common/clouds/aws/utils/common_methods.py new file mode 100644 index 000000000..639a3acc2 --- /dev/null +++ b/cloud_governance/common/clouds/aws/utils/common_methods.py @@ -0,0 +1,28 @@ +def get_tag_value_from_tags(tags: list, tag_name: str, cast_type: str = 'str', + default_value: any = '') -> any: + """ + This method return the tag value inputted by tag_name + :param tags: + :type tags: + :param tag_name: + :type tag_name: + :param cast_type: + :type cast_type: + :param default_value: + :type default_value: + :return: + :rtype: + """ + if tags: + for tag in tags: + key = tag.get('Key').lower().replace("_", '').replace("-", '').strip() + if key == tag_name.lower(): + if cast_type: + if cast_type == 'int': + return int(tag.get('Value').split()[0].strip()) + elif cast_type == 'float': + return float(tag.get('Value').strip()) + else: + return str(tag.get('Value').strip()) + return tag.get('Value').strip() + return default_value diff --git a/cloud_governance/common/elasticsearch/elasticsearch_operations.py b/cloud_governance/common/elasticsearch/elasticsearch_operations.py index 65bcc39f4..bf723d5ae 100644 --- a/cloud_governance/common/elasticsearch/elasticsearch_operations.py +++ b/cloud_governance/common/elasticsearch/elasticsearch_operations.py @@ -311,10 +311,16 @@ def upload_data_in_bulk(self, data_items: list, index: str, **kwargs): if kwargs.get('id'): item['_id'] = item.get(kwargs.get('id')) if not item.get('timestamp'): - item['timestamp'] = datetime.strptime(item.get('CurrentDate'), "%Y-%m-%d") + if 'CurrentDate' in item: + item['timestamp'] = datetime.strptime(item.get('CurrentDate'), "%Y-%m-%d") + else: + item['timestamp'] = datetime.utcnow() item['_index'] = index - item['AccountId'] = str(item.get('AccountId')) - item['Policy'] = self.__environment_variables_dict.get('policy') + if item.get('AccountId'): + item['AccountId'] = str(item.get('AccountId')) + if 'account' not in item: + item['account'] = self.__account + item['policy'] = self.__environment_variables_dict.get('policy') response = bulk(self.__es, bulk_items) if response: total_uploaded += len(bulk_items) diff --git a/cloud_governance/main/environment_variables.py b/cloud_governance/main/environment_variables.py index fcbba8f8a..9666f3dc7 100644 --- a/cloud_governance/main/environment_variables.py +++ b/cloud_governance/main/environment_variables.py @@ -53,7 +53,7 @@ def __init__(self): 'empty_roles', 'ip_unattached', 'unused_nat_gateway', 'zombie_snapshots', 'skipped_resources', - 'monthly_report'] + 'monthly_report', 'optimize_resources_report'] es_index = 'cloud-governance-policy-es-index' self._environment_variables_dict['cost_policies'] = ['cost_explorer', 'cost_over_usage', 'cost_billing_reports', 'cost_explorer_payer_billings', 'spot_savings_analysis'] diff --git a/cloud_governance/main/test.json b/cloud_governance/main/test.json new file mode 100644 index 000000000..6b76820ad --- /dev/null +++ b/cloud_governance/main/test.json @@ -0,0 +1,39582 @@ +{ + "security": { + "rSs93HQwa1": { + "metadata": { + "id": "rSs93HQwa1", + "name": "Amazon RDS Public Snapshots", + "description": "Checks the permission settings for your Amazon Relational Database Service (Amazon RDS) DB snapshots and alerts you if any snapshots are marked as public. When you make a snapshot public, you give all AWS accounts and users access to all the data on the snapshot. If you want to share a snapshot with particular users or accounts, mark the snapshot as private, and then specify the user or accounts you want to share the snapshot data with.

Note

: Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.

\r\n

Alert Criteria


\r\nRed: The RDS snapshot is marked as public.

\r\n

Recommended Action


\r\nUnless you are certain you want to share all the data in the snapshot with all AWS accounts and users, modify the permissions: mark the snapshot as private, and then specify the accounts that you want to give permissions to. For more information, see Sharing a DB Snapshot or DB Cluster Snapshot. Note: For temporary technical reasons, items in this check cannot be excluded from view in the Trusted Advisor console.\n\nTo modify permissions for your snapshots directly, you can use a runbook in the AWS Systems Manager console. For more information, see AWSSupport-ModifyRDSSnapshotPermission.

\r\n

Additional Resources


\r\nBacking Up and Restoring Amazon RDS DB Instances", + "category": "security", + "metadata": [ + "Status", + "Region", + "DB Instance or Cluster ID", + "Snapshot ID" + ] + }, + "reports": { + "checkId": "rSs93HQwa1", + "timestamp": "2023-11-27T12:21:35Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c18d2gz124": { + "metadata": { + "id": "c18d2gz124", + "name": "Amazon VPC Peering Connections With DNS Resolution Disabled", + "description": "Checks if your VPC peering connections have DNS resolution turned on for both the acceptor and requester VPCs.
\n
\nDNS resolution for a VPC peering connection allows the resolution of public DNS hostnames to private IPv4 addresses when queried from your VPC. This allows the use of DNS names for communication between resources in peered VPCs. DNS resolution in your VPC peering connections makes application development and management simpler and less error-prone, and it ensures that resources always communicate privately over the VPC peering connection.
\n
\nYou can specify the vpcIds, using the \u201cvpcIds\" parameters in your AWS Config rules.
\n
For more information, see Enable DNS resolution for a VPC peering connection.
\n
\nSource
\nAWS Config Managed Rule: vpc-peering-dns-resolution-check
\n
\nAlert Criteria
\nYellow: DNS resolution is not enabled for both the acceptor and the requestor VPCs in a VPC peering connection.
\n
\nRecommended Action
\nTurn on DNS resolution for your VPC peering connections.
\n
\nAdditional Resources
\nEnabling DNS resolution for VPC peering connections
\nDNS attributes in Amazon VPC", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz124", + "status": "not_available" + } + }, + "a2sEc6ILx": { + "metadata": { + "id": "a2sEc6ILx", + "name": "ELB Listener Security", + "description": "Checks for load balancers with listeners that do not use recommended security configurations for encrypted communication. AWS recommends using a secure protocol (HTTPS or SSL), up-to-date security policies, and ciphers and protocols that are secure.
\nWhen you use a secure protocol for a front-end connection (client to load balancer), the requests are encrypted between your clients and the load balancer, which is more secure.
\nElastic Load Balancing provides predefined security policies with ciphers and protocols that adhere to AWS security best practices. New versions of predefined policies are released as new configurations become available.

\n

Alert Criteria


\nYellow: A load balancer has no listener that uses a secure protocol (HTTPS or SSL).
\nYellow: A load balancer listener uses an outdated predefined SSL security policy.
\nYellow: A load balancer listener uses a cipher or protocol that is not recommended.
\nRed: A load balancer listener uses an insecure cipher or protocol.

\n

Recommended Action

\n\nFor more information, see Listener Configurations for Elastic Load Balancing.

\n

Additional Resources


\nListener Configurations Quick Reference
\nUpdate SSL Negotiation Configuration of Your Load Balancer
\nSSL Negotiation Configurations for Elastic Load Balancing
\nSSL Security Policy Table
\n", + "category": "security", + "metadata": [ + "Region", + "Load Balancer Name", + "Load Balancer Port", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "a2sEc6ILx", + "timestamp": "2023-11-25T23:09:55Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 9, + "resourcesFlagged": 9, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "-g3rk8e-dufe3216gw7x-rM6mSY3Kl5p9ok6kIgduig", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "aec8c7ebf2eb149909978c8179bb82ca", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NAIETnU3OiaD43txm1K5sCftSFCDSlrIjrDbULxc9O8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a27abbe72757b46d0b11857a6e9887a3", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NF-6rde_6hxVf9igZSccSC-pf9lhzRnHlb0fEpeFPRI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a559ef1ae4b234f99985aae08493ea30", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "OvvT2_dRHU3AoZVoRqJ7QP2Bsgft2HMBUW9nqmiwtyE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a644ed01d193e4549a874e7e5a0eabe7", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Qfu8sAiwdhb59xYsYT6pg1PbmlDSBhjlIvyyHa90FLo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "af74f1f143f534387bd5a9ef8d0e3650", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "V-YPPwQXEAoeNl-FWmtt_EfVJgUQ5nyqNUj5xzLMmC4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a23e595fab3334f50994f255529fb7d0", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "cQ035GtwACCDDDyIJUjz1tZQcXhe94Sm4C8TxXaTaJ4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a3264560fd1c141809263bc702080f05", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "e3J5tIQpqcsGEHaPWVe2AR_P64DlQlqxWioxgzOFCp4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "abf84ee009fdb40549ca76bf10f341df", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "rRwRIfHePuY02t5LK067bPM9uC1ffHq-V_ADW-uDYGk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a4c60e1ef3747463bbfc7c3cca8762c2", + "-", + "Yellow", + "No listener uses a secure protocol" + ] + } + ] + } + }, + "ePs02jT06w": { + "metadata": { + "id": "ePs02jT06w", + "name": "Amazon EBS Public Snapshots", + "description": "Checks the permission settings for your Amazon Elastic Block Store (Amazon EBS) volume snapshots and alerts you if any snapshots are marked as public. When you make a snapshot public, you give all AWS accounts and users access to all the data on the snapshot. If you want to share a snapshot with particular users or accounts, mark the snapshot as private, and then specify the user or accounts you want to share the snapshot data with.

Note

: Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.

\r\n

Alert Criteria


\r\nRed: The EBS volume snapshot is marked as public.

\r\n

Recommended Action


\r\nUnless you are certain you want to share all the data in the snapshot with all AWS accounts and users, modify the permissions: mark the snapshot as private, and then specify the accounts that you want to give permissions to. For more information, see Sharing an Amazon EBS Snapshot. Note: For temporary technical reasons, items in this check cannot be excluded from view in the Trusted Advisor console.\n\nTo modify permissions for your snapshots directly, you can use a runbook in the AWS Systems Manager console. For more information, see AWSSupport-ModifyEBSSnapshotPermission.

\r\n

Additional Resources


\r\nAmazon EBS Snapshots", + "category": "security", + "metadata": [ + "Status", + "Region", + "Volume ID", + "Snapshot ID", + "Description" + ] + }, + "reports": { + "checkId": "ePs02jT06w", + "timestamp": "2023-11-27T12:21:46Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Wxdfp4B1L3": { + "metadata": { + "id": "Wxdfp4B1L3", + "name": "AWS Well-Architected high risk issues for security", + "description": "Checks for high risk issues (HRIs) for your workloads in the security pillar. This check is based on your AWS-Well Architected reviews. Your check results depend on whether you completed the workload evaluation with AWS Well-Architected.
\n
\n

Alert Criteria


\nRed: At least one active high risk issue was identified in the security pillar for AWS Well-Architected.
\nGreen: No active high risk issues were detected in the security pillar for AWS Well-Architected.
\n
\n

Recommended Action


\nAWS Well-Architected detected high risk issues during your workload evaluation. These issues present opportunities to reduce risk and save money. Sign in to the AWS Well-Architected tool to review your answers and take action to resolve your active issues.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Workload ARN", + "Workload Name", + "Reviewer Name", + "Workload Type", + "Workload Started Date", + "Workload Last Modified Date", + "Number of identified HRIs for Security", + "Number of HRIs resolved for Security", + "Number of questions answered for Security", + "Total number of questions in Security pillar", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Wxdfp4B1L3", + "timestamp": "2023-11-27T12:21:49Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "vjafUGJ9H0": { + "metadata": { + "id": "vjafUGJ9H0", + "name": "AWS CloudTrail Logging", + "description": "Checks for your use of AWS CloudTrail. CloudTrail provides increased visibility into activity in your AWS account by recording information about AWS API calls made on the account. You can use these logs to determine, for example, what actions a particular user has taken during a specified time period or which users have taken actions on a particular resource during a specified time period. Because CloudTrail delivers log files to an Amazon Simple Storage Service (Amazon S3) bucket, CloudTrail must have write permissions for the bucket. If a trail applies to all regions (the default when creating a new trail), the trail appears multiple times in the Trusted Advisor report.

\n

Alert Criteria


\nYellow: CloudTrail reports log delivery errors for a trail.
\nRed: A trail has not been created for a region, or logging is turned off for a trail.\n

\n

Recommended Action


\nTo create a trail and start logging from the console, go to the AWS CloudTrail console.
\nTo start logging, see Stopping and Starting Logging for a Trail.
\nIf you receive log delivery errors, check to make sure that the bucket exists and that the necessary policy is attached to the bucket; see Amazon S3 Bucket Policy.\n

\n

Additional Resources


\nAWS CloudTrail User Guide
\nSupported Regions
\nSupported Services", + "category": "security", + "metadata": [ + "Region", + "Trail Name", + "Logging Status", + "Bucket Name", + "Last Delivery Error", + "Status" + ] + }, + "reports": { + "checkId": "vjafUGJ9H0", + "timestamp": "2023-11-23T15:19:56Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 34, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "3JDZZlJFgCF1OGd6VYgvTDJ7xdQYKWXnURmE9nesMJo", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "BY3rHcNFlGIiB5o0dSW4q1HhrIEG_jRvzinRyGhkvN8", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "VP-3FCmmCiunGSnn4CJwCko5Evt47lIjKeTgAuxbqHg", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "mLL0zl4GcW7R0W9YY7HYBGtl52UtcQ12kTJ1Iy2jtYY", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-3", + "resourceId": "V_l7E6bB_SPpOnS27h3ZZIew_m2W04o48ws9PcAtjjY", + "isSuppressed": false, + "metadata": [ + "ap-northeast-3", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-3", + "resourceId": "qR2kk_eCxYG8piCFkLnXR_qJvD5TRipEyVU8S20S3qQ", + "isSuppressed": false, + "metadata": [ + "ap-northeast-3", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "CFFK0Xs_keOSbGaVAi1m-QaJAekfcFYDlGeK2tvAYVg", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "NAdrpt5aw0aweUefVXBTDjZZ806Ui7CjzD8aXyRDf-s", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "MRiAygQ40CWJ9a-jLghXQcej82NUrTXLCJzW3dVzt88", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "egSC3ByuSaayVzzdjcqrpojDsXEEPLxrGRyjrzpdy1A", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "jnVZYFmQVObYCCwFvbG5W2gkcmCCy7pS87jKZTyomvo", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "zPeVBzUBoYapjgyFUpzs9z7JBTPPQRtiCM3E7_Thzck", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "AS5EBE0NjcVippukMAudq-iRdtGCT6GQgaaLYPXxU-g", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "EQifeC6rlhKFvd95kTiTlMmgx35pDHLl9P5nY6g3WKs", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "Y73pBZnxSMWak_VbdT2nxATI4RzfTVUrj3O7rY3HSxI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "i3ANT-_rDo0xmAsn97DCOzEJH5InqkHLpBXhTOMOrIg", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "b5JhmTHyJyle_ZvK6VCOHqS0bibUf8YFByr4AvY25bQ", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "qiby0xZFgoy_JC7SsMFxJnb9_yxp4GQbFgyqEh7VBpk", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "KyqrwdkpunGjgqw7p7BpShUmIQCTQk_Vgp9Yi8z88KU", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "O5M0hy4BrtFLB35gObRsnLQnxHi2EIg08ALadf-M44w", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "OXnLCE-Q0GNX8_1XGypL1D4JxJFTt3jlcmUuUMP8OWM", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "7fLvPVCSfmAghd54AON0hURg79tp7aV1wMxBA3oZv8c", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "oAJqBSTjD_dqtXtfj-FIEmtQ6zVb7IaTz_UcT9BZwBE", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "H5LAt8Ba94Um_X2TchR9I0SK92tL7XjxTq4W1pyCpRA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "TyX2zecZbRIbpKNhwLnNvEnwOW0xw7MrARSUayW-44M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "Fn7sn3dXOkTFemvHFBuS_39be3OPFPAOjw3Vu5So12U", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "mxYFghPKBgPOrBITIDsLdntIFpSBagX7A42VuIO93lA", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "-UdC6HugUUP0K9T6Wp2oKUyIpgxJ04v28hAFJym0Onw", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "2oS8cmfYvOWLAW9kiBWWjNbKlkD518qux2uzS2KZu3g", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "x3eQarT1AfUyon2zv8UgvSqFk1yl7Ceio8IuxwY7T5M", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "LifgGJUqzoRcvyxHIn46P45YfGEbEhoS30dxxukacpE", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "dwygmrSX92ZPiZuj_T86wcYEtvTsdUPIVpHagxVsRHM", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "0EEgzhdNuH4wPHcu87YAKQfUt_TWZBw7VoTZUB1DWJM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "pnt-management-event", + "On", + "aws-cloudtrail-logs-329260820478-1882f2dc", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "qgTAGgxT-GCYpX8F-_2MnwY9AR5nYQDY7JfQ0itnchU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "openshift-perfscale-write", + "On", + "openshift-dev-cloudtrail", + null, + "Green" + ] + } + ] + } + }, + "7DAFEmoDos": { + "metadata": { + "id": "7DAFEmoDos", + "name": "MFA on Root Account", + "description": "Checks the root account and warns if multi-factor authentication (MFA) is not enabled. For increased security, we recommend that you protect your account by using MFA, which requires a user to enter a unique authentication code from their MFA hardware or virtual device when interacting with the AWS console and associated websites.\n
\n
\n

Alert Criteria


\nRed: MFA is not enabled on the root account.\n
\n
\n

Recommended Action


\nLog in to your root account and activate an MFA device. See Checking MFA Status and Setting Up an MFA Device.\n
\n
\n

Additional Resources


\nUsing Multi-Factor Authentication (MFA) Devices with AWS", + "category": "security", + "metadata": [] + }, + "reports": { + "checkId": "7DAFEmoDos", + "timestamp": "2023-11-25T01:58:44Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "resourceId": "47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU", + "isSuppressed": false + } + ] + } + }, + "Hs4Ma3G191": { + "metadata": { + "id": "Hs4Ma3G191", + "name": "RDS cluster snapshots and database snapshots should be encrypted at rest", + "description": "Checks if Amazon RDS cluster snapshots and database snapshots are encrypted.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G191", + "status": "not_available" + } + }, + "Hs4Ma3G192": { + "metadata": { + "id": "Hs4Ma3G192", + "name": "RDS DB Instances should prohibit public access, determined by the PubliclyAccessible configuration", + "description": "Checks if RDS instances are publicly accessible by evaluating the publiclyAccessible field in the instance configuration item.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G192", + "status": "not_available" + } + }, + "Hs4Ma3G193": { + "metadata": { + "id": "Hs4Ma3G193", + "name": "RDS DB instances should have encryption at-rest enabled", + "description": "Checks if storage encryption is enabled for your RDS DB instances.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G193", + "status": "not_available" + } + }, + "Hs4Ma3G194": { + "metadata": { + "id": "Hs4Ma3G194", + "name": "RDS snapshot should be private", + "description": "Checks if Amazon Relational Database Service (Amazon RDS) snapshots are public.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G194", + "status": "not_available" + } + }, + "Hs4Ma3G196": { + "metadata": { + "id": "Hs4Ma3G196", + "name": "AWS Config should be enabled", + "description": "Checks if the Config service is enabled in the account for the local region and is recording all resources.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Config.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G196", + "status": "not_available" + } + }, + "Hs4Ma3G197": { + "metadata": { + "id": "Hs4Ma3G197", + "name": "Amazon Elasticsearch Service domains should have encryption at-rest enabled", + "description": "Checks whether Amazon Elasticsearch Service domains have encryption at rest configuration enabled. This check fails if the EncryptionAtRestOptions field is not enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ES.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G197", + "status": "not_available" + } + }, + "Hs4Ma3G198": { + "metadata": { + "id": "Hs4Ma3G198", + "name": "RDS DB instances should have deletion protection enabled", + "description": "Checks if RDS DB instances have deletion protection enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.8
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G198", + "status": "not_available" + } + }, + "1iG5NDGVre": { + "metadata": { + "id": "1iG5NDGVre", + "name": "Security Groups - Unrestricted Access", + "description": "Checks security groups for rules that allow unrestricted access to a resource. Unrestricted access increases opportunities for malicious activity (hacking, denial-of-service attacks, loss of data).\n
\n
Note: This check only evaluates security groups that you create and their inbound rules for IPv4 addresses. Security groups created by AWS Directory Services are flagged as red or yellow, but they don\u2019t pose a security risk and can be safely ignored or excluded. For more information, see the Trusted Advisor FAQ.\n
\n
\n

Alert Criteria

\n
\nRed: A security group rule has a source IP address with a /0 suffix for ports other than 25, 80, or 443.\n
\n
\n

Recommended Action

\n
\nRestrict access to only those IP addresses that require it. To restrict access to a specific IP address, set the suffix to /32 (for example, 192.0.2.10/32). Be sure to delete overly permissive rules after creating rules that are more restrictive.\n
\n
\n

Additional Resources

\n
Amazon EC2 Security Groups
\nClassless Inter-Domain Routing (Wikipedia)", + "category": "security", + "metadata": [ + "Region", + "Security Group Name", + "Security Group ID", + "Protocol", + "Port", + "Status", + "IP Range" + ] + }, + "reports": { + "checkId": "1iG5NDGVre", + "timestamp": "2023-11-25T02:29:12Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 161, + "resourcesFlagged": 161, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "region": "ap-south-1", + "resourceId": "HWdH13jlvT02Ird1vSqWP3W4anjMqvfXXY532-FUA7Y", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "launch-wizard-1", + "sg-075c25f337499cbaa (vpc-0be74b8f596c5dc65)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "ap-south-1", + "resourceId": "hTUc6IXgCWxJgnW0wF18r_zLc7MwXnxGorUPfMxMmrI", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "launch-wizard", + "sg-006183f07495a8909 (vpc-0be74b8f596c5dc65)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "53vqageylv2ydDclkjgRP3kqXonzdd08XYizvx1RUok", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "5N3abfcU31MReDg3nYa5oS2AUs4ec7CIL_fr_0ZRC9w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "61MGGod4vzEWuVUHZGqJi0psgeimsdlskoGJZ7J9qJo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "71BPn6H2m7Xcjy8P_W_1RrE9_kNm3L2T7OgsEfUgAk8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9SONG1sfE9dKvoWrQxPLE2yNUupu6omBlVbb2OqfoTw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "D_EN-oiv86bhhpLiSrl8rhE3YWCb3y09xDfamhTWC1M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-postgresdb-sg", + "sg-0437e4eef941c1464 (vpc-078d4380da954500a)", + "tcp", + "5432", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "G1niB97IvUhIX1DqBiZGFx7_OXPikFDBAMYcA-ZV6UQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "GbacJk2tCQ_FffBJ0Ef1Nc7pI0OL41YxIXuv0nzOSNM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "HOv2D-Y8XOKQxHo3FxnR78Tqh0GaTmq8NqeyuCaBhMg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "I4uyKkR457agSFYV94gzPjfNev7mm2BnYWGcczx4LrU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "Red Hat Enterprise Linux 8-Red Hat Enterprise Linux 8.6 (HVM)-AutogenByAWSMP--1", + "sg-0b37c3c56846eed33 (vpc-0110b70e451ce71c3)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "OdRXsWhNeWXKRHVgo-tmXghOCv6L6uzAijP6Gz5wla8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-1", + "sg-01b1f17c035fdd379 (vpc-0d28ec8a3132ed005)", + "tcp", + "8080", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Su3CeWGWKFNJb65A-lXRUd77Oq6t4bWBrTWa9czEjTM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-1", + "sg-01b1f17c035fdd379 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "VKwJ5IgDA8CQb5Q2LNEh5ol8ul4ACHhREJCkUjCO3Rs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "a_W8d8kDvCHGbDU4Ec1r8S0hkBq3zjFGfsUqoY0x5Os", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "c5_-K2__kjY6N5SQ7-SvvJidrAyhdWLtg5YkjJkYrIk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "cNzD_zDQHuBFX7jokU7pWjWd99_MOU-Hvyvp2rmTqsE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "cVLhn-etY-OYm8XAWPHPZYF5TdTWDueC2Jvb_4tSC2Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "iV9C50vxqHUHV6W5Cl-xAYcgspfILU_iXJ1v4OmXojQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "iWXJBRoHrvYZaVfDF3rbcOafQJtsi0PgFhcuFk-oBrw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "locEnMST-igBkzkKzpV-rCzsR-OO9ikoR_S5NeiGpCg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "qYEG-EbajYT3RGR0wZffZCF4EHAu5CHB507krgdmxw0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-3", + "sg-03e4d0f89e6703a47 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "qiKLsQWjJ4jlWfkN0k_fRLF546yWUXgyrpDZzAV_1FY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "sw8E7fRARVqeRaIYeQq9oZIE62mzyRqiFA7yULB3XKM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "1TU9pOzApZsWT8VwH-rLn0Ep1Js6ABTUES-2EcEcFUw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "3BByg0pDVYGhc0KqLNZ03gCms-3D2gov0B3vdssPIpo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "4WS887IjsVFVYxeIivnRgfHSIzPG-yEyjMbPYMAb9J0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "5-Wp5ZNiURiInZ3_Q8HCYNnhQoLaQZBSiYPLsKvapSY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-19", + "sg-054f5210502979087 (vpc-0d105f6ab5d5cdd34)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9snwRYKbTGP9VCa9OezAygYphkoa-cetIwizXybdXdc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "A_JehHfGdMe3mFkMi3xoLQTItUVR7TG2xaQf7rKh-UU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "BQvrDwBKt2YT7QM9wSmJMpobRPYu0-dre2TnzClIUyw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "packer_5ffceeff-80c0-ddcc-b5c8-079e31130ab8", + "sg-0fe9da11ade5bda12 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "DMUsLH5-UDE2XCUP-D5cFvAISc0AneD8_A_Wo1Vjk0k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-2", + "sg-046e868fb318f2a2e (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ELUcpYCTkznBPo5KxlVp2chbr9myT-n0PQPyhtnmjnc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Ezr02g93Qqww_z3iP6sna8iQVtDhrcyRPdTZ4OADFQM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "FGrjigZI_O9n6h4MlPOQGtjQdPqAjjPEk5B1ccssgHw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "FmYrkrBX5s0szPNhcHMeh0JUoDsmkU466wxIYu6EUnM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-11", + "sg-00e7cca6411ee039e (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Hv_p-v3M1mYO2wNo4ZtGaJeNmiOeNk0fTqzZ-OPrarE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "InEPPsZixQ6Vtstnf_uybspDWjDXXkfmAMTsD6vr8_0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Nyv9gnAinFz8VOan58yjJPf_lSEpJP15VZYTIp5DoZc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Z9BcOyKWr9tmSevkXby71AGNfOqH26eWuvp-Ve40iI4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "azKqEoILXzfZQyywoZUMr4LlNzNgkqrF738ApMhjrjQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "emSJDdtjHKv7wZb4z8uvMRXCl_nz-KcP47rlOantU8c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "fqntEwL1v8_hkhR4hUuDg8tBmggcJMz_mvfMDEVmRFk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "i6XFV4CLSfK4sfrSpysmTpc6RHCodlfPG7umDL_jUuk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-21", + "sg-01a11e5a49481d8f3 (vpc-0110b70e451ce71c3)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "px84KRWtaYoMPO4e0nuK-NWZn2q5VU1ruJlqD5DfPEI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "q01Hk7o_owTRjvKiCb9KyrEgqi5-pAnkkUwO6lv7fKU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "tBRS2jxObf-PQpB7lNLxDgkt-kSug-zciOeiVWWVOAA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "world-ssh", + "sg-00c723d86bbc903f5 (vpc-057a4aaf47284b206)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "vb01frvk-dENAw1iHdjKuVd4e9vBomPPBdKtm_fh1V0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-20", + "sg-0d9f175e19739a047 (vpc-0ed346703b8a774f8)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "zrj0WldbNPGJ-JaqT_gP0bATCw5uHpusihO15Dh57S8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "-gUoJGNjS9qy8gl1sAwiSGdfsCzuTQjgKAKhl8lQG3g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-test", + "sg-04dc0854eb43b8a8a (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "0K07prK3UgztVnm_OCbBeVRrE7GsNTaQtsbOTX2rGAw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-6", + "sg-0cea0fbd56b47e179 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "24XNgc9rmdYBr5GBh9hET3tlD92dpJQm86u-jpOWLgQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "5756Q7XXEXoYs-fuHSYp9QGyekD_Hlpht7VCxf5fO_o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-14", + "sg-03cb02ea1f945c0ba (vpc-0110b70e451ce71c3)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "6aLzqgq_HGMAE01EY3L9cGsB8as8zXfp9qRbc2a0YxM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "7d5yX2Ecpr6qYwr4TuZ9kAtr9ukLi_HoRXbwkQ2dSHo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "7nuroVyCU3YoUZHZluZjpNfsTk72dqZdqzrwfjLdQV4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-15", + "sg-0941eadaf2a9c2404 (vpc-0110b70e451ce71c3)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Jy6Hb8WPmYe5UKkVTpIqP3De-usm0PejxoOwP591jyY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-test", + "sg-04dc0854eb43b8a8a (vpc-0d28ec8a3132ed005)", + "tcp", + "0-65535", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "MzTvv-SEpxo-dr2kcdg98B1-FqZMz-qoGCw6N9sMOfk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "NdoeD8PJgdMZz4cfseJ1cJmbgiW4a-HLBfvjEkFi2Yg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "OO0p4DT-x5SJY4AGAFbSxSTSdrvsoav4AxzTQ4tXmJ4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-16", + "sg-041a5af9f846805f0 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "PtUniGJ3Q-apqUjhftlReNQhr0SjwbwhLXzHd36mE38", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "UV3QYixFYBjd95h8-5X17ifmdUgJ3RYc5biOe-RllQI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-14", + "sg-03cb02ea1f945c0ba (vpc-0110b70e451ce71c3)", + "tcp", + "1433", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "W33NumqMPFn85-KHfDq1Vqx9A8ZbEGKR72Qz1r59dP8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-quay-sg", + "sg-07bcfa0f78871ccaf (vpc-0fea556d697f714be)", + "tcp", + "55443", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "hO09Hbee96TFk7hwk66mi5by3clBA7co3ZFtyIiiloI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "lo2XS0-dqvuWwAmau2Ax3iCM8HO6JmFI64K1Jzpoyms", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "m-D5ATF28-fisTwOl6q7BneVQ5HuPHFzSCqXSU7g1_k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-5", + "sg-0ada859d4d1c1ed81 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "owbCfM0vnzT1Ji0c7VoTyQoCq-EG1D2eVWJ9bE-4ShQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-13", + "sg-0ef8de454188f1760 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "p7em6PITII4NrXV-yBTNDKDhNiQLWWoiK6Q4QRUFINo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-18", + "sg-0172e829aa7313e80 (vpc-0110b70e451ce71c3)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ph182wdncGa2JGADgipib9DL2LZt3WF9mhaRCc_oMno", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-quay-sg", + "sg-07bcfa0f78871ccaf (vpc-0fea556d697f714be)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "pux9donFsiDBEKeaBRwTVAr3EmWTVPXacDTq7HB81PA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "qICPP5f69oUgqfl6qWxdNoklKhiTE32QmycjAzJAhSs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ur0NjEg1uaSjd8qD8ialiiRI4MYZp016P0tqQkQJIKw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "vvead6rImqw1c_OprYGGMZSux7jxmpDuN1uxgqLTgXc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ztWFmohpGp9SYX2JiGem9iXNgMqqJ_0DMh4N5u4RvBM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "7d7LzoPpfjDI0xsvTf-ZhnG8ky35yEEbMt-UeByeH7Y", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "BWyJSP43-N5cOSptDxpBz8eIUKWBqoiyQPzvcKE0W-k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "FQ8pOfL3a--TMv2XNfV3I7fn-cUBDs8YVLVGs685yFE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "FSHNpsUOmd3MzauITLdL7PpSRL2Ksj8YYfcJG0LD93w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "GT4aW6hvsXuX_UjdFe2_nuoity8BdOmBss9F_h6S4Io", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "H3jJXu8kuYgfp-dLdHBh_N7hRjxEOtVLCSn1Q5xvr6w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "M-guEjTh1pOYlzhWYxGk3l_VR_8-VjwZXJRqr2-AAZk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "OHpNBLqmp7_TeSkwbGAcTJByNyHBzFhJUwNPFgqXAH8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "QR132GAPBYWJ-2ULfpA7-zs57RztSYCKND7e2qUJT_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "WR2I_5EWk-MXpWUNeBnO0WDcaW7hG82TLSsV82u_THM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "bsRdE9RfmfuMpYaQDFQ20NJMLLS3JM87tqAntXseeME", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "d7p1q9WTDRXRaBCdq61GLHjF3s537SW5kbDHmDR4pL4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "e-rDC5tk2IJxLAp7qoV1vdMrq90ROHiOfPQGO-beiZA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-8", + "sg-0cfe72cfcf6f588f4 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "fWdEnKLsn16DdnFXXNwTR_HIJPCv4RDxiAAkU_XJ1hA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "mOrbZoAlW5IcaROJN0Caek7-kBdaH3gNTZGyYZgGu-w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "mTxqe7x_MYl0pFvc0Oi-SC2JZIKWC3t26bzLDzBMR1c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "mcDizkijAno3wM-LMTvtF0gwzRT0KCD5KSe6jb55vPQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-23", + "sg-0a814e44bfb35c2c5 (vpc-0d105f6ab5d5cdd34)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "nx6JwqnwCKRFZLObuxRU6833xsN_WBTUqu4TvbAdCLE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "oBeVvRFYWZh6KosHfVCPG_WBGIohsLiyKDwGDwPIv9A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "p0UqySvtTUoS8zuuS66Xg7R_iF_Ufnv051eNpv33o6I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "qdFqZxkRBfmHzCzu3-wMPTe7wV8e0iOulHNwCmwfrAI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "rQiQeGDr3cV7X3Njb93EfGo5A3Dal8428Wodx099hCw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "wvP6WtNa6M4sTLgDNjt8rf5HX6viWYxDckGSHPGZXLA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "xKrn06XIwwKOSALnNqARSC5RIOtJ7O0UIA60mgzCcak", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "zMtL3ZeWbaP4iFcyVK6e6p3aLk0gXVZbxaJFcfFy7UE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "0YoavOW8VXezwzk4pII-K2hTdtocpg4Nhv-rTL2SU9o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "1_pODlrOsr99gN9hZ8Fvh6h1U9ObTwJ0vqViYd2-GJU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-scale-default-sg", + "sg-0eb99f967d4d63fcc (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "49luZAlMTVAdHcz0jTPDfWPIBoMAhEvkn5xqmWIbOAs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "CrTS2fTrjXitgXgQz-b1SopgQPUYFUIoPdVBKNohQd8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Drl1LdmwX-rv-KK65W5kqrMah93vQtgMZF_Y8tEoXIg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-24", + "sg-08bac0e3d7045dd68 (vpc-0b5ad039fa2fd8015)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "GHu8wTw4VHJ98GZpVQh1o6VURTCG1IMe3rjNLjY-ifY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-sg", + "sg-0967e4aa3e05e961d (vpc-07e3aa3047564af94)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "HdTtPcefXHLfL0qmbTMOKxEi8jpmSAg2Y9Wa70yHTaU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "L4NiKTcUZmnFMbjuF3902EPfva2KYTc3gxQ2htqmeJk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-7", + "sg-008aaf5cecdd3af3f (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "NS6MJSyDLOEF0hsxtgnfwiHBqbvhXwQblEhQCfUSR4M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "PZxS-wrYaWOXDKGMad5VN3CbSaE4y5f_vZD6Z4Ky1Ac", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-10", + "sg-073ce34eb41b9d23a (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "PmgTN9Yvpxb60v_vkH4_Bsv1iFUsbPUEbeTHfJBDVTg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-17", + "sg-0a82879d99a738c39 (vpc-07e3aa3047564af94)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "QqobIWHnzhOaNGMV1STW5SMaRkSKayiFGhH9_UIcOgo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "udp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "SMWp1QJ3fHnX7_4YanNrwe_-A6RyN2yqE2otc1reMeE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "32768-60999", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "UwAwWFsp7_pf1TVD1fU6fx4vlOqremAqa7Bsa5yO958", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "2022", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ZmEh1u4H1LN3Lbcd-DwDBUQXvCP_9kPtTSGYdcFPCAg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ZnTh0xGxs1ZI3lllJrCZy488wykpWfqvZkLViShgPs0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-12", + "sg-04215bd573a70f5cc (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "d49zVBup5qPR30mkQAXe2tW2-NlLIV-Rb56jwkbMKVc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "Fedora 34 Cloud Base Images (x86_64) HVM-34-1.2-AutogenByAWSMP--1", + "sg-07f77daaecb61b3bf (vpc-0b5ad039fa2fd8015)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "fU6KMwMNLDCFtu6oty1aexixSG38yEqNGslnTjt7528", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-scale-default-sg", + "sg-0eb99f967d4d63fcc (vpc-0d28ec8a3132ed005)", + "tcp", + "0-65535", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "gQSdefWhoTrvpYJ4CDQbBCVs0PPSA5tmb2btEKJZLic", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "udp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "gprdgOhLWZHgz809AYXmUKYUotsbSicW4S0BQQLqtpk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-9", + "sg-02c0508c7f8f65db2 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "pOxwxfjWfqENGaJ1ZErcHwYMVciULWdPnH3iE7n_jFs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-17", + "sg-0a82879d99a738c39 (vpc-07e3aa3047564af94)", + "tcp", + "0-65535", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "rzGP4sPFFaradKsYyTGMV4AMCliYEIGl0lFbpjXImdc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-scale-default-sg", + "sg-0eb99f967d4d63fcc (vpc-0d28ec8a3132ed005)", + "tcp", + "8080", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ucAzy-YwdKbORxjJiT3yYe8hqOoyTwZI3mkHEyNWwVA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "vpgiywHS47YRFf_rQyEZVT0AxY4eiAvsqb479bfE-tk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-sg", + "sg-0967e4aa3e05e961d (vpc-07e3aa3047564af94)", + "tcp", + "0-65535", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "zzGm-AqLJ6XvJ2N9YNBLQyVjvizOaWJX-J4v-PjKHGI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "0-30109", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "ap-southeast-1", + "resourceId": "Ymx8vff3XuheY2URzqzjkqc_uY4jaAvqIehvXeZZ5AI", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "launch-wizard-1", + "sg-07776145ed3d6b775 (vpc-0a88c546022f8571f)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "0C_ze3_0ZrvwLY40Xl_ue0emP7veNZZFEKEPr9MqbGI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "32085", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "1baGLmK3QOb_NxYvB9FSrAFovsbo6edQ2XIIT3biGZA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "30831", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "LkIpa9Pi0CbYCeHl3zaQPQVAcl_8CXEmYI1AL4ZVXdo", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "31233", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "NBE8xqnuAmh_2-KBToO2MzXVQ7TA-JUUkBYWXGD6m4U", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "30317", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "dmyLv4dc9fGWhiY5r3EhyTi1kpP4bmB7cgtVj2NPg1M", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "30647", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "evPdonwZ44LdUjKP9EnD6pyFmnVq6uk6-dG9aB7FryU", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "31067", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "gBKHxtJhcYrOJm46ZBA7oujEodXIwXBCRYN-m8oUmHk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "31122", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "jTmybQVdme8iZvr8zimdDwCQVshdu4AphQdgl1daTps", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "30671", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "mD4pvJrjAOiyT2IutXM45DubfgVSyyw60AfZd2Uldik", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "30316", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "q-i2SJ2219_H-yGpbnYVPUvRqS7CDK5HPEKJQcMu-WY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "32046", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-1", + "resourceId": "xTFAbM6nKt_reEMnbmW6sXkiWT-KT_R19GrI5CNt49s", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "launch-wizard-1", + "sg-0bf1fa63b9deeec04 (vpc-03135e2422fc15ede)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-1", + "resourceId": "ymowyA3OgFxgu3ppzvoXadotLYjuTJEe3iKpvyF7gO0", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "sejug", + "sg-072e35a1132703c3d (vpc-03135e2422fc15ede)", + "udp", + "47288", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-1", + "resourceId": "znfgcIffC2vi0F8LDMIGd5mdt_7XyJ1zQQBEX9u8N_M", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "Red Hat Enterprise Linux 8-Red Hat Enterprise Linux 8.6 (HVM)-AutogenByAWSMP--1", + "sg-0198d651d99c2759e (vpc-03135e2422fc15ede)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "3KNZVHafYYehxAz6LGAa4nFMwy4KwCk2aNB8EcWSvjo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "30166", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "8ANVq7sL0AlV6SQgbjU_9NtCmYMkcUoToItm0Nw5mJU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "30284", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "8DFuUna_U-AfeJZ4o5iCOKVVX9YhYvbcsD0KTyBdAcQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "30152", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "LAoRFtMUl9GBFaeJks56sAuDBLkyD007wGpUl3E5foc", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-02638f9cf5ff0436a (vpc-03e2566895d79e820)", + "tcp", + "10000-61000", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "ZNs7Tk6VzPMhRDt7K2J591JGbHc7-drmGXvCrMX3KXI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "30687", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "cq-PK17IO-gXuIPMqjQqbWUB_U3DjVWnj4nsI-2LZW8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-02638f9cf5ff0436a (vpc-03e2566895d79e820)", + "udp", + "10000-61000", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "gxPJ9OySJcIa-FOx8jNobrtwqTFtBmxUmN6dydvZDrY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "30526", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "-UOVteX_XEfWJcpw6ervpVp3-JLXgLtlS_wQVgLTUOw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-4", + "sg-0806b491299e642c8 (vpc-0d28ec8a3132ed005)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "kstS1WcLFvuxjmy_FVRnNZes9JDN9I2c50yi6zH4QiA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-22", + "sg-01c880d9fb83e1566 (vpc-0110b70e451ce71c3)", + "tcp", + "22", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "p1OutoZXsaZeWgKqx945-fBl1-oKpdXspjRUHeKZIfg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a23e595fab3334f50994f255529fb7d0", + "sg-0c4ee156752ae0cf5 (vpc-0ddda14d2de356963)", + "tcp", + "7004", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "wuqBWwJOLsErtLDH566h3ZtCkhK_pX4WKJVqEGBafFc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a23e595fab3334f50994f255529fb7d0", + "sg-0c4ee156752ae0cf5 (vpc-0ddda14d2de356963)", + "tcp", + "8444", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "3FSojAzaO7q4g3nzoZoJQ7omMaVrKXQJO0aR6bLV4AA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "32555", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "6Li9nYojHyKk3w7jXOTQRy_OSAzZSDt350HOxT8Dv68", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "30174", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "9-sZam0HU4vv1TqvyVdqq75VfcCEi-ceL-XJGpRRolE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "30633", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "KILfsXaWJm1so2K-_wliH7xTdvrXB9xslMUWZoh9eWs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "31607", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "TkHTMk3ynPeMp1kT1JnTcfq9vXy0FuExoOaee9dCzVA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "32738", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "U084o2vQEK56qSHLuciLgdQ-Yg8iNalhA3eqoA91Lnw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "32452", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "Wx17ksCE0Acd7xAHzgjNIDLi3i1x8pan8J5dfBgU2V0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "31566", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "d7GS5LCpnxNB1dAACqfBTT7hfLvTits8VNVqJb4PXgU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "31677", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "kQuUXoFXL_wamHo-FTfJiAaLvstXHPnMftKat4xjTWI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "32766", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "rOI8MQQmJWrriF7QUlJE-e92u52VLns3rwtT-j1U4cE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "32582", + "Red", + "0.0.0.0/0" + ] + }, + { + "status": "error", + "region": "us-east-2", + "resourceId": "zTSKsm5tNeSvUJO_dx986cALjFjrr1kbe-QLgMXOmXg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "32095", + "Red", + "0.0.0.0/0" + ] + } + ] + } + }, + "Hs4Ma3G190": { + "metadata": { + "id": "Hs4Ma3G190", + "name": "RDS clusters should have deletion protection enabled", + "description": "Checks if RDS clusters have deletion protection enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.7
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G190", + "status": "not_available" + } + }, + "nNauJisYIT": { + "metadata": { + "id": "nNauJisYIT", + "name": "Amazon RDS Security Group Access Risk", + "description": "Checks security group configurations for Amazon Relational Database Service (Amazon RDS) and warns when a security group rule might grant overly permissive access to your database. Recommended configuration for any security group rule is to allow access from specific Amazon Elastic Compute Cloud (Amazon EC2) security groups or from a specific IP address.\n
\n
\n

Alert Criteria


\nYellow: A DB security group rule references an Amazon EC2 security group that grants global access on one of these ports: 20, 21, 22, 1433, 1434, 3306, 3389, 4333, 5432, 5500.\n
\nYellow: A DB security group rule grants access to more than a single IP address (the CIDR rule suffix is not /0 or /32).\n
\nRed: A DB security group rule grants global access (the CIDR rule suffix is /0).\n
\n
\n

Recommended Action


\nReview your security group rules and restrict access to authorized IP addresses or IP ranges. To edit a security group, use the AuthorizeDBSecurityGroupIngress API or the AWS Management Console. For more information, see Working with DB Security Groups.\n
\n
\n

Additional Resources


\nAmazon RDS Security Groups
\nClassless Inter-Domain Routing
\nList of TCP and UDP port numbers", + "category": "security", + "metadata": [ + "Region", + "RDS Security Group Name", + "Ingress Rule", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "nNauJisYIT", + "timestamp": "2023-11-24T05:01:01Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Hs4Ma3G188": { + "metadata": { + "id": "Hs4Ma3G188", + "name": "GuardDuty should be enabled", + "description": "Checks if Amazon GuardDuty is enabled in your AWS account and region.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: GuardDuty.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G188", + "status": "not_available" + } + }, + "Hs4Ma3G189": { + "metadata": { + "id": "Hs4Ma3G189", + "name": "Enhanced monitoring should be configured for RDS DB instances", + "description": "Checks if enhanced monitoring is enabled for your RDS DB instances.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.6
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G189", + "status": "not_available" + } + }, + "Hs4Ma3G199": { + "metadata": { + "id": "Hs4Ma3G199", + "name": "Database logging should be enabled", + "description": "Checks if the following Amazon RDS logs are enabled and sent to CloudWatch Logs: Oracle: (Alert, Audit, Trace, Listener), PostgreSQL: (Postgresql, Upgrade), MySQL: (Audit, Error, General, SlowQuery), MariaDB: (Audit, Error, General, SlowQuery), SQL Server: (Error, Agent), Aurora: (Audit, Error, General, SlowQuery), Aurora-MySQL: (Audit, Error, General, SlowQuery), Aurora-PostgreSQL: (Postgresql).
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.9
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G199", + "status": "not_available" + } + }, + "Hs4Ma3G290": { + "metadata": { + "id": "Hs4Ma3G290", + "name": "ElastiCache clusters should not use the default subnet group", + "description": "Checks if ElastiCache clusters are configured with a custom subnet group. The check fails for an ElastiCache cluster if 'CacheSubnetGroupName' has the value 'default'.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ElastiCache.7
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G290", + "status": "not_available" + } + }, + "Hs4Ma3G291": { + "metadata": { + "id": "Hs4Ma3G291", + "name": "Elastic Beanstalk should stream logs to CloudWatch", + "description": "Checks if an AWS Elastic Beanstalk environment is configured to send logs to CloudWatch Logs. The check fails if the Elastic Beanstalk environment is not configured to send logs to CloudWatch Logs.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ElasticBeanstalk.3
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G291", + "status": "not_available" + } + }, + "Hs4Ma3G170": { + "metadata": { + "id": "Hs4Ma3G170", + "name": "S3 Block Public Access setting should be enabled", + "description": "Checks if the following public access block settings are configured from account level: ignorePublicAcls: True, blockPublicPolicy: True, blockPublicAcls: True, restrictPublicBuckets: True.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: S3.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G170", + "status": "not_available" + } + }, + "Hs4Ma3G292": { + "metadata": { + "id": "Hs4Ma3G292", + "name": "Redshift clusters should be encrypted at rest", + "description": "Checks if an Amazon Redshift cluster is encrypted at rest. The check fails if a Redshift cluster isn't encrypted at rest.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Redshift.10
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G292", + "status": "not_available" + } + }, + "Hs4Ma3G171": { + "metadata": { + "id": "Hs4Ma3G171", + "name": "S3 buckets should prohibit public read access", + "description": "Checks if your S3 buckets allow public read access by evaluating the Block Public Access settings, the bucket policy, and the bucket access check list (ACL).
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: S3.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G171", + "status": "not_available" + } + }, + "Hs4Ma3G293": { + "metadata": { + "id": "Hs4Ma3G293", + "name": "Step Functions state machines should have logging turned on", + "description": "This controls assesses if an AWS Step Functions state machine has logging turned on. The check fails if a state machine doesn't have logging turned on.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: StepFunctions.1
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G293", + "status": "not_available" + } + }, + "Hs4Ma3G172": { + "metadata": { + "id": "Hs4Ma3G172", + "name": "S3 buckets should prohibit public write access", + "description": "Checks if your S3 buckets allow public write access by evaluating the Block Public Access settings, the bucket policy, and the bucket access check list (ACL).
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: S3.3
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G172", + "status": "not_available" + } + }, + "Hs4Ma3G294": { + "metadata": { + "id": "Hs4Ma3G294", + "name": "Athena workgroups should be encrypted at rest", + "description": "Checks if an Athena workgroup is encrypted at rest. The check fails if an Athena workgroup isn\u2019t encrypted at rest.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Athena.1
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G294", + "status": "not_available" + } + }, + "Hs4Ma3G173": { + "metadata": { + "id": "Hs4Ma3G173", + "name": "S3 Block Public Access setting should be enabled at the bucket-level", + "description": "Checks if Amazon S3 buckets have bucket level public access blocks applied. This check fails if any of the bucket level settings are set to \"false\" public: ignorePublicAcls, blockPublicPolicy, blockPublicAcls, restrictPublicBuckets.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: S3.8
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G173", + "status": "not_available" + } + }, + "Hs4Ma3G295": { + "metadata": { + "id": "Hs4Ma3G295", + "name": "Amazon DocumentDB clusters should be encrypted at rest", + "description": "Checks if an Amazon DocumentDB cluster is encrypted at rest. The check fails if an Amazon DocumentDB cluster isn't encrypted at rest.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: DocumentDB.1
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G295", + "status": "not_available" + } + }, + "Hs4Ma3G174": { + "metadata": { + "id": "Hs4Ma3G174", + "name": "CodeBuild GitHub or Bitbucket source repository URLs should use OAuth", + "description": "Checks if the GitHub or Bitbucket source repository URL contains either personal access tokens or user name and password.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CodeBuild.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G174", + "status": "not_available" + } + }, + "Hs4Ma3G296": { + "metadata": { + "id": "Hs4Ma3G296", + "name": "Neptune DB clusters should be encrypted at rest", + "description": "Checks if a Neptune DB cluster is encrypted at rest. The check fails if a Neptune DB cluster isn't encrypted at rest.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Neptune.1
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G296", + "status": "not_available" + } + }, + "Hs4Ma3G175": { + "metadata": { + "id": "Hs4Ma3G175", + "name": "CodeBuild project environment variables should not contain clear text credentials", + "description": "Checks if the project contains environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CodeBuild.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G175", + "status": "not_available" + } + }, + "Hs4Ma3G297": { + "metadata": { + "id": "Hs4Ma3G297", + "name": "Neptune DB clusters should publish audit logs to CloudWatch Logs", + "description": "Checks if a Neptune DB cluster publishes audit logs to Amazon CloudWatch Logs. The check fails if a Neptune DB cluster doesn't publish audit logs to CloudWatch Logs. `EnableCloudWatchLogsExport` should be set to Audit.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Neptune.2
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G297", + "status": "not_available" + } + }, + "Hs4Ma3G176": { + "metadata": { + "id": "Hs4Ma3G176", + "name": "ACM certificates should be renewed after a specified time period", + "description": "Checks if ACM Certificates in your account are marked for expiration within a specified time period. Certificates provided by ACM are automatically renewed. ACM does not automatically renew certificates that you import.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ACM.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G176", + "status": "not_available" + } + }, + "Hs4Ma3G287": { + "metadata": { + "id": "Hs4Ma3G287", + "name": "ElastiCache replication groups should have encryption-at-rest enabled", + "description": "Checks if ElastiCache replication groups have encryption-at-rest enabled. This check fails if encryption-at-rest is not enabled for a ElastiCache replication group.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ElastiCache.4
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G287", + "status": "not_available" + } + }, + "Hs4Ma3G166": { + "metadata": { + "id": "Hs4Ma3G166", + "name": "An RDS event notifications subscription should be configured for critical cluster events", + "description": "Checks if an Amazon RDS Event subscription for RDS clusters is configured to notify on event categories of both \"maintenance\" and \"failure\".
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.19
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G166", + "status": "not_available" + } + }, + "Hs4Ma3G288": { + "metadata": { + "id": "Hs4Ma3G288", + "name": "ElastiCache replication groups should have encryption-in-transit enabled", + "description": "Checks if ElastiCache replication groups have encryption-in-transit enabled. This check fails if encryption-in-transit is not enabled for a ElastiCache replication group.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ElastiCache.5
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G288", + "status": "not_available" + } + }, + "Hs4Ma3G289": { + "metadata": { + "id": "Hs4Ma3G289", + "name": "ElastiCache replication groups of earlier Redis versions should have Redis AUTH enabled", + "description": "Checks if ElastiCache replication groups have Redis AUTH enabled. The check fails for an ElastiCache replication group if the Redis version of its nodes is below 6 and 'AuthToken' is not in use.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ElastiCache.6
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G289", + "status": "not_available" + } + }, + "Hs4Ma3G168": { + "metadata": { + "id": "Hs4Ma3G168", + "name": "S3 buckets should require requests to use Secure Socket Layer", + "description": "Checks if S3 buckets have policies that require requests to use Secure Socket Layer (SSL).
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: S3.5
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G168", + "status": "not_available" + } + }, + "Hs4Ma3G169": { + "metadata": { + "id": "Hs4Ma3G169", + "name": "S3 permissions granted to other AWS accounts in bucket policies should be restricted", + "description": "Checks if the S3 bucket policy allows sensitive bucket-level or object-level actions from a principal in another AWS account. The check fails if any of the following actions are allowed in the S3 bucket policy for a principal in another AWS account: s3:DeleteBucketPolicy, s3:PutBucketAcl, s3:PutBucketPolicy, s3:PutObjectAcl, and s3:PutEncryptionConfiguration.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: S3.6
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G169", + "status": "not_available" + } + }, + "Hs4Ma3G180": { + "metadata": { + "id": "Hs4Ma3G180", + "name": "Amazon Elasticsearch Service domain error logging to CloudWatch Logs should be enabled", + "description": "Checks whether Amazon Elasticsearch Service domains are configured to send error logs to CloudWatch Logs.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ES.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G180", + "status": "not_available" + } + }, + "Hs4Ma3G181": { + "metadata": { + "id": "Hs4Ma3G181", + "name": "Classic Load Balancers with SSL/HTTPS listeners should use a certificate provided by AWS Certificate Manager", + "description": "Checks if a Classic Load Balancer uses HTTPS/SSL certificates provided by AWS Certificate Manager. The check fails if a Classic Load Balancer that is configured with an HTTPS/SSL listener does not use a certificate provided by AWS Certificate Manager.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ELB.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G181", + "status": "not_available" + } + }, + "Hs4Ma3G182": { + "metadata": { + "id": "Hs4Ma3G182", + "name": "Classic Load Balancer listeners should be configured with HTTPS or TLS termination", + "description": "Checks if your Classic Load Balancer listeners are configured with HTTPS or TLS protocol for front-end (client to load balancer) connections. The check is applicable if a Classic Load Balancer has listeners. If your Classic Load Balancer does not have a listener configured, then the check does not report any findings.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ELB.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G182", + "status": "not_available" + } + }, + "Hs4Ma3G183": { + "metadata": { + "id": "Hs4Ma3G183", + "name": "Application load balancer should be configured to drop http headers", + "description": "This check evaluates AWS Application Load Balancers (ALB) to ensure they are configured to drop http headers. By default, ALBs are not configured to drop invalid http header values. This check evaluates all ALBs fails if the attribute value of routing.http.drop_invalid_header_fields.enabled is set to false.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ELB.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G183", + "status": "not_available" + } + }, + "Hs4Ma3G184": { + "metadata": { + "id": "Hs4Ma3G184", + "name": "Application and Classic Load Balancers logging should be enabled", + "description": "Checks if the Application Load Balancer and the Classic Load Balancer have logging enabled. The check fails if the access_logs.s3.enabled is false.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ELB.5
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G184", + "status": "not_available" + } + }, + "Hs4Ma3G185": { + "metadata": { + "id": "Hs4Ma3G185", + "name": "IAM customer managed policies that you create should not allow wildcard actions for services", + "description": "Checks if the IAM identity-based custom policies have Allow statements that grant permissions for all actions on a service. The check fails if any policy statement includes \"Effect\": \"Allow\" with \"Action\": \"Service:\".
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.21
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G185", + "status": "not_available" + } + }, + "Hs4Ma3G186": { + "metadata": { + "id": "Hs4Ma3G186", + "name": "AWS WAF Classic Global Web ACL logging should be enabled", + "description": "Checks if logging is enabled for a WAF global Web ACL. This check fails if logging is not enabled for the Web ACL.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: WAF.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G186", + "status": "not_available" + } + }, + "Hs4Ma3G187": { + "metadata": { + "id": "Hs4Ma3G187", + "name": "Connections to Amazon Elasticsearch Service domains should be encrypted using TLS 1.2", + "description": "Checks whether connections to Amazon Elasticsearch Service domains are required to use TLS 1.2. The check fails if the Amazon Elasticsearch Service domain TLSSecurityPolicy is not Policy-Min-TLS-1-2-2019-07.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ES.8
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G187", + "status": "not_available" + } + }, + "Hs4Ma3G298": { + "metadata": { + "id": "Hs4Ma3G298", + "name": "Neptune DB cluster snapshots should not be public", + "description": "Checks if a Neptune manual DB cluster snapshot is public. The check fails if a Neptune manual DB cluster snapshot is public.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Neptune.3
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G298", + "status": "not_available" + } + }, + "Hs4Ma3G177": { + "metadata": { + "id": "Hs4Ma3G177", + "name": "Auto scaling groups associated with a load balancer should use load balancer health checks", + "description": "Checks if your Auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: AutoScaling.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G177", + "status": "not_available" + } + }, + "Hs4Ma3G299": { + "metadata": { + "id": "Hs4Ma3G299", + "name": "Neptune DB clusters should have deletion protection enabled", + "description": "Checks if a Neptune DB cluster has deletion protection enabled. The check fails if a Neptune DB cluster doesn't have deletion protection enabled.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Neptune.4
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G299", + "status": "not_available" + } + }, + "Hs4Ma3G178": { + "metadata": { + "id": "Hs4Ma3G178", + "name": "Security groups should only allow unrestricted incoming traffic for authorized ports", + "description": "Checks if the security groups allow unrestricted incoming traffic. The check fails if ports allow unrestricted traffic on ports other than 80 and 443, which are default values for parameter authorizedTcpPorts.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.18
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G178", + "status": "not_available" + } + }, + "Hs4Ma3G179": { + "metadata": { + "id": "Hs4Ma3G179", + "name": "SNS topics should be encrypted at-rest using AWS KMS", + "description": "Checks if an Amazon SNS topic is encrypted at rest using AWS KMS.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SNS.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G179", + "status": "not_available" + } + }, + "N430c450f2": { + "metadata": { + "id": "N430c450f2", + "name": "CloudFront SSL Certificate on the Origin Server", + "description": "Checks your origin server for SSL certificates that are expired, about to expire, missing, or that use outdated encryption. If a certificate is expired, CloudFront responds to requests for your content with HTTP status code 502, Bad Gateway. Certificates that were encrypted by using the SHA-1 hashing algorithm are being deprecated by web browsers such as Chrome and Firefox. Depending on the number of SSL certificates that you have associated with your CloudFront distributions, this check might add a few cents per month to your bill with your web hosting provider, for example, AWS if you're using EC2 or ELB as the origin for your CloudFront distribution. This check does not validate your origin certificate chain or certificate authorities; you can check these in your CloudFront configuration.
\n
\n

Alert Criteria


\nRed: An SSL certificate on your origin has expired or is missing.
\nYellow: An SSL certificate on your origin expires in the next thirty days.
\nYellow: An SSL certificate on your origin was encrypted by using the SHA-1 hashing algorithm.
\nYellow: An SSL certificate on your origin can't be located. The connection might have failed due to timeout, or other HTTPS connection problems.
\n
\n

Recommended Action


\nRenew the certificate on your origin if it has expired or is about to expire.
\nAdd a certificate if one does not exist.
\nReplace a certificate that was encrypted by using the SHA-1 hashing algorithm with a certificate that is encrypted by using the SHA-256 hashing algorithm.
\n
\n

Additional Resources


\nUsing Alternate Domain Names and HTTPS", + "category": "security", + "metadata": [ + "Status", + "Distribution ID", + "Distribution Domain Name", + "Origin", + "Reason" + ] + }, + "reports": { + "checkId": "N430c450f2", + "timestamp": "2023-11-22T00:01:22Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt003": { + "metadata": { + "id": "c1qf5bt003", + "name": "Amazon RDS engine minor version upgrade is required", + "description": "Your database resources aren't running the latest minor DB engine version. The latest minor version contains the latest security fixes and other improvements.
\n
\n

Alert Criteria


\nRed: RDS resources aren't running the latest minor DB engine version
\n
\n

Recommended Action


\nUpgrade to latest engine version
\n
\n

Additional Resources



We recommend that you maintain your database with the latest DB engine minor version as this version includes the latest security and functionality fixes. The DB engine minor version upgrades contain only the changes which are backward-compatible with earlier minor versions of the same major version of the DB engine.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Engine Version Current", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt003", + "timestamp": "2023-11-27T11:22:38Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Red", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:vchalla-quay-quay-db", + "mysql", + "5.7.38", + "5.7.42", + "2023-11-09T08:20:36.000Z" + ] + } + ] + } + }, + "c1qf5bt006": { + "metadata": { + "id": "c1qf5bt006", + "name": "Amazon RDS storage encryption is turned off", + "description": "Amazon RDS supports encryption at rest for all the database engines by using the keys which you manage in AWS Key Management Service (KMS). On an active DB instance with Amazon RDS encryption, the data stored at rest in the storage is encrypted similar to its automated backups, read replicas, and snapshots.
\n
\n
\nIf encryption isn't turned on while creating a DB instance, you will need to create and restore an encrypted copy of the decrypted snapshot of the DB instance before you turn on the encryption.
\n
\n

Alert Criteria


\nRed: RDS resources don't have storage encryption turned on
\n
\n

Recommended Action


\nTurn on encryption of data at rest for your DB instance
\n
\n

Additional Resources



You can encrypt a DB instance only when you create the DB instance.\n\n\nTo encrypt an existing active DB instance:\n\n\n1. Create a snapshot of your DB instance.\n\n\n2. Create an encrypted copy of the snapshot created in step 1.\n\n\n3. Restore a DB instance from the encrypted snapshot. This creates an encrypted copy of the original DB instance.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt006", + "timestamp": "2023-11-27T12:22:42Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt005": { + "metadata": { + "id": "c1qf5bt005", + "name": "Amazon RDS Aurora storage encryption is turned off", + "description": "Amazon RDS supports encryption at rest for all the database engines by using the keys that you manage in AWS Key Management Service (AWS KMS). On an active DB instance with Amazon RDS encryption, the data stored at rest in the storage is encrypted, similar to automated backups, read replicas, and snapshots.
\n
\n
\nIf encryption isn't turned on while creating an Aurora DB cluster, you must restore a decrypted snapshot to an encrypted DB cluster.
\n
\n

Alert Criteria


\nRed: RDS Aurora resources don't have encryption enabled
\n
\n

Recommended Action


\nTurn on encryption of data at rest for your DB cluster
\n
\n

Additional Resources



You can turn on encryption while creating a DB instance or use a workaround to turn on the encryption on an active DB instance.\n\n\nYou can't modify a decrypted DB cluster to an encrypted DB cluster. However, you can restore a decrypted snapshot to an encrypted DB cluster. When you restore from the decrypted snapshot, you must specify a KMS key.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt005", + "timestamp": "2023-11-27T12:22:42Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "zXCkfM1nI3": { + "metadata": { + "id": "zXCkfM1nI3", + "name": "IAM Use", + "description": "This check is intended to discourage the use of root access by checking for existence of at least one IAM user. You may ignore the alert if you are following the best practice of centralizing identities and configuring users in an external identity provider or AWS Single Sign-On. \n
\n
\n

Alert Criteria


\nYellow: No IAM users have been created for this account.\n
\n
\n

Recommended Action


\nCreate an IAM user or use AWS Single Sign-On to create additional users whose permissions are limited to perform specific tasks in your AWS environment. \n

\n

Additional Resources


\nWhat is AWS Single Sign-On?
\nWhat Is IAM?", + "category": "security", + "metadata": [] + }, + "reports": { + "checkId": "zXCkfM1nI3", + "timestamp": "2023-11-23T14:58:54Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU", + "isSuppressed": false + } + ] + } + }, + "Yw2K9puPzl": { + "metadata": { + "id": "Yw2K9puPzl", + "name": "IAM Password Policy", + "description": "Checks the password policy for your account and warns when a password policy is not enabled, or if password content requirements have not been enabled. Password content requirements increase the overall security of your AWS environment by enforcing the creation of strong user passwords. When you create or change a password policy, the change is enforced immediately for new users but does not require existing users to change their passwords. \n
\n
\n

Alert Criteria


\nYellow: A password policy is enabled, but at least one content requirement is not enabled. \n
\nRed: No password policy is enabled. \n
\n
\n

Recommended Action


\nIf some content requirements are not enabled, consider enabling them. If no password policy is enabled, create and configure one. See Setting an Account Password Policy for IAM Users. \n
\n
\n

Additional Resources


\nManaging Passwords", + "category": "security", + "metadata": [ + "Password Policy", + "Uppercase", + "Lowercase", + "Number", + "Non-alphanumeric", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "Yw2K9puPzl", + "timestamp": "2023-11-25T00:38:20Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU", + "isSuppressed": false, + "metadata": [ + "Enabled", + "Enabled", + "Enabled", + "Enabled", + "Enabled", + "Green", + null + ] + } + ] + } + }, + "xSqX82fQu": { + "metadata": { + "id": "xSqX82fQu", + "name": "ELB Security Groups", + "description": "Checks for load balancers configured with a missing security group or a security group that allows access to ports that are not configured for the load balancer. If a security group associated with a load balancer is deleted, the load balancer does not work as expected. If a security group allows access to ports that are not configured for the load balancer, the risk of loss of data or malicious attacks increases.

\n

Alert Criteria


\nYellow: The inbound rules of an Amazon VPC security group associated with a load balancer allow access to ports that are not defined in the load balancer's listener configuration.
\nRed: A security group associated with a load balancer does not exist.

\n

Recommended Action


\nConfigure the security group rules to restrict access to only those ports and protocols that are defined in the load balancer listener configuration, plus the ICMP protocol to support Path MTU Discovery. See Listeners for Your Classic Load Balancer and Security Groups for Load Balancers in a VPC.
\nIf a security group is missing, apply a new security group to the load balancer. Create security group rules that restrict access to only those ports and protocols that are defined in the load balancer listener configuration. See Security Groups for Load Balancers in a VPC.

\n

Additional Resources


\nElastic Load Balancing User Guide
\nConfigure Your Classic Load Balancer", + "category": "security", + "metadata": [ + "Region", + "Load Balancer Name", + "Status", + "Security Group IDs", + "Reason" + ] + }, + "reports": { + "checkId": "xSqX82fQu", + "timestamp": "2023-11-23T14:52:57Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 10, + "resourcesFlagged": 2, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "6BFrYIRNJ5BQ7ONbYVh5TWXBWL59ZUNb8c2xNyaalZc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a3264560fd1c141809263bc702080f05", + "Green", + "-", + "-" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "DviuBWf6nHD9z__wi56GftO1HWqW7q7CWd0YzC9_Y6I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a644ed01d193e4549a874e7e5a0eabe7", + "Green", + "-", + "-" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "G_TogNnpVFpg_Ps-AoL_V1_89mGCkfZhslKLZwcBKpU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a23e595fab3334f50994f255529fb7d0", + "Green", + "-", + "-" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Kv4pKUKswleOvNWnCR3J2UA-TQdtX8vBSVqLiRBns_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a27abbe72757b46d0b11857a6e9887a3", + "Green", + "-", + "-" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "PTyBH8vXw48g-9sRbfFrelZHVtqINeTKFcgNV6P_rug", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "abf84ee009fdb40549ca76bf10f341df", + "Green", + "-", + "-" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Rlo4R1iakgztQT7VKXMTUEP_QvxDVwMBhbFcAchWE4k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a2686adc8bf40460fb634bd3092e5dfc", + "Green", + "-", + "-" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "UEaCC9GFIbjASL2Q--3EivpdlG2rD_lGPXDJwfkF_YQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "aec8c7ebf2eb149909978c8179bb82ca", + "Green", + "-", + "-" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "anCQFp6vlD1h7GQ5WjIaAK7Hfp121RKp7DpIikdeoPA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a559ef1ae4b234f99985aae08493ea30", + "Green", + "-", + "-" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sk_NYnJc3xTh-6tbVbCan_kiVoerzl9uddlV372LauE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "af74f1f143f534387bd5a9ef8d0e3650", + "Yellow", + "[sg-0dbff7c2c243c8e29]", + "Security group allows access to ports that are not configured for the load balancer" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yPbtNYfa4aLnpKnYY3By3GSTq3xdVf63q-IPUDXo2lg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a4c60e1ef3747463bbfc7c3cca8762c2", + "Yellow", + "[sg-089f21661ff90280e]", + "Security group allows access to ports that are not configured for the load balancer" + ] + } + ] + } + }, + "N425c450f2": { + "metadata": { + "id": "N425c450f2", + "name": "CloudFront Custom SSL Certificates in the IAM Certificate Store", + "description": "Checks the SSL certificates for CloudFront alternate domain names in the IAM certificate store and alerts you if the certificate is expired, will soon expire, uses outdated encryption, or is not configured correctly for the distribution. When a custom certificate for an alternate domain name expires, browsers that display your CloudFront content might show a warning message about the security of your website. Certificates that are encrypted by using the SHA-1 hashing algorithm are being deprecated by web browsers such as Chrome and Firefox. If a certificate doesn't contain any domain names that match either Origin Domain Name or the domain name in the Host header of viewer requests, CloudFront returns an HTTP status code 502 (bad gateway) to the user. For more information, see Using Alternate Domain Names and HTTPS.
\n
\n

Alert Criteria


\nRed: A custom SSL certificate is expired.
\nYellow: A custom SSL certificate expires in the next seven days.
\nYellow: A custom SSL certificate was encrypted by using the SHA-1 hashing algorithm.
\nYellow: One or more of the alternate domain names in the distribution don't appear either in the Common Name field or the Subject Alternative Names field of the custom SSL certificate.
\n
\n

Recommended Action


\nRenew an expired certificate or a certificate that is about to expire.
\nReplace a certificate that was encrypted by using the SHA-1 hashing algorithm with a certificate that is encrypted by using the SHA-256 hashing algorithm.
\nReplace the certificate with a certificate that contains the applicable values in the Common Name or Subject Alternative Domain Names fields.
\n
\n

Additional Resources


\nUsing an HTTPS Connection to Access Your Objects", + "category": "security", + "metadata": [ + "Status", + "Distribution ID", + "Distribution Domain Name", + "Certificate Name", + "Reason" + ] + }, + "reports": { + "checkId": "N425c450f2", + "timestamp": "2023-11-23T13:33:18Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "L4dfs2Q4C5": { + "metadata": { + "id": "L4dfs2Q4C5", + "name": "AWS Lambda Functions Using Deprecated Runtimes", + "description": "Checks for Lambda functions that are configured to use a runtime that is approaching deprecation or is deprecated. Deprecated runtimes are not eligible for security updates or technical support.
\n

Notes:


\nResults for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.
\nPublished Lambda function versions are immutable, which means they can be invoked but not updated. Only the $LATEST version for a Lambda function can be updated. For more information, see Lambda function versions.
\n
\n

Alert Criteria


\nRed: The function is running on a runtime that is already deprecated.\n
Yellow: The function is running on a runtime that will be deprecated within 120 days.
\n
\n

Recommended Action


\nIf you have functions that are running on a runtime that is approaching deprecation, you should prepare for migration to a supported runtime. For more information, see Runtime support policy.
\nWe recommend that you delete earlier function versions that you\u2019re no longer using.
\n
\n

Additional Resources


\nLambda runtimes", + "category": "security", + "metadata": [ + "Status", + "Region", + "Function ARN", + "Runtime", + "Days to Deprecation", + "Deprecation Date", + "Average Daily Invokes", + "Last Refresh Time" + ] + }, + "reports": { + "checkId": "L4dfs2Q4C5", + "timestamp": "2023-11-27T12:22:58Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Hs4Ma3G300": { + "metadata": { + "id": "Hs4Ma3G300", + "name": "Neptune DB cluster snapshots should be encrypted at rest", + "description": "Checks if a Neptune DB cluster snapshot is encrypted at rest. The check fails if a Neptune DB cluster isn't encrypted at rest.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Neptune.6
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G300", + "status": "not_available" + } + }, + "Hs4Ma3G301": { + "metadata": { + "id": "Hs4Ma3G301", + "name": "Neptune DB clusters should have IAM database authentication enabled", + "description": "Checks if a Neptune DB cluster has IAM database authentication enabled. The check fails if IAM database authentication isn't enabled for a Neptune DB cluster.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Neptune.7
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G301", + "status": "not_available" + } + }, + "Hs4Ma3G302": { + "metadata": { + "id": "Hs4Ma3G302", + "name": "Neptune DB clusters should be configured to copy tags to snapshots", + "description": "Checks if a Neptune DB cluster is configured to copy tags to snapshots when the snapshots are created. The check fails if a Neptune DB cluster isn't configured to copy tags to snapshots.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Neptune.8
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G302", + "status": "not_available" + } + }, + "Hs4Ma3G303": { + "metadata": { + "id": "Hs4Ma3G303", + "name": "RDS DB clusters should be encrypted at rest", + "description": "Checks if an RDS DB cluster is encrypted at rest. The check fails if an RDS DB cluster isn't encrypted at rest.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: RDS.27
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G303", + "status": "not_available" + } + }, + "DqdJqYeRm5": { + "metadata": { + "id": "DqdJqYeRm5", + "name": "IAM Access Key Rotation", + "description": "Checks for active IAM access keys that have not been rotated in the last 90 days. When you rotate your access keys regularly, you reduce the chance that a compromised key could be used without your knowledge to access resources. For the purposes of this check, the last rotation date and time is when the access key was created or most recently activated. The access key number and date come from the

access_key_1_last_rotated

and

access_key_2_last_rotated

information in the most recent IAM credential report. Because the regeneration frequency of a credential report is restricted, refreshing this check might not reflect recent changes (for details, see Getting Credential Reports for Your AWS Account).
\nIn order to create and rotate access keys, a user must have the appropriate permissions. For more information, see Allow Users to Manage Their Own Passwords, Access Keys, and SSH Keys.

\n

Alert Criteria


\nGreen: The access key is active and has been rotated in the last 90 days.
\nYellow: The access key is active and has been rotated in the last 2 years, but more than 90 days ago.
\nRed: The access key is active and has not been rotated in the last 2 years.

\n

Recommended Action


\nRotate access keys on a regular basis. See Rotating Access Keys and Managing Access Keys for IAM Users.

\n

Additional Resources


\nIAM Best Practices
\nHow to rotate access keys for IAM users (AWS blog)", + "category": "security", + "metadata": [ + "Status", + "IAM User", + "Access Key", + "Key Last Rotated", + "Reason" + ] + }, + "reports": { + "checkId": "DqdJqYeRm5", + "timestamp": "2023-11-23T21:01:03Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 117, + "resourcesFlagged": 64, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "-9RNPlr6kzUWVbs4amWIUVMGpvgIN8StLPaNUb_WxWA", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-aws-ebs-csi-driver-operator-vdq8p", + "Access Key 1", + "2023-11-09T16:54:37.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "3z0g8Tu5_eC0_5dstyMIeWXtd9W--aifIvHVrofBjKA", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-machine-api-aws-gg8tg", + "Access Key 1", + "2023-11-08T16:05:43.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "7N7kCF2uvN-Crpa0e6PpD1I8yAZrL_DEF6-Jn9vyctE", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-cloud-credential-operator-iam-ro-rls8d", + "Access Key 1", + "2023-11-08T16:05:44.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "88qiouWL_LniK-IODgDeh3ABCZnidFzzUX3HoUufVuQ", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-image-registry-4s5hw", + "Access Key 1", + "2023-11-09T16:54:44.000Z", + "< 90 days" + ] + }, + { + "status": "error", + "resourceId": "9flssh2dNCWf7aBnd0jvj8T2OIum4wdtx9QdP3H9XcA", + "isSuppressed": false, + "metadata": [ + "Red", + "acalhoun", + "Access Key 1", + "2020-12-09T20:26:45.000Z", + "> 2 years" + ] + }, + { + "status": "ok", + "resourceId": "B97RA0zj4jFaiT3Qj0rbG7gdkrTxjRg1mWasFCvD9FE", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-cloud-network-config-contro-2lzn5", + "Access Key 1", + "2023-11-08T16:05:43.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "BUhaM4BjUZvtGCpvFKCWWoxp_K6q49how5JRCYx5b1k", + "isSuppressed": false, + "metadata": [ + "Green", + "ci-op-1myx8c60-f00e7-cloud-credential-operator-iam-ro-szql2", + "Access Key 1", + "2023-11-23T19:17:46.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "CRobuJM9O5c4rY3eSJHvn8jR3O9Oz_44ULQXfS2pqHM", + "isSuppressed": false, + "metadata": [ + "Yellow", + "ancollin", + "Access Key 1", + "2022-06-03T19:26:47.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "FJqpiIxNE2Ka2iQ0KfpF_2k4BkI0-mL88y8F1bQe4_M", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-image-registry-979j2", + "Access Key 1", + "2023-11-08T16:05:40.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "Lf3s_AGMFsrmAgISbUb1lwc64W_tUFS7x4ltOeFF0v8", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-machine-api-aws-wkl9b", + "Access Key 1", + "2023-11-03T16:06:29.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "NSK2WgwAlSh3emhZBlSNmGjPjsovgo61S1aOZ8gN6JA", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-image-registry-gv9tv", + "Access Key 1", + "2023-11-03T16:06:31.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "N_tOqVsdr054-9-SNMyKpjyalsBfBNcEwdY3dusa_cQ", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-ingress-r672t", + "Access Key 1", + "2023-11-09T16:54:35.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "PUiKzR6Cn0Z_8Lq15xOV2UxSkyFyxS2H_eUgeKuufac", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-cloud-credential-operator-iam-ro-zdlnn", + "Access Key 1", + "2023-11-03T16:06:40.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "T6OFrJtagdbMWRxjT43ljHpjJAQWDmcNSEZnw30AEhQ", + "isSuppressed": false, + "metadata": [ + "Yellow", + "aawong", + "Access Key 1", + "2022-08-09T17:51:36.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "aVn7C1FrbDwXwE7Md69EfMvqsQjhHnzy9DSO8CwLIIE", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-cloud-network-config-contro-q5dm2", + "Access Key 1", + "2023-11-03T16:06:31.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "fKmHslCIZJiz77FUWXk3sWPWZWUz02pGcyKHLSOuq1g", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-aws-ebs-csi-driver-operator-f2pgt", + "Access Key 1", + "2023-11-03T16:06:29.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "jfuszXqEjMiIfj37NVORVlm53Y1hSa0lpTER8zsJpXE", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-cloud-network-config-contro-g5f6s", + "Access Key 1", + "2023-11-09T16:54:36.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "lYUvFghzRRPtfhJ8XV7VZMJ83UjUK0Z7YGK5s_xrFKU", + "isSuppressed": false, + "metadata": [ + "Green", + "ci-op-1myx8c60-f00e7-aws-ebs-csi-driver-operator-h28v2", + "Access Key 1", + "2023-11-23T19:17:42.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "ld3U1sqpG8gWGTsAWWbS2U3j8zAzWtIft6GPvB-1nHk", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-cloud-credential-operator-iam-ro-l89jp", + "Access Key 1", + "2023-11-09T16:54:52.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "mtbla9tJfSKyE9bZvEIQ6IM76TjYPACaDvmZScJ7D5Q", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-ingress-ph8xw", + "Access Key 1", + "2023-11-03T16:06:30.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "ocBma8cW0Un1N97152m6oo51u1ju9dqrk3wiavl3clo", + "isSuppressed": false, + "metadata": [ + "Yellow", + "athiruma", + "Access Key 1", + "2022-05-18T19:38:27.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "p-dbYpFFM1otbJe5rzUuinqiPqAqj3iuAUNmtiJSmac", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-ingress-mbkt6", + "Access Key 1", + "2023-11-08T16:05:41.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "rQx-oJIMZ_FHwLx81XBWWmClSh3II54YEH2weXamXTI", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-openshift-machine-api-aws-n9pkn", + "Access Key 1", + "2023-11-09T16:54:47.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "tsdAh_iU_0i8u8JxEzCCmC0np1vwF9nbomhkzXt8OXY", + "isSuppressed": false, + "metadata": [ + "Green", + "ci-op-1myx8c60-f00e7-openshift-cloud-network-config-contro-j7r9f", + "Access Key 1", + "2023-11-23T19:17:45.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "y3wc7ExOQtfpxghHMgLj1a4TcTktb_vSsx05qhnu0Uc", + "isSuppressed": false, + "metadata": [ + "Green", + "afcollins-2619-ancol-aws-ebs-csi-driver-operator-mb8rm", + "Access Key 1", + "2023-11-08T16:05:42.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "0Do5xJ6Y01AayCm4onkrfECLnouzePb502fcsdH0uTE", + "isSuppressed": false, + "metadata": [ + "Yellow", + "ebattat", + "Access Key 1", + "2022-05-18T19:38:26.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "0gAul_ngf0llP7m0WgnR8fp5R8C5VnqZybgYwaUvE2A", + "isSuppressed": false, + "metadata": [ + "Yellow", + "cloud-bulldozer-ci-6-openshift-cloud-network-config-contro-sp4xz", + "Access Key 1", + "2022-12-09T22:11:46.000Z", + "> 90 days" + ] + }, + { + "status": "error", + "resourceId": "0kRBlSsIYq9swspJOCBO2YqVfcT2Mdj-1HsOnlG2gs0", + "isSuppressed": false, + "metadata": [ + "Red", + "cloud-bulldozer-ci-6-openshift-machine-api-aws-6h42c", + "Access Key 1", + "2021-01-14T01:25:28.000Z", + "> 2 years" + ] + }, + { + "status": "ok", + "resourceId": "1Z9lcvVM4fl9mTtpc-OZVDZygsEZShrYCCBIYFi2aso", + "isSuppressed": false, + "metadata": [ + "Green", + "ci-op-1myx8c60-f00e7-openshift-ingress-2dhsw", + "Access Key 1", + "2023-11-23T19:17:44.000Z", + "< 90 days" + ] + }, + { + "status": "error", + "resourceId": "4Ek2Llyl-PJNUhXNApoYbnpaBGQdNiLsVZNZddp0bfE", + "isSuppressed": false, + "metadata": [ + "Red", + "msheth", + "Access Key 1", + "2020-09-30T00:15:58.000Z", + "> 2 years" + ] + }, + { + "status": "warning", + "resourceId": "8KPwrEf9hfHRClYLq1wkutd3tA7qiZn9sm_ifttS7_c", + "isSuppressed": false, + "metadata": [ + "Yellow", + "cloud-governance-delete-user", + "Access Key 2", + "2022-07-04T07:17:51.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "8Xwegm7HM05Fwq4s1GftqJz7jHFnxsAHDBqefzilfkc", + "isSuppressed": false, + "metadata": [ + "Yellow", + "dwilson", + "Access Key 1", + "2022-02-09T21:18:43.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "BHZ0Shxm-RbotYUEdDOdbampwC01dHQtCjd99d7xgoo", + "isSuppressed": false, + "metadata": [ + "Yellow", + "mukrishn", + "Access Key 2", + "2022-04-14T15:16:41.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "F2fUfcctWIICaINnj0NXJBfbGZ350a-eWxdMZ0Wtx1Q", + "isSuppressed": false, + "metadata": [ + "Yellow", + "lblyth", + "Access Key 1", + "2023-05-30T18:02:51.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "G_v4TwvCWUht8btop5DkcVX4lxDHadH2Lxn_JB_JSLM", + "isSuppressed": false, + "metadata": [ + "Yellow", + "jtaleric", + "Access Key 1", + "2022-07-27T10:06:51.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "Ima0zazw5ICsbLCcFgTha8eukPMzrDD6JLtFARHPyCc", + "isSuppressed": false, + "metadata": [ + "Yellow", + "jraju", + "Access Key 1", + "2022-11-29T13:22:29.000Z", + "> 90 days" + ] + }, + { + "status": "error", + "resourceId": "Qdhi2Q_9yboDrk6kMpG8JAQmZGnYPzICwTOpsewzF2A", + "isSuppressed": false, + "metadata": [ + "Red", + "ekuric", + "Access Key 1", + "2020-12-04T00:11:52.000Z", + "> 2 years" + ] + }, + { + "status": "ok", + "resourceId": "RQZS2PnNMv1C6Bbul4u6ETQ26u3bnd92vpbuBPxlm8U", + "isSuppressed": false, + "metadata": [ + "Green", + "ci-op-1myx8c60-f00e7-openshift-machine-api-aws-vjk9r", + "Access Key 1", + "2023-11-23T19:17:45.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "UAVIiofsUTOcDbKsCn_w6VVrlC6dRcpWcD768ktuDYk", + "isSuppressed": false, + "metadata": [ + "Green", + "krvoora", + "Access Key 1", + "2023-09-22T01:18:49.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "V4tMNXrAEwurqdcAYtDs6voa_7GJ4ePgbzctlsuBjM0", + "isSuppressed": false, + "metadata": [ + "Yellow", + "mukrishn", + "Access Key 1", + "2022-01-27T23:19:49.000Z", + "> 90 days" + ] + }, + { + "status": "error", + "resourceId": "Xi_8sexRLPT_GLJV32-l5NvxWpQrkY970xdH5OYE08Y", + "isSuppressed": false, + "metadata": [ + "Red", + "cloud-bulldozer-ci-6-cloud-credential-operator-iam-ro-xpzb4", + "Access Key 1", + "2021-01-14T01:42:43.000Z", + "> 2 years" + ] + }, + { + "status": "warning", + "resourceId": "YO6T2ZlJyDpk6vUdlKBXXIOcbG-2znfXYg2RIe9HGlo", + "isSuppressed": false, + "metadata": [ + "Yellow", + "cloud-governance-delete-user", + "Access Key 1", + "2022-05-31T08:38:53.000Z", + "> 90 days" + ] + }, + { + "status": "error", + "resourceId": "YfxBmCwGBJHRUOzMz8tq4TQmdZ7fhC0Co_jM27pcSko", + "isSuppressed": false, + "metadata": [ + "Red", + "jrussell", + "Access Key 1", + "2020-03-19T20:31:37.000Z", + "> 2 years" + ] + }, + { + "status": "error", + "resourceId": "dITYULw_0A9WHeCR4VhTV58y7DM6mIVuns1aNXKI-7E", + "isSuppressed": false, + "metadata": [ + "Red", + "cloud-bulldozer-ci-6-openshift-ingress-tl6vr", + "Access Key 1", + "2021-01-14T01:25:29.000Z", + "> 2 years" + ] + }, + { + "status": "error", + "resourceId": "g6zap0rYK0zQHl1ZCSXyTZSpzAFh8OOQ3EwsmCQ8qHQ", + "isSuppressed": false, + "metadata": [ + "Red", + "cloud-bulldozer-ci-6-aws-ebs-csi-driver-operator-g59z9", + "Access Key 1", + "2021-01-14T01:25:26.000Z", + "> 2 years" + ] + }, + { + "status": "error", + "resourceId": "q2Y3zR5ISrhvt84eJVdlyARQXMXZ0w4fJ0Jl7SHzprU", + "isSuppressed": false, + "metadata": [ + "Red", + "dsanzmor", + "Access Key 1", + "2021-03-03T14:07:33.000Z", + "> 2 years" + ] + }, + { + "status": "warning", + "resourceId": "rTfK2XGMsqSWCebAvW34gMbcUaSMzk9ych6Znlqc8Pw", + "isSuppressed": false, + "metadata": [ + "Yellow", + "nelluri", + "Access Key 1", + "2022-08-23T10:09:38.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "u_VSXff28ESekABLO0QuMXFMB0sroZ5T-IQF8sbsOK4", + "isSuppressed": false, + "metadata": [ + "Green", + "ci-op-1myx8c60-f00e7-openshift-image-registry-wx5hg", + "Access Key 1", + "2023-11-23T19:17:43.000Z", + "< 90 days" + ] + }, + { + "status": "error", + "resourceId": "wkoyt0unIQo7Vh-yT6OA9IP-baoIVhqaDHhSn5SCmBQ", + "isSuppressed": false, + "metadata": [ + "Red", + "dsanzmor", + "Access Key 2", + "2021-04-07T08:05:25.000Z", + "> 2 years" + ] + }, + { + "status": "error", + "resourceId": "yLUdb9KJk72Khhs6rsOGjz-TVWkFdxOV5ZwPcLfkWTU", + "isSuppressed": false, + "metadata": [ + "Red", + "cloud-bulldozer-ci-6-openshift-image-registry-ps8bh", + "Access Key 1", + "2021-01-14T01:25:27.000Z", + "> 2 years" + ] + }, + { + "status": "ok", + "resourceId": "-6iopkp4JXbTwndr3wCBM1hQARVe033-OXYPgnOpCJw", + "isSuppressed": false, + "metadata": [ + "Green", + "osdManagedAdmin-nvvzvc", + "Access Key 1", + "2023-10-18T15:17:41.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "08qGphJdEeub8utqCKUlopWVOyOWtegOODfxlTnekAs", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-t58fn5", + "Access Key 1", + "2023-07-25T18:02:54.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "29ZuQW37Pvz7tubVAwRN-e0n67IoTQ_DQZ4Rqei4848", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-ltnvxr", + "Access Key 1", + "2023-07-27T18:28:15.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "3mFQMICARJweG2pdZT1GvBOrAZBd6FbOSA3V488VAcM", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-7dh5sz", + "Access Key 1", + "2023-07-25T18:03:59.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "5XjVf5YaQDGJ08J5V1Dggjg2RsGwEPouF5ZkwiyZeTU", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-q6hpgc", + "Access Key 1", + "2023-07-25T17:02:04.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "6S3ewiNhw12YFjJQPVnCs0e-MvfGjySve3GNp7P2KbE", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-nbq4gm", + "Access Key 1", + "2023-07-25T18:02:24.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "6X-2aiygmkz_s1JIkh2yFL22PcNH0nNxvuJDADC5Qdk", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-v6j9kw", + "Access Key 1", + "2023-07-25T16:51:27.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "8IoQ8QUVl0FYdsCYhZIRlUHR218e8B9vD2imDYGLll8", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-rqzn2g", + "Access Key 1", + "2023-07-25T18:12:45.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "9llzktnykY5OUZ4yw3ZtgIGO4MXHdQ1xwhrSMyjPLB4", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-8554sc", + "Access Key 1", + "2023-07-25T16:54:58.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "AqeJQERJGMP_Zn1qXSY8SK6bWFkDcQ8nLXEbkfL3Cgc", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-vldh5b", + "Access Key 1", + "2023-07-27T18:25:35.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "BkGpe75IwN_wkveeJNQrfWcdhA9mXXLSazlJ2PhAHZE", + "isSuppressed": false, + "metadata": [ + "Green", + "osdManagedAdmin-fl884m", + "Access Key 1", + "2023-10-18T15:23:25.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "EuHYfnv8ELNKTf-u8nNSg-tRtaYaC4zriVjzGCIG7ac", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-cx7kn2", + "Access Key 1", + "2023-07-24T19:52:26.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "JABJYihUeGgOLoAiJVsmCW-X8CXnvaw96VlyucGEjrM", + "isSuppressed": false, + "metadata": [ + "Green", + "osdCcsAdmin", + "Access Key 2", + "2023-11-17T03:00:29.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "KSW6J5tUg1iE2rdf6OD04tD5YscTAy_2y_wiEKvFyF4", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdCcsAdmin2", + "Access Key 2", + "2022-03-30T10:18:20.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "MP73ZZQr5kLUWOC5BJ3FeDp4Ei5iJCS86gJ5l8mN70k", + "isSuppressed": false, + "metadata": [ + "Yellow", + "nelluri", + "Access Key 2", + "2022-09-12T17:25:54.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "OpXsHwVd7a5OQNxpZkkh21FlbTInF_C-yWIe2VRLJg8", + "isSuppressed": false, + "metadata": [ + "Green", + "osdManagedAdmin-ftx888", + "Access Key 1", + "2023-10-18T15:17:13.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "PF_EMHTnJ463MwHgb8fpGfZ1In99_Rbdydx6-lz4Onw", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-fbm9w8", + "Access Key 1", + "2023-07-27T18:30:00.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "PQJiC0QMqMZd_Rt6ZlV071Qp2MH2Ie_fYGUiruhnenE", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-l7xjqs", + "Access Key 1", + "2023-07-12T23:38:51.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "TACsu35quaec-cNhiCrRVTo_A2AbaNDggKsmrRv1MOg", + "isSuppressed": false, + "metadata": [ + "Green", + "osdCcsAdmin", + "Access Key 1", + "2023-11-13T02:25:51.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "Tu_3VQPRlwITOX9rssfsXExo9XHrFSI2yWNVtRIkGKQ", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-tgwvwn", + "Access Key 1", + "2023-07-25T16:56:11.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "_rQSItDwaXhGoLfI0hHY2wcjXrLjTcSliZQhgG_HYmA", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-sxxjq5", + "Access Key 1", + "2022-11-29T02:15:08.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "jQ2deFTrQPuEIuP0OIcFPTthFKUQSSahdlUx38gr-lo", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-vjxxr4", + "Access Key 1", + "2023-07-25T16:56:02.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "tVX8QVcVH72tsoaNJl13vAEuSa4ClOJGvWuZdi86_YM", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-v8tlkr", + "Access Key 1", + "2023-07-25T16:50:06.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "thfZ4W_ildf1byUwriXqa6lEI1a0W-ixWb5dzaPJzvE", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-8pp8p2", + "Access Key 1", + "2023-07-24T19:56:58.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "zT1hKNiZY5VYPw8WT2ZYvQtmjZB-KsfpiAiAbqfJPO8", + "isSuppressed": false, + "metadata": [ + "Green", + "osdManagedAdmin-7k8gb6", + "Access Key 1", + "2023-10-18T15:17:54.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "0fyiDvFEddCWybJ9kMKUUJTviEa2wGy9VxKuILPyfTQ", + "isSuppressed": false, + "metadata": [ + "Green", + "play-area-cts6f-openshift-machine-api-aws-89zqx", + "Access Key 1", + "2023-09-10T03:25:40.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "1p5gc0j2Nj-dcD2kEZZOExTuTxX6-_lgxulZKoiJdRI", + "isSuppressed": false, + "metadata": [ + "Green", + "play-area-cts6f-openshift-cloud-network-config-contro-c6j5m", + "Access Key 1", + "2023-09-10T03:25:41.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "2AcAz7fGoGihvCVctBuicA3Zg7W1QYhlCiYByb_CuBQ", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-w698ms", + "Access Key 1", + "2023-07-13T20:27:59.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "32P5xP7BeEuc59LH-BbD5txRwN9_wVWciBDw1DH2aiY", + "isSuppressed": false, + "metadata": [ + "Green", + "play-area-cts6f-openshift-ingress-95sdk", + "Access Key 1", + "2023-09-10T03:25:42.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "8iMdjeKJtRYXmOTUVI4LrxrwRC0StdJVpEeubSHvax0", + "isSuppressed": false, + "metadata": [ + "Green", + "rsevilla87-haproxy-r-cloud-credential-operator-iam-ro-fdqw2", + "Access Key 1", + "2023-11-23T14:36:59.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "97C3Me5eXLmLt6KT1YDfBOrcsf5UxSKG58Go-AyDtxU", + "isSuppressed": false, + "metadata": [ + "Green", + "rsevilla87-haproxy-r-openshift-ingress-5z4mr", + "Access Key 1", + "2023-11-23T14:36:45.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "Cm9e4YTxafKsZp1Yx5WGjsgRb2Vlp7VB53GFuQH8PU0", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-zq6t5h", + "Access Key 1", + "2023-07-27T18:30:24.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "GSOEMBGUbRNwVdQ4Emr9B7UfaIqMjWjXnsdo7XqF3qo", + "isSuppressed": false, + "metadata": [ + "Green", + "play-area-cts6f-noobaa-aws-cloud-creds-2nbzg", + "Access Key 1", + "2023-09-10T04:01:30.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "MWgp6gvW9WKcFlQ_VhpzHMfgtmcRev2KDVedAI_AQVY", + "isSuppressed": false, + "metadata": [ + "Green", + "play-area-cts6f-cloud-credential-operator-iam-ro-r6dhr", + "Access Key 1", + "2023-09-10T03:25:59.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "PIyArj1nP5MpcKtWwQ0XwlkLlq2Ub7OPZoCowu2WkUk", + "isSuppressed": false, + "metadata": [ + "Green", + "rsevilla87-haproxy-r-openshift-image-registry-9lzpg", + "Access Key 1", + "2023-11-23T14:36:46.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "QjmQRo8gP6HE-byhl3IqGH1wW2QN7zvUPqvUOFU5S1g", + "isSuppressed": false, + "metadata": [ + "Green", + "play-area-cts6f-aws-ebs-csi-driver-operator-fgzcx", + "Access Key 1", + "2023-09-10T03:25:43.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "V1CMTli8NX00jJ7Sol8v-0itm0ccjjqsDzGCczCA200", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-zkpb5s", + "Access Key 1", + "2022-12-06T13:02:32.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "X3s4MoZDgV_yVD0jjWLhUmLH6q3rUA2KJ217rFmhaoU", + "isSuppressed": false, + "metadata": [ + "Green", + "rsevilla87-haproxy-r-openshift-cloud-network-config-contro-l4l82", + "Access Key 1", + "2023-11-23T14:36:45.000Z", + "< 90 days" + ] + }, + { + "status": "error", + "resourceId": "dq7VdEJErP76l5AH_DIIlaQSx1mB5BMXGOCXe-gmo6U", + "isSuppressed": false, + "metadata": [ + "Red", + "rzaleski", + "Access Key 1", + "2020-10-27T19:32:24.000Z", + "> 2 years" + ] + }, + { + "status": "error", + "resourceId": "ivUjLRRd3GdRKhmuR0M2Wz4OOzosi8-dMUQ-SbThmLA", + "isSuppressed": false, + "metadata": [ + "Red", + "rzaleski", + "Access Key 2", + "2021-01-18T16:48:15.000Z", + "> 2 years" + ] + }, + { + "status": "warning", + "resourceId": "jtabOqquVPxhI_g-XECVO1OZX4DGxddlR3X3GrumStg", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-vvqdwr", + "Access Key 1", + "2023-07-25T16:56:55.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "lPCHhN5bNStgM4U_zPh0gh3l56f3zn_rNg1gfcTQw4Q", + "isSuppressed": false, + "metadata": [ + "Green", + "osdManagedAdmin-x4qsk6", + "Access Key 1", + "2023-10-18T15:17:29.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "ldeJy6Sp-Q7Odjn6TJ7POgnTyh79InKYpffyZqJrwSc", + "isSuppressed": false, + "metadata": [ + "Green", + "rsevilla87-haproxy-r-aws-ebs-csi-driver-operator-tgzp4", + "Access Key 1", + "2023-11-23T14:36:47.000Z", + "< 90 days" + ] + }, + { + "status": "error", + "resourceId": "n12Jj7MPRg8kVdMz9zu1w5VtQ7gZb7cBm7U9KWhw0lc", + "isSuppressed": false, + "metadata": [ + "Red", + "pruner_bot", + "Access Key 1", + "2020-03-03T17:41:15.000Z", + "> 2 years" + ] + }, + { + "status": "warning", + "resourceId": "sOnpOHasiOV2XYzqW022qEU--Hng3KzLp9yQJCvAvsY", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-z6ld5t", + "Access Key 1", + "2023-07-25T18:13:07.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "tee66qj2y4YCttg8C4yf1Oj2D-7EtViiaDUgeqWh1XE", + "isSuppressed": false, + "metadata": [ + "Yellow", + "osdManagedAdmin-zs8mkz", + "Access Key 1", + "2023-07-13T18:38:47.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "vmnOvHljv7-rm4Ob-3qQvNETb8dhUdnA1MWELM6wLig", + "isSuppressed": false, + "metadata": [ + "Green", + "play-area-cts6f-openshift-image-registry-6q6vb", + "Access Key 1", + "2023-09-10T03:25:41.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "xYripgLuQrBe00WGAuksagQ3_010fvEOmXKteKaUTHw", + "isSuppressed": false, + "metadata": [ + "Green", + "rsevilla87-haproxy-r-openshift-machine-api-aws-cctdm", + "Access Key 1", + "2023-11-23T14:36:48.000Z", + "< 90 days" + ] + }, + { + "status": "error", + "resourceId": "yFzAhrrBi8OOI0A07aqDLX3gyM0d90SH3XzcaQVKh3w", + "isSuppressed": false, + "metadata": [ + "Red", + "rsevilla", + "Access Key 1", + "2021-02-01T17:36:36.000Z", + "> 2 years" + ] + }, + { + "status": "error", + "resourceId": "zw9HGOT1KbSyTC5-WD37z9hTimbv-o2rFzzSphu3d8w", + "isSuppressed": false, + "metadata": [ + "Red", + "perfci", + "Access Key 1", + "2021-10-08T16:46:59.000Z", + "> 2 years" + ] + }, + { + "status": "ok", + "resourceId": "1i_1DA0P0nMp6e0xrj_wU2Ds8L64mhVZ_0r-SrcDhV8", + "isSuppressed": false, + "metadata": [ + "Green", + "vchalla", + "Access Key 1", + "2023-09-06T14:50:34.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "2mHRA2UHMNPuVM6bRY7-l863UdyI6NyS9xvAwU-O5Z8", + "isSuppressed": false, + "metadata": [ + "Green", + "smanda-ocp1-tf7qf-aws-ebs-csi-driver-operator-hnzpt", + "Access Key 1", + "2023-11-20T18:02:35.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "3VBVwazfx260TatRNlUABB6zLW7X7fD64wTgdZdGPlY", + "isSuppressed": false, + "metadata": [ + "Green", + "smanda-ocp1-tf7qf-openshift-cloud-network-config-contro-vmvnf", + "Access Key 1", + "2023-11-20T18:02:37.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "5IgYkrDX8B2PKnX3MvNdbsgbgiBZ82zhqKpFpYS1htA", + "isSuppressed": false, + "metadata": [ + "Yellow", + "vzepedam", + "Access Key 1", + "2022-02-23T10:36:52.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "5YHENHu9_LvGrIuuExSJLWa0YWsGU43TZLoJyA8XMd8", + "isSuppressed": false, + "metadata": [ + "Yellow", + "vzepedam", + "Access Key 2", + "2022-10-12T07:21:25.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "6ZmnVWnSUSw7iXP9vrdDBeXGh2aYXNOd4Q7_uIoUFJ8", + "isSuppressed": false, + "metadata": [ + "Yellow", + "vchalla-quay-s3-user", + "Access Key 1", + "2023-02-22T02:08:42.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "ECJcG_xQjuayOGIEZoom3GzZeJAhmRCjsHD5T8JPTW8", + "isSuppressed": false, + "metadata": [ + "Yellow", + "syed-py3-s3-user", + "Access Key 1", + "2023-01-31T00:16:01.000Z", + "> 90 days" + ] + }, + { + "status": "warning", + "resourceId": "J-pDkyL8kRDkHQK3Ij1jyC05Frd3TS6MfhYxcrTBL3Y", + "isSuppressed": false, + "metadata": [ + "Yellow", + "vkommadi", + "Access Key 2", + "2023-04-04T13:15:54.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "KfTlMIuGSARDhFm3Vlf_m_ZubykSI5gQPGOTwMaBTzs", + "isSuppressed": false, + "metadata": [ + "Green", + "smanda-ocp1-tf7qf-openshift-image-registry-4glm7", + "Access Key 1", + "2023-11-20T18:02:38.000Z", + "< 90 days" + ] + }, + { + "status": "error", + "resourceId": "VaXKZTak99PsxhXFOv4xznJMua-A8gqo_2VJS-rTkTQ", + "isSuppressed": false, + "metadata": [ + "Red", + "sejug", + "Access Key 1", + "2021-07-15T10:53:11.000Z", + "> 2 years" + ] + }, + { + "status": "warning", + "resourceId": "c4J9Ayj30vP1BLI6UaxZbd470_6l6H0rMF6CMtXJD8Y", + "isSuppressed": false, + "metadata": [ + "Yellow", + "sejug", + "Access Key 2", + "2023-06-27T15:32:27.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "cizFo4TqF_X1eEhAhDo2W3Lv4OcGtocDbCiOKsKYyV4", + "isSuppressed": false, + "metadata": [ + "Green", + "smanda-ocp1-tf7qf-openshift-machine-api-aws-v6252", + "Access Key 1", + "2023-11-20T18:02:36.000Z", + "< 90 days" + ] + }, + { + "status": "ok", + "resourceId": "j-YVi1RMQH-IrJwddm0Zblz0nyHsj5uGloP--eItk-0", + "isSuppressed": false, + "metadata": [ + "Green", + "smanda-ocp1-tf7qf-cloud-credential-operator-iam-ro-nbz6f", + "Access Key 1", + "2023-11-20T18:02:39.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "jqR0E0lyUeY1NxN9Cbxryj_iIlc6tqliSWsv5P0kGh0", + "isSuppressed": false, + "metadata": [ + "Yellow", + "vkommadi", + "Access Key 1", + "2022-03-01T20:40:21.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "nzmS7jmQhuS-AxCcRcj1pJh4X9vEvFELjK-PBwtf0BY", + "isSuppressed": false, + "metadata": [ + "Green", + "smanda-ocp1-tf7qf-openshift-ingress-hqndk", + "Access Key 1", + "2023-11-20T18:02:36.000Z", + "< 90 days" + ] + }, + { + "status": "warning", + "resourceId": "vT1Rq7bffkNooS_GpjzLoQlBZecXb18FEaachZ-itxY", + "isSuppressed": false, + "metadata": [ + "Yellow", + "smalleni", + "Access Key 1", + "2023-01-11T17:07:31.000Z", + "> 90 days" + ] + }, + { + "status": "ok", + "resourceId": "xHKbOXbR9Y5Biz35YtrXG6gYyU0RRHQT0KX9jDS0ziU", + "isSuppressed": false, + "metadata": [ + "Green", + "smanda", + "Access Key 1", + "2023-09-26T11:18:45.000Z", + "< 90 days" + ] + } + ] + } + }, + "HCP4007jGY": { + "metadata": { + "id": "HCP4007jGY", + "name": "Security Groups - Specific Ports Unrestricted", + "description": "Checks security groups for rules that allow unrestricted access (0.0.0.0/0) to specific ports. Unrestricted access increases opportunities for malicious activity (hacking, denial-of-service attacks, loss of data). The ports with highest risk are flagged red, and those with less risk are flagged yellow. Ports flagged green are typically used by applications that require unrestricted access, such as HTTP and SMTP.\n
\nIf you have intentionally configured your security groups in this manner, we recommend using additional security measures to secure your infrastructure (such as IP tables).\n
\n
Note: This check only evaluates security groups that you create and their inbound rules for IPv4 addresses. Security groups created by AWS Directory Services are flagged as red or yellow, but they don\u2019t pose a security risk and can be safely ignored or excluded. For more information, see the Trusted Advisor FAQ.\n
\n
\n

Alert Criteria

\n
\nGreen: Access to port 80, 25, 443, or 465 is unrestricted.
\nRed: Access to port 20, 21, 1433, 1434, 3306, 3389, 4333, 5432, or 5500 is unrestricted.
\nYellow: Access to any other port is unrestricted.\n
\n
\n

Recommended Action

\n
\nRestrict access to only those IP addresses that require it. To restrict access to a specific IP address, set the suffix to /32 (for example, 192.0.2.10/32). Be sure to delete overly permissive rules after creating rules that are more restrictive.
\n
\n

Additional Resources


\nAmazon EC2 Security Groups
\nList of TCP and UDP port numbers (Wikipedia)
\nClassless Inter-Domain Routing (Wikipedia)", + "category": "security", + "metadata": [ + "Region", + "Security Group Name", + "Security Group ID", + "Protocol", + "Status", + "Ports" + ] + }, + "reports": { + "checkId": "HCP4007jGY", + "timestamp": "2023-11-23T22:32:59Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 167, + "resourcesFlagged": 167, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "ap-south-1", + "resourceId": "HWdH13jlvT02Ird1vSqWP3W4anjMqvfXXY532-FUA7Y", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "launch-wizard-1", + "sg-075c25f337499cbaa (vpc-0be74b8f596c5dc65)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "ap-south-1", + "resourceId": "hTUc6IXgCWxJgnW0wF18r_zLc7MwXnxGorUPfMxMmrI", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "launch-wizard", + "sg-006183f07495a8909 (vpc-0be74b8f596c5dc65)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "53vqageylv2ydDclkjgRP3kqXonzdd08XYizvx1RUok", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5N3abfcU31MReDg3nYa5oS2AUs4ec7CIL_fr_0ZRC9w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "9SONG1sfE9dKvoWrQxPLE2yNUupu6omBlVbb2OqfoTw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "A_K91CSOgvUR_GtRMTBBGbnUNzg1AojdUXikFQC1zaE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-abf84ee009fdb40549ca76bf10f341df", + "sg-00b68421a3351665d (vpc-0676c51454e7f5d48)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BtD2TnPm5pvWGSf8Ui1vneAFnkjBybH_PK6_6q_DrBo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-abf84ee009fdb40549ca76bf10f341df", + "sg-00b68421a3351665d (vpc-0676c51454e7f5d48)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "D_EN-oiv86bhhpLiSrl8rhE3YWCb3y09xDfamhTWC1M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-postgresdb-sg", + "sg-0437e4eef941c1464 (vpc-078d4380da954500a)", + "tcp", + "Red", + "5432" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "G1niB97IvUhIX1DqBiZGFx7_OXPikFDBAMYcA-ZV6UQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GbacJk2tCQ_FffBJ0Ef1Nc7pI0OL41YxIXuv0nzOSNM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "HLjMxelvKX2iaWgsLJ3mC-VJ5hpoYcGwTDULp1A9ajo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-abf84ee009fdb40549ca76bf10f341df", + "sg-00b68421a3351665d (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "HOv2D-Y8XOKQxHo3FxnR78Tqh0GaTmq8NqeyuCaBhMg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "I4uyKkR457agSFYV94gzPjfNev7mm2BnYWGcczx4LrU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "Red Hat Enterprise Linux 8-Red Hat Enterprise Linux 8.6 (HVM)-AutogenByAWSMP--1", + "sg-0b37c3c56846eed33 (vpc-0110b70e451ce71c3)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "IEBDbrvmEYwBViajzcWi6wbQS_yQPn1fv3He10lvFLg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-abf84ee009fdb40549ca76bf10f341df", + "sg-00b68421a3351665d (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "OdRXsWhNeWXKRHVgo-tmXghOCv6L6uzAijP6Gz5wla8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-1", + "sg-01b1f17c035fdd379 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "8080" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Su3CeWGWKFNJb65A-lXRUd77Oq6t4bWBrTWa9czEjTM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-1", + "sg-01b1f17c035fdd379 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "VKwJ5IgDA8CQb5Q2LNEh5ol8ul4ACHhREJCkUjCO3Rs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "WAvuLJYU-Dh3jxN1dqq9E_xMfN9MApgbSxAt5LHujN4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-abf84ee009fdb40549ca76bf10f341df", + "sg-00b68421a3351665d (vpc-0676c51454e7f5d48)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "a_W8d8kDvCHGbDU4Ec1r8S0hkBq3zjFGfsUqoY0x5Os", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "cNzD_zDQHuBFX7jokU7pWjWd99_MOU-Hvyvp2rmTqsE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "cVLhn-etY-OYm8XAWPHPZYF5TdTWDueC2Jvb_4tSC2Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "e0nmtM9eDahONxhb1ZRpSNUQGPypczPnRYYzV2-QNRE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-abf84ee009fdb40549ca76bf10f341df", + "sg-00b68421a3351665d (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "iWXJBRoHrvYZaVfDF3rbcOafQJtsi0PgFhcuFk-oBrw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "locEnMST-igBkzkKzpV-rCzsR-OO9ikoR_S5NeiGpCg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a4c60e1ef3747463bbfc7c3cca8762c2", + "sg-089f21661ff90280e (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qiKLsQWjJ4jlWfkN0k_fRLF546yWUXgyrpDZzAV_1FY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700783200000003", + "sg-021e648db7eb01d3f (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1TU9pOzApZsWT8VwH-rLn0Ep1Js6ABTUES-2EcEcFUw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "3BByg0pDVYGhc0KqLNZ03gCms-3D2gov0B3vdssPIpo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "4WS887IjsVFVYxeIivnRgfHSIzPG-yEyjMbPYMAb9J0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5-Wp5ZNiURiInZ3_Q8HCYNnhQoLaQZBSiYPLsKvapSY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-19", + "sg-054f5210502979087 (vpc-0d105f6ab5d5cdd34)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "61MGGod4vzEWuVUHZGqJi0psgeimsdlskoGJZ7J9qJo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "71BPn6H2m7Xcjy8P_W_1RrE9_kNm3L2T7OgsEfUgAk8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "9snwRYKbTGP9VCa9OezAygYphkoa-cetIwizXybdXdc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "A_JehHfGdMe3mFkMi3xoLQTItUVR7TG2xaQf7rKh-UU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ELUcpYCTkznBPo5KxlVp2chbr9myT-n0PQPyhtnmjnc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Ezr02g93Qqww_z3iP6sna8iQVtDhrcyRPdTZ4OADFQM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "FGrjigZI_O9n6h4MlPOQGtjQdPqAjjPEk5B1ccssgHw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Hv_p-v3M1mYO2wNo4ZtGaJeNmiOeNk0fTqzZ-OPrarE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "InEPPsZixQ6Vtstnf_uybspDWjDXXkfmAMTsD6vr8_0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Nyv9gnAinFz8VOan58yjJPf_lSEpJP15VZYTIp5DoZc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Z9BcOyKWr9tmSevkXby71AGNfOqH26eWuvp-Ve40iI4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "c5_-K2__kjY6N5SQ7-SvvJidrAyhdWLtg5YkjJkYrIk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "emSJDdtjHKv7wZb4z8uvMRXCl_nz-KcP47rlOantU8c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "i6XFV4CLSfK4sfrSpysmTpc6RHCodlfPG7umDL_jUuk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-21", + "sg-01a11e5a49481d8f3 (vpc-0110b70e451ce71c3)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "iV9C50vxqHUHV6W5Cl-xAYcgspfILU_iXJ1v4OmXojQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "q01Hk7o_owTRjvKiCb9KyrEgqi5-pAnkkUwO6lv7fKU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155522248500000002", + "sg-0063d3f9974c4f8a8 (vpc-029256ad61963f1c8)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qYEG-EbajYT3RGR0wZffZCF4EHAu5CHB507krgdmxw0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-3", + "sg-03e4d0f89e6703a47 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sw8E7fRARVqeRaIYeQq9oZIE62mzyRqiFA7yULB3XKM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-06d8559ecc6f50918 (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tBRS2jxObf-PQpB7lNLxDgkt-kSug-zciOeiVWWVOAA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "world-ssh", + "sg-00c723d86bbc903f5 (vpc-057a4aaf47284b206)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "vb01frvk-dENAw1iHdjKuVd4e9vBomPPBdKtm_fh1V0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-20", + "sg-0d9f175e19739a047 (vpc-0ed346703b8a774f8)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "zrj0WldbNPGJ-JaqT_gP0bATCw5uHpusihO15Dh57S8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631106100000003", + "sg-0cb2674a1e0b47cb7 (vpc-03da3c877ae0e831c)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "24XNgc9rmdYBr5GBh9hET3tlD92dpJQm86u-jpOWLgQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5756Q7XXEXoYs-fuHSYp9QGyekD_Hlpht7VCxf5fO_o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-14", + "sg-03cb02ea1f945c0ba (vpc-0110b70e451ce71c3)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "6aLzqgq_HGMAE01EY3L9cGsB8as8zXfp9qRbc2a0YxM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7d5yX2Ecpr6qYwr4TuZ9kAtr9ukLi_HoRXbwkQ2dSHo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7nuroVyCU3YoUZHZluZjpNfsTk72dqZdqzrwfjLdQV4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-15", + "sg-0941eadaf2a9c2404 (vpc-0110b70e451ce71c3)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BQvrDwBKt2YT7QM9wSmJMpobRPYu0-dre2TnzClIUyw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "packer_5ffceeff-80c0-ddcc-b5c8-079e31130ab8", + "sg-0fe9da11ade5bda12 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "DMUsLH5-UDE2XCUP-D5cFvAISc0AneD8_A_Wo1Vjk0k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-2", + "sg-046e868fb318f2a2e (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FmYrkrBX5s0szPNhcHMeh0JUoDsmkU466wxIYu6EUnM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-11", + "sg-00e7cca6411ee039e (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "MzTvv-SEpxo-dr2kcdg98B1-FqZMz-qoGCw6N9sMOfk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NdoeD8PJgdMZz4cfseJ1cJmbgiW4a-HLBfvjEkFi2Yg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "OO0p4DT-x5SJY4AGAFbSxSTSdrvsoav4AxzTQ4tXmJ4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-16", + "sg-041a5af9f846805f0 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "PtUniGJ3Q-apqUjhftlReNQhr0SjwbwhLXzHd36mE38", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "UV3QYixFYBjd95h8-5X17ifmdUgJ3RYc5biOe-RllQI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-14", + "sg-03cb02ea1f945c0ba (vpc-0110b70e451ce71c3)", + "tcp", + "Red", + "1433" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "W33NumqMPFn85-KHfDq1Vqx9A8ZbEGKR72Qz1r59dP8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-quay-sg", + "sg-07bcfa0f78871ccaf (vpc-0fea556d697f714be)", + "tcp", + "Yellow", + "55443" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "azKqEoILXzfZQyywoZUMr4LlNzNgkqrF738ApMhjrjQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "fqntEwL1v8_hkhR4hUuDg8tBmggcJMz_mvfMDEVmRFk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "hO09Hbee96TFk7hwk66mi5by3clBA7co3ZFtyIiiloI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "lo2XS0-dqvuWwAmau2Ax3iCM8HO6JmFI64K1Jzpoyms", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "m-D5ATF28-fisTwOl6q7BneVQ5HuPHFzSCqXSU7g1_k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-5", + "sg-0ada859d4d1c1ed81 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ph182wdncGa2JGADgipib9DL2LZt3WF9mhaRCc_oMno", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-quay-sg", + "sg-07bcfa0f78871ccaf (vpc-0fea556d697f714be)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "pux9donFsiDBEKeaBRwTVAr3EmWTVPXacDTq7HB81PA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "px84KRWtaYoMPO4e0nuK-NWZn2q5VU1ruJlqD5DfPEI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-0af444ea84771a148 (vpc-03da3c877ae0e831c)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qICPP5f69oUgqfl6qWxdNoklKhiTE32QmycjAzJAhSs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ur0NjEg1uaSjd8qD8ialiiRI4MYZp016P0tqQkQJIKw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653668900000001", + "sg-03b5963f35e81b78d (vpc-0676c51454e7f5d48)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ztWFmohpGp9SYX2JiGem9iXNgMqqJ_0DMh4N5u4RvBM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231108155521855100000001", + "sg-0e391827a1ebee617 (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "-gUoJGNjS9qy8gl1sAwiSGdfsCzuTQjgKAKhl8lQG3g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-test", + "sg-04dc0854eb43b8a8a (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "0K07prK3UgztVnm_OCbBeVRrE7GsNTaQtsbOTX2rGAw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-6", + "sg-0cea0fbd56b47e179 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7d7LzoPpfjDI0xsvTf-ZhnG8ky35yEEbMt-UeByeH7Y", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FQ8pOfL3a--TMv2XNfV3I7fn-cUBDs8YVLVGs685yFE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FSHNpsUOmd3MzauITLdL7PpSRL2Ksj8YYfcJG0LD93w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "H3jJXu8kuYgfp-dLdHBh_N7hRjxEOtVLCSn1Q5xvr6w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Jy6Hb8WPmYe5UKkVTpIqP3De-usm0PejxoOwP591jyY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-test", + "sg-04dc0854eb43b8a8a (vpc-0d28ec8a3132ed005)", + "tcp", + "Red", + "0-65535" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "M-guEjTh1pOYlzhWYxGk3l_VR_8-VjwZXJRqr2-AAZk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "OHpNBLqmp7_TeSkwbGAcTJByNyHBzFhJUwNPFgqXAH8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QR132GAPBYWJ-2ULfpA7-zs57RztSYCKND7e2qUJT_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "WR2I_5EWk-MXpWUNeBnO0WDcaW7hG82TLSsV82u_THM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "bsRdE9RfmfuMpYaQDFQ20NJMLLS3JM87tqAntXseeME", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "e-rDC5tk2IJxLAp7qoV1vdMrq90ROHiOfPQGO-beiZA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-8", + "sg-0cfe72cfcf6f588f4 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "fWdEnKLsn16DdnFXXNwTR_HIJPCv4RDxiAAkU_XJ1hA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "mTxqe7x_MYl0pFvc0Oi-SC2JZIKWC3t26bzLDzBMR1c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "mcDizkijAno3wM-LMTvtF0gwzRT0KCD5KSe6jb55vPQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-23", + "sg-0a814e44bfb35c2c5 (vpc-0d105f6ab5d5cdd34)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nx6JwqnwCKRFZLObuxRU6833xsN_WBTUqu4TvbAdCLE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "oBeVvRFYWZh6KosHfVCPG_WBGIohsLiyKDwGDwPIv9A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "owbCfM0vnzT1Ji0c7VoTyQoCq-EG1D2eVWJ9bE-4ShQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-13", + "sg-0ef8de454188f1760 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "p0UqySvtTUoS8zuuS66Xg7R_iF_Ufnv051eNpv33o6I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "p7em6PITII4NrXV-yBTNDKDhNiQLWWoiK6Q4QRUFINo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-18", + "sg-0172e829aa7313e80 (vpc-0110b70e451ce71c3)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qdFqZxkRBfmHzCzu3-wMPTe7wV8e0iOulHNwCmwfrAI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "rQiQeGDr3cV7X3Njb93EfGo5A3Dal8428Wodx099hCw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231109164631101500000001", + "sg-0fe35788ae11ea242 (vpc-03da3c877ae0e831c)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "vvead6rImqw1c_OprYGGMZSux7jxmpDuN1uxgqLTgXc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231123142653670000000002", + "sg-01f1b9dc70e1e4969 (vpc-0676c51454e7f5d48)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "zMtL3ZeWbaP4iFcyVK6e6p3aLk0gXVZbxaJFcfFy7UE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-07b9a89f9367da49e (vpc-029256ad61963f1c8)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "0YoavOW8VXezwzk4pII-K2hTdtocpg4Nhv-rTL2SU9o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1_pODlrOsr99gN9hZ8Fvh6h1U9ObTwJ0vqViYd2-GJU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-scale-default-sg", + "sg-0eb99f967d4d63fcc (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "49luZAlMTVAdHcz0jTPDfWPIBoMAhEvkn5xqmWIbOAs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "BWyJSP43-N5cOSptDxpBz8eIUKWBqoiyQPzvcKE0W-k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Drl1LdmwX-rv-KK65W5kqrMah93vQtgMZF_Y8tEoXIg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-24", + "sg-08bac0e3d7045dd68 (vpc-0b5ad039fa2fd8015)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GHu8wTw4VHJ98GZpVQh1o6VURTCG1IMe3rjNLjY-ifY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-sg", + "sg-0967e4aa3e05e961d (vpc-07e3aa3047564af94)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GT4aW6hvsXuX_UjdFe2_nuoity8BdOmBss9F_h6S4Io", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "HdTtPcefXHLfL0qmbTMOKxEi8jpmSAg2Y9Wa70yHTaU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "L4NiKTcUZmnFMbjuF3902EPfva2KYTc3gxQ2htqmeJk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-7", + "sg-008aaf5cecdd3af3f (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NS6MJSyDLOEF0hsxtgnfwiHBqbvhXwQblEhQCfUSR4M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "PZxS-wrYaWOXDKGMad5VN3CbSaE4y5f_vZD6Z4Ky1Ac", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-10", + "sg-073ce34eb41b9d23a (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "PmgTN9Yvpxb60v_vkH4_Bsv1iFUsbPUEbeTHfJBDVTg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-17", + "sg-0a82879d99a738c39 (vpc-07e3aa3047564af94)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QqobIWHnzhOaNGMV1STW5SMaRkSKayiFGhH9_UIcOgo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "udp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ZnTh0xGxs1ZI3lllJrCZy488wykpWfqvZkLViShgPs0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-12", + "sg-04215bd573a70f5cc (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "d49zVBup5qPR30mkQAXe2tW2-NlLIV-Rb56jwkbMKVc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "Fedora 34 Cloud Base Images (x86_64) HVM-34-1.2-AutogenByAWSMP--1", + "sg-07f77daaecb61b3bf (vpc-0b5ad039fa2fd8015)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "d7p1q9WTDRXRaBCdq61GLHjF3s537SW5kbDHmDR4pL4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "fU6KMwMNLDCFtu6oty1aexixSG38yEqNGslnTjt7528", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-scale-default-sg", + "sg-0eb99f967d4d63fcc (vpc-0d28ec8a3132ed005)", + "tcp", + "Red", + "0-65535" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "gQSdefWhoTrvpYJ4CDQbBCVs0PPSA5tmb2btEKJZLic", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "mOrbZoAlW5IcaROJN0Caek7-kBdaH3gNTZGyYZgGu-w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "pOxwxfjWfqENGaJ1ZErcHwYMVciULWdPnH3iE7n_jFs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-17", + "sg-0a82879d99a738c39 (vpc-07e3aa3047564af94)", + "tcp", + "Red", + "0-65535" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "rzGP4sPFFaradKsYyTGMV4AMCliYEIGl0lFbpjXImdc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-scale-default-sg", + "sg-0eb99f967d4d63fcc (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "8080" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ucAzy-YwdKbORxjJiT3yYe8hqOoyTwZI3mkHEyNWwVA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-af74f1f143f534387bd5a9ef8d0e3650", + "sg-0dbff7c2c243c8e29 (vpc-03fccd00db73fb188)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "vpgiywHS47YRFf_rQyEZVT0AxY4eiAvsqb479bfE-tk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-kcp-sg", + "sg-0967e4aa3e05e961d (vpc-07e3aa3047564af94)", + "tcp", + "Red", + "0-65535" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "wvP6WtNa6M4sTLgDNjt8rf5HX6viWYxDckGSHPGZXLA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xKrn06XIwwKOSALnNqARSC5RIOtJ7O0UIA60mgzCcak", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "default", + "sg-09cfe4fb91391a216 (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "ap-southeast-1", + "resourceId": "Ymx8vff3XuheY2URzqzjkqc_uY4jaAvqIehvXeZZ5AI", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "launch-wizard-1", + "sg-07776145ed3d6b775 (vpc-0a88c546022f8571f)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "0C_ze3_0ZrvwLY40Xl_ue0emP7veNZZFEKEPr9MqbGI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "32085" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "1baGLmK3QOb_NxYvB9FSrAFovsbo6edQ2XIIT3biGZA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "30831" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "LkIpa9Pi0CbYCeHl3zaQPQVAcl_8CXEmYI1AL4ZVXdo", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "31233" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "NBE8xqnuAmh_2-KBToO2MzXVQ7TA-JUUkBYWXGD6m4U", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "30317" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "dmyLv4dc9fGWhiY5r3EhyTi1kpP4bmB7cgtVj2NPg1M", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "30647" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "evPdonwZ44LdUjKP9EnD6pyFmnVq6uk6-dG9aB7FryU", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "31067" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "gBKHxtJhcYrOJm46ZBA7oujEodXIwXBCRYN-m8oUmHk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "31122" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "jTmybQVdme8iZvr8zimdDwCQVshdu4AphQdgl1daTps", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "30671" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "mD4pvJrjAOiyT2IutXM45DubfgVSyyw60AfZd2Uldik", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "30316" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "q-i2SJ2219_H-yGpbnYVPUvRqS7CDK5HPEKJQcMu-WY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "default", + "sg-025e5ab01d318fcb4 (vpc-04e76310e855f1713)", + "tcp", + "Yellow", + "32046" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "xTFAbM6nKt_reEMnbmW6sXkiWT-KT_R19GrI5CNt49s", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "launch-wizard-1", + "sg-0bf1fa63b9deeec04 (vpc-03135e2422fc15ede)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "ymowyA3OgFxgu3ppzvoXadotLYjuTJEe3iKpvyF7gO0", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "sejug", + "sg-072e35a1132703c3d (vpc-03135e2422fc15ede)", + "udp", + "Yellow", + "47288" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "znfgcIffC2vi0F8LDMIGd5mdt_7XyJ1zQQBEX9u8N_M", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "Red Hat Enterprise Linux 8-Red Hat Enterprise Linux 8.6 (HVM)-AutogenByAWSMP--1", + "sg-0198d651d99c2759e (vpc-03135e2422fc15ede)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "ZNs7Tk6VzPMhRDt7K2J591JGbHc7-drmGXvCrMX3KXI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "30687" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "-UOVteX_XEfWJcpw6ervpVp3-JLXgLtlS_wQVgLTUOw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-4", + "sg-0806b491299e642c8 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "CrTS2fTrjXitgXgQz-b1SopgQPUYFUIoPdVBKNohQd8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "SMWp1QJ3fHnX7_4YanNrwe_-A6RyN2yqE2otc1reMeE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "32768-60999" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "UwAwWFsp7_pf1TVD1fU6fx4vlOqremAqa7Bsa5yO958", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "Yellow", + "2022" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "ZmEh1u4H1LN3Lbcd-DwDBUQXvCP_9kPtTSGYdcFPCAg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "udp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "gprdgOhLWZHgz809AYXmUKYUotsbSicW4S0BQQLqtpk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-9", + "sg-02c0508c7f8f65db2 (vpc-0d28ec8a3132ed005)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kstS1WcLFvuxjmy_FVRnNZes9JDN9I2c50yi6zH4QiA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "launch-wizard-22", + "sg-01c880d9fb83e1566 (vpc-0110b70e451ce71c3)", + "tcp", + "Yellow", + "22" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "p1OutoZXsaZeWgKqx945-fBl1-oKpdXspjRUHeKZIfg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a23e595fab3334f50994f255529fb7d0", + "sg-0c4ee156752ae0cf5 (vpc-0ddda14d2de356963)", + "tcp", + "Yellow", + "7004" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "wuqBWwJOLsErtLDH566h3ZtCkhK_pX4WKJVqEGBafFc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "k8s-elb-a23e595fab3334f50994f255529fb7d0", + "sg-0c4ee156752ae0cf5 (vpc-0ddda14d2de356963)", + "tcp", + "Yellow", + "8444" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "zzGm-AqLJ6XvJ2N9YNBLQyVjvizOaWJX-J4v-PjKHGI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "terraform-20231103155700426700000002", + "sg-0a3d5e01145683e7f (vpc-03fccd00db73fb188)", + "tcp", + "Red", + "0-30109" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "3FSojAzaO7q4g3nzoZoJQ7omMaVrKXQJO0aR6bLV4AA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "32555" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "3KNZVHafYYehxAz6LGAa4nFMwy4KwCk2aNB8EcWSvjo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "30166" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "6Li9nYojHyKk3w7jXOTQRy_OSAzZSDt350HOxT8Dv68", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "30174" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "8ANVq7sL0AlV6SQgbjU_9NtCmYMkcUoToItm0Nw5mJU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "30284" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "8DFuUna_U-AfeJZ4o5iCOKVVX9YhYvbcsD0KTyBdAcQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "30152" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "9-sZam0HU4vv1TqvyVdqq75VfcCEi-ceL-XJGpRRolE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "30633" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "KILfsXaWJm1so2K-_wliH7xTdvrXB9xslMUWZoh9eWs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "31607" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "LAoRFtMUl9GBFaeJks56sAuDBLkyD007wGpUl3E5foc", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-02638f9cf5ff0436a (vpc-03e2566895d79e820)", + "tcp", + "Yellow", + "10000-61000" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "TkHTMk3ynPeMp1kT1JnTcfq9vXy0FuExoOaee9dCzVA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "32738" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "U084o2vQEK56qSHLuciLgdQ-Yg8iNalhA3eqoA91Lnw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "32452" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Wx17ksCE0Acd7xAHzgjNIDLi3i1x8pan8J5dfBgU2V0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "31566" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "cq-PK17IO-gXuIPMqjQqbWUB_U3DjVWnj4nsI-2LZW8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-02638f9cf5ff0436a (vpc-03e2566895d79e820)", + "udp", + "Yellow", + "10000-61000" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "d7GS5LCpnxNB1dAACqfBTT7hfLvTits8VNVqJb4PXgU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "31677" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "gxPJ9OySJcIa-FOx8jNobrtwqTFtBmxUmN6dydvZDrY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "30526" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "kQuUXoFXL_wamHo-FTfJiAaLvstXHPnMftKat4xjTWI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "32766" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "rOI8MQQmJWrriF7QUlJE-e92u52VLns3rwtT-j1U4cE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "32582" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "zTSKsm5tNeSvUJO_dx986cALjFjrr1kbe-QLgMXOmXg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "default", + "sg-011c29c8e208c5feb (vpc-0a2f222f33826210b)", + "tcp", + "Yellow", + "32095" + ] + } + ] + } + }, + "Pfx0RwqBli": { + "metadata": { + "id": "Pfx0RwqBli", + "name": "Amazon S3 Bucket Permissions", + "description": "Checks buckets in Amazon Simple Storage Service (Amazon S3) that have open access permissions or allow access to any authenticated AWS user. Bucket permissions that grant List access can result in higher than expected charges if objects in the bucket are listed by unintended users at a high frequency. Bucket permissions that grant Upload/Delete access create potential security vulnerabilities by allowing users that to add, modify, or remove items in a bucket.
\n
\n

Alert Criteria


\nYellow: The bucket ACL allows List access for \"Everyone\" or \"Any Authenticated AWS User\".
\nYellow: A bucket policy allows any kind of open access.
\nYellow: Bucket policy has statements that grant public access. The \u201cBlock public and cross-account access to buckets that have public policies\u201d setting is turned on and has restricted access to only authorized users of that account until public statements are removed.
\nYellow: Trusted Advisor does not have permission to check the policy, or the policy could not be evaluated for other reasons.
\nRed: The bucket ACL allows Upload/Delete access for \"Everyone\" or \"Any Authenticated AWS User\".
\n
\n

Recommended Action


\nIf a bucket allows open access, determine if open access is truly needed. If not, update the bucket permissions to restrict access to the owner or specific users. Use Amazon S3 Block Public Access to control the settings that allow public access to your data. See Setting Bucket and Object Access Permissions.
\n
\n

Additional Resources


\nManaging Access Permissions to Your Amazon S3 Resources", + "category": "security", + "metadata": [ + "Region Name", + "Region API Parameter", + "Bucket Name", + "ACL Allows List", + "ACL Allows Upload/Delete", + "Status", + "Policy Allows Access", + "Ignored Bucket Name" + ] + }, + "reports": { + "checkId": "Pfx0RwqBli", + "timestamp": "2023-11-22T09:06:06Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 207, + "resourcesFlagged": 67, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "eu-central-1", + "resourceId": "8RxxwjyWizWGsDMhicCnZtn_5bx3AEOQBsXjyRqy00M", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "eu-central-1", + "eucn1-9rf-oidc-h7p7", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-central-1", + "resourceId": "PQZR74DJzyO9aHOWKRGdehUQoXFbuEP0vHMzP8Hj848", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "eu-central-1", + "eucn1-px3-oidc-b8t2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "OZYoOSKJ5hsKGQgTZNRBRPrypuicrgqxmGHG-DVcG0I", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "27l9d4c1h0lumifqcctokfeiom9j3puq-image-registry-eu-west-1-csol", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "W6Q6QdPL4Xo_yqiN02d-pnQrkWzhT40FRI3iSEjb-4w", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "27h8qk4nh4caip52q9u66alh55muubud-image-registry-eu-west-1-gkix", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "WofcikKhAF1gKGgoTZTOVbD5svu46R09MR7kXPKKbvM", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwest-2ai-oidc-k9i9", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "Qk6CkFV26vgUXawNU2oEAEhNjcxxYWwsD4qZ0HUQ5j4", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "us-east-1", + "cloudability-prod", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "EAbygpSvAZod3KG_dAsXEipH6Ot9b2cSwY8VMvF6h4A", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "chktag-8cb-oidc-u9c2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Nqne6puPhvY_nyeoxR7ShOdo_wTADVuX9rbtIrk8HSs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "chktag-njc-oidc-m8j9", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "QAOn3ohPVOQWoPJ6gY-gzzh6cRjnAhtTqk-XbKgr28Q", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "dry-pd98p-bootstrap", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "Wtycqmo6iVsDuF2crMvR-B8TGdN-mavM-LT9nwEElPY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "27l4udbr5n3epbos73j4fhius78d9773-image-registry-us-east-2-clju", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "zM4IOprH2a-kIEdfoetdXAzbkggTU-PzUI__ZUFaXos", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "27ijrfvf59fc62vjk4n6r48cqusjer5m-image-registry-us-east-2-oqoa", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "fbL7ozGVW3kv2mXI49yje13Wq5AoGCKEVAUiY_-8yG8", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "us-west-1", + "cf-templates-1lim0y8ue8igw-us-west-1", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "AzpRSR91swMezX1zrRepODroVhmYp9VuVABDNEvuVLA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "cloud-bulldozer-ci-6hwqr-oidc", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "BDDGf1TG961q1PBIphwQYqhJSGNPnt-UlAcJIO_sfSw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "afcollins-2619-ancoll-5b8gn-image-registry-us-west-2-ualugvovx", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "G_PNqZrF4lsjDTUu_KUZFE1LubI5dLK66lftrBJtEV0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "afcollins-2619-ancoll-xrppt-image-registry-us-west-2-ricewsmdm", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "OBn8Bn-PmsQh7LFi4ewhAeArQJLW2rCLAH2MZ0FXvyw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "afcollins-2273-c-d-v2-jd4fn-bootstrap", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "YafBr97zXNim-P1FKztEnNYlK_qtK4iaFQBDDyOSh_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "euwest-ijx-oidc-u9e6", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ZCgPDqOLn3O5zmnnV4RN6LZI-C78QgdDlJpqrlOfpr4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "cloud-bulldozer-ci-6hwqr-image-registry-us-west-2-grohilnqkulf", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ag0ILkmw7kGSAhy5CQPOzbnUscqLeVwWEVg40oiH-lg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "afcollins-2273-c-d-v2-2ph95-bootstrap", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "bsITUr2rxHsMuDJvwvATjqTV32YW5qDDDjr2U4kDSzA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "1v8oivnenj18te68g4a4321jhqn44e87", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ciqYYIJXy4UGpJKtYA0c3DaC6ZYnMwVrepEOGTOxcDo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "4-8-aws-ovn-qwz4s-bootstrap", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "m7GiHJ6UROq_-Qk2M2XRHFdni8njHx69GpExwH1m6xY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "dry-oidc-z0i1", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "szF8VGlLQCoGQd0rUCLElQFOBuOfHvb2NKNog7tecyA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "afcollins-2619-ancoll-ptfqt-image-registry-us-west-2-upoikoeft", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "wE2UNR-ZwDLPxdSKfhaY6V9ZAVlj_wISBiicjDBZ86Y", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "cilium-97cm8-bootstrap", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "wytJTVWjmJ5lWJ9OIAmxfrbsuCLQGF7bP4P2-7EuhcE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "euwest-agf-oidc-w6x8", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "ca-central-1", + "resourceId": "GURDOno-sc9AoXS2x_rn3vC7YqJGDzr7qZi2emYXe-g", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "ca-central-1", + "hypers", + "Yes", + "No", + "Yellow", + "No bucket policy", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "M_a3l8PQ25CVKEent4X39--cU5shVkROaZ-37tVDUU4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwst1-2a1-oidc-i4o8", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "dDTfZurSBYRiGCh7arSjF63KvFK9S6dWtTqsz2fjlyk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwest-ugl-oidc-a0z3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "gWagTTDTkiWpFU258GeNZtBNeXMSMlSeQzd-R6B9esM", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwst1-n8p-oidc-f8s3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "hOFsq5TUa1QeTnANBVS3hMV4oWDmAXbh4akygVFskuI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwst1-m5z-oidc-v3i8", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "juw28qL0D6vjvhibBsadBvvYN9l44wBmiT9Fi-Zlnvw", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwst1-wgp-oidc-u9p2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "nyZawxQUhufxUfY-C_jSmEScbn9J2PfssPf8iDYsrdM", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwst1-dw3-oidc-s4u2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "u-hGCm_zrG5gO2iPuQ16k4ETbfjVS5ad9aSwW7c1bpE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwst1-d3h-oidc-a6j3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "zCnIFLGICUCttiz887mBvHYHQgh2y05_4yQZ45Qxewo", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "euwest-ilk-oidc-c4z6", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "a-mleZAHdjHAUthfc-dyo_LrDhknMPGzGNk_n2lpmaw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "king-m9n-oidc-k5u1", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "dV8rySiA9uAMLfwEW_hCvhn0AyXWxZ3iCjv3IUHLVOA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "krvoor-wxd-oidc-d5g7", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "erUQWAkrQfDh38lucpoAacX_-vobcrhvzpfJzNp99M4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "kprod-dds-oidc-q6v0", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "gL7P1Zm_H379nWXqvzUsQLvlnp6yiUs6LpE9zESDjW0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "krvoor-zho-oidc-x3a2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "mOHZr65rw8DZIsBe287A2QRoR8cm5kWYj9370dEfc6s", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "krz24-dpt-oidc-o7w0", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "oCvAUQAJlUm04fXTw-OfkWWa1rHSyHncLNjJ-r1LTNs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "kruize-2e8-oidc-y5p7", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "sdjSMCtCl2rxuvKZ87Hr7F7GSjYU6W62eyJK2zndms0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "krvoor-jll-oidc-e6y0", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "DbJ1pfG4W7uwRyx7IDUirb54TnjSj_6UWW-TT_c3aXo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-1000fdbf-3c9a-4de9-bfc4-8cd3c806466a", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "F9ZFMfLp9F77FfkxtkCoN3c13FVQTcIothVrYjao6Xk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-18883db3-7bf9-4d8b-bfc4-70769d8c2894", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Fg4Kmz7dBpV1VkQDmk91Nd6S4e-uALcvvXMKr3lD4aw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "kprod-xmj-oidc-n7g0", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "If3-OcRLtpbige3l-dV9uOG8nEa0TWYvUs7pUFBZPYo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "foo-oidc-r4y6", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "KtboO1APVmkhqt90hu1VUUdHydGZMO0oE6i-WstnokQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-265ff78d-33fc-405d-b365-caf4d6bfd109", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "U9YM98AfW4nyNNmgwG0bDBQEperxQAzgTorS7pgLXdU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "gavin-stackrox-4-7-aw-wws7x-bootstrap", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "gDY8M_eEtrAU9ChujLGGfvQGXRPx14XWgbvsT8PSUkI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "kprod-mv9-oidc-i6e2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "l4FARJDsPokn0yDgPOn0q9OduA2GR9S5Ho7rH3UTf8Y", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "loop-test-oidc-y9p1", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "whQfA0jbcIncoq3MKT5TMhsoUCXUnxU3S8vp9f--vTc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "gavin-stackrox-4-7-aw-l96s7-bootstrap", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "bjCA8yXgnXmctlZei_emXSzlMS3UOyVvMeU21X8uXsA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "mrnd-cxp-oidc-y8l3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "nJAbjmohIumRGAsFnf37S7BoZ4Z5IPF4YSSlhTVlLck", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "mrnd-f9n-oidc-l1s6", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "0f4MtUkv7PNICCOUfcG-SCZ3gfsPsSV2xNFQBUJAo6Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1611591204987.storage.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "1dxxWvZh0Ib4HupsJCklta6DKpbkvPH9RN7_UksNWF0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-718901e7-e9d6-45a9-a9c5-ea7f95178184", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "1kHKbPmwZv0Kje0H7IjtAOU2BiFLXDy_gkej6hUmpSg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1613403917149.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "67qlzHEpiFxR2ewb25h1qNThJtxuURlJsEaglLcL_5c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-935e9025-fcd3-4f8b-9fc8-dfa650774d77", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "89PtMcGYBA4E-zopuffTIojvtT3rhY0DQgvzU6BZ9PQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-edb88afe-ce9b-45a4-989c-8a3c4f14a387", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "EVpSn6GhZKq22oB1AuJ2IME2V0eBiceokszr5de8wAI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-37d894f1-3beb-40e6-8354-0da16233f53e", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "EaX6j-tMp1WJuGjxhRcHTKI6WjKF5S24uxRGjLqAevQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-cef71340-5aa9-4314-8e21-0eb66ec2d6c1", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "GACBGClKVfpPV_nquQAV-T7D4_kPLADaOySSu_RtUsA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1612266940462.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "GTb5RJp00cdjvKiA9-wlzqIpFg-iC9i67-OTkjgFGis", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-6d87cd0e-4b23-4405-9fc8-c35fadcdd422", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "JZwS88dYyQcvH1d1Wi6S0GExVEdSSKv_ch5JdohQd50", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-a51f5a90-037e-4b3e-a9b7-70fcfc23f7e3", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "L2iGbW3kk6cgs9TPFWVK6fwG3J2EwwP6KZ9ha_Tl1ek", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-73d2740c-2460-4ea8-adc2-9af3a3b4f09a", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Uidr4UkYkpvUjUFTq7Hl4zTcNus9EhWMcoc2r-PO4_c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1612795851782.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "YoVNL8jPiqqqv3ExiLyHU7y59O4f581drfhuL5Jkp6I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-732ded30-5427-4bdd-81a2-d2cfa6ff4baf", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "aiu_HHJcFzAIpvGas-qHq6fmoGUpy2IJUd-CKPqctjE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-66706d9f-e5af-4ab1-a614-e99516995fb5", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "b1H-jDAId7eFC4jsPdvoclya0HdEO-i1Jc-8XFWYAkI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-c28ca9fe-9484-44ac-8d34-bad3baaf7d66", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "cvEf22iFaKAqKoJmtSJsLtV02x2wRdKXRZZjF2KfYL0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-ecf47847-6d30-4c83-8478-7c3ce5eb2d09", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "eQa7wULsmwj4MDhaXjnMvbpQHHYPD0XF5pTQeDb-_Uk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1610617788602.storage.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "jM8KRWzcyIc7ZzCrLxuuH2WfVGRvEwAijn6lmJKDAjw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1613409309642.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "kgBz1w1kRlmduf6R-oE80YOkM4xCYv72yBvxnMehUHw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-ceafc9f9-5fb1-4f0f-8e68-c1e4afca0a26", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "lbMzPvkcKecRwrExJSgeAYWFeVfDCIeDIp50sA9YAmE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1612862265304.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "qpoGOlOvXDKU4OiyN_QwJGJVITH3D2MUyEYMl4H_OU0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1612165008685.storagev47.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "x5fgy_3hlM509wCPPYJzCy0_JwHF6FjI0s2QgM_GpJo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-e9c72d27-b6f8-4f36-9854-47493bc8b7dc", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "xFbv-ucU_LkaxNTe7YMy9kkuLYhFIq95e1Hx5GWXBkI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "managed-velero-backups-cdb05009-b68f-471e-956f-15fa3892c753", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "0lMRHLh8zpYIv6sHQ4sxCcuVk--l1HQrb-2L_QOojxM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1625055479118.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "5W6GaJgupPLi5yZh1JQe83Zy6Duh0N5VDI-S17jqw_0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1616681025069.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "5w6x42Q58XM_qSU6ZY0BiKfstBdCAKiB5493wU1Ca5o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1613708362577.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "7rsQ5pBhSg5rFiYVxVcjIMvZu4MYKo5bj9zDkR6RZFo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1615449577728.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "89QOzJNjSn5KsNNGyAS3AQW9aeBWaoIxguxntegfN1A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1617284999484.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "9Y5Oi65Ch6pAG-Zg1_tfe5decpsNEQPmN_cqHUh_V4E", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1614846281589.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "9wowlmg33QUAZcJWbzpaP7edvuc7ovsOQsH0N3k1FV0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1616659869027.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "BIjzrYcHOo4mQ21VCeuXUfDqhacRDLRsenaj8VJE8Gw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1624951725463.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "H32Nq-xB7oo0qhs84ZbhUaP3DFnqdWpSBkgHzk8VnuA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1615312877275.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "JV2XHrfH_JBlW3hk9UHwWIkiK0e5PxKvs_pW0KAlvNI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1621339002978.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "KGIPUjGVnP4LHAxAYacM-3RI5dj8QO5qZt4ndT4gliY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1617287240483.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "MbjnlQA2WNZiLJXOA6XiP0e-2CnVAVKq3_wtEazIvH8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1617005003708.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "NPlYFOxu7LfeBC5FRnjTe0Cig6gdeOStkXndRP22wZw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1621333000728.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "QSigN6SViWGDDhNKrOI3-zLqlimpVnp1BV063laXcAM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1614940983222.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "V1eVx2GuJ6DeNaztnKKyF_R9m84Ox5lZAxHlgDb-RgU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1617023377213.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Wl9yZj68BcF5e1sQXaYeYyQESdjirFwLdzjNfFWshgU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1616410669912.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Wp9hb3a3KrTJwSch2z4gngvunrGzBmVNgHaDgXbX_uo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1617374122085.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ezFoSUSEEQ_3nfkEfgbRDZv5wx0nXWDWwxwjBkm8FRM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1617868448423.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "iI4MNPSfnbLKUQtWkuMaMSTpIw85k9WgAOODl0CbzPw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1614780452723.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "llqWNoR3CKZBeNq8E7ZYQCCll0KXgLXh_-U_GUNfIpY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1616602248363.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "oQay70QPrNAiB41fH8Ru2mhLjxFPCLbuwIQmqeNCbtA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1621937562435.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tywG96FfF8cFFu0gpvIoaq6k3XY0Tde_3Kck4U80Gws", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1617726413639.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "uxQChWlF43S_Hwd3OD0a5N3a0C4TTyX6ijl7oSkTZGo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1624966471907.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "xTz52JWi-Z2ubshc01Z_GZjfoHrYBbpdLMVJO13eSRA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1615386793629.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "yOD_GaZyUBOiXril5cKsLL9zH91FWD5IQz0Y3YfJJuM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1615275000737.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "-OMUUkmU0S2OU254OHMm6_Vhm1wneBmTTErJRCwfLKM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1631277274924.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "1KUDSJVRvXZTi2tuQHIp75MJ4-9dDqwT74oXnYvGcrs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1677625407859.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "452UqqV7x1zsITdgSm3Ebm2Xc0YsXVVE5QB8t4yDhJE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1631869813152.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "4zlW7yATp8ijPpV4qQ8f2soMJQ3r-17jV-tXmtdYfxE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1678139206610.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "5RxtSo0_WckQ3srGlxkciCXuWCAWnueOZ-gnsXkNgz8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1678128411285.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "7z9Ch8F8Pv1Vc2Th4xvEAVEeDudp6iSCT0ZbuaSNfW4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1658976500857.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "CZ9qiVcO-e2wJZKgqQBf4AS_0qIjk4yY4qZUPpVZ5YQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1644465822735.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "GJPxy2n6Cibl6SQ7xLsv-LKZB4O7LXz8SbFPPQgEt88", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1679451800362.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "NIUHISJGpTTQC4pEkyuydIxAeqYOGlnneiZ6UyhXxHo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1631615861929.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "UI2SHlfYx5VI6SHTDFuXZ5uVAhP4L0QV7y27TF7B37k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1646969602043.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "VGx0DLRLvJFp0E68yB8Twe9lQI4aQhXENx68uDVWh5c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1629094543280.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "VPNtgSDVheN3k2PEK8UF8HsHNjrL-i7pICED6t243IU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1625649692373.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Y2sbdsQCoJv0Eupe5syi7omd507M3I-fjYCraywyEXE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1631542777748.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Zthd7iq-te0hXmbMBteRQ_-x-UEQgWC2YqM-WqxQyyI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1679067630151.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "bukboCiYeIYKqx6p-xbgHNehkleDMK-lmmSbNYP8tD4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1680510016987.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "dtLTua1ZkIbpK0YVwLdN-V4nUeXDjXLaFkdUTaKiwVA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1625154354601.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "miJQl7c9HO_ls_y0k79TBqkOYKAEdKJ1KFddnojpyZw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1627867596844.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "nBSUWox7CjWaYEFgZYubFlKI7N8zRMpH-L2uhm3h8bg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1674683071318.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "neDcmYSRA6YQszJrCIDC1mEc_rsDpDU80riV9hETgOg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1625494381580.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "owNpZyIgooFL1vT-WBUbRPqSpVWjwG3MybtnLCC2MAQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1674525013364.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "qGquTMt8_hX_28GAGzrhqQC-m9-XqQbybnPpSACoEVQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1631096576858.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "rI18qbb5b4TY3Gqq_40FkIHFcna7qc_9MDGbTLsgaeY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1654498144641.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "roPSFfqWhNjKkc9-Ol0QfHywbUXjRyIJyHVFgXcoDNo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1626083843458.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "xOnuIJQheXiJgikDy6Epetp5F9-1Lws5m3iG1S8vCcQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1631758557440.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "z0yQBLDyQd-iFRIcJL_J3X-hKCwV9Oi8WNvlUjh7xxE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1631614706735.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "-wO3XJlI6sctd81aXCyEaXOI0BIEqCeSqc3mdu6ikRY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682328397165.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "310__xKQKCM3d1YAxgPXBEhfr1_ravQRHhKN9EBzNh4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682059141954.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "5panznlWNVwlBd7IUrMMB44rIQxQxTVk1amcpfgE4lM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682085309431.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "8bkk5bvE8ytMZPMmQnvThPyUz1M42Px59Ohs-xtz89w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682340114273.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Dr7ogSgiK47AQsALeESNCWPNQkApKCqlT7J4XknoVKY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682308445878.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "LBhflesJsgMRssTbZ5ZGxtleJ--05UHvUQ50r9annGs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682294428826.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "LHxnKe4t_irT3mf5phBN3X2E-0IrYwHNa2z1kgyqrRU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682255249292.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Oh4xrsjQqPcUcOipllZDwhPrapqJHR-2qVzAg7Rs7So", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682211520552.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "OnKfAehrZA70eFJVBbLrxwqlGBL7EGePfSbf07u-hXg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682310610050.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "PGZdVivWA3VprtQR99FirOm45KZaxrdtOLv_UzbDQJ0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682380793954.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "PGkf3idvER-bbmH6jUyf1lbir9M_zfWHXnxUEH5OeFA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682061576309.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Q6sy3E_xYgcZGpw_QXwCt5KQ8by_spVGWZeaUdtDCAg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682335989254.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "U8H4C-qrfbB9CKiUQNXxFzZiROVT63fXIO1f8SXmVxo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1681975792013.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "VYxJzXdVlBdTbMHjeT1yuiLQVNrIDWEDuqWBYVbQWKM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682342385627.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "_cW5_dwBADLg5Uv-WYe1wWYX31BeAOP2cLzCFX3Rq24", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682247283139.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "b8nDhIOKLXWiseIKgWE4ntMKgSw5L4e07gypmxVadEQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682060000995.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "byyC7-lAyP0H0AKDL6Vrjfkh-So4vJCrifNYOhAf2-E", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682238816619.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "dqT8i_GzK2ScvfZZXcPhDhQN6lS8GCJJgelGXhiDGpY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682238312583.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "g_bWjxEIioQW2bZ2EzVZ1ySYTw4ZbSpmSCEQh5WE0pQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682065703069.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "jpC3CkWQOlMc-ond44721XcnfmXjB7I29GBJ1IfKfP4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682313575081.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "mMmXmyN5Ti-qadsb71r8wlb7XLl6VLQj5zPiB-Wh-3M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682318030429.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tNgFfmRfB1PeBOJDIwjN3fA7LCLOXoIrv4EjDS57wCc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682313779566.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "vzxGk8jmIDsMEq9y85pa1Gii590-eeGU0SB3IBsk6mo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682042601747.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "zZfYy2FUzb0CCUgDP1cuQMeYAk06f8LdpMT4yOYg17Y", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1682260756702.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ztc2uEQWB_PdTUuFQQhXMJL-snFntZfI3PvqEQxVYTE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1681320205200.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "PkjFTR6jPndxczJ-CR-e6AtP2etL8Cjlhruf7jNe_BU", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "us-east-1", + "redhat-cost-management-bucket-cf7f4bb943359dc9", + "No", + "No", + "Green", + "No", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "-kCXX_-zGanrjulKvhXLd6_66kI99wjRlEgGf-899dU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perf-35u-oidc-x2k1", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "2l9SSmg_Q3Njj2-Une-XEdIuspOrdGOLdtSdt8wGEbM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perf-hcp-oidc-x1w5", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "9Wpixfk2B3QovYtUh_ZLO8sMFzYlFAydsMBRFBZeUHw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perf-0d7-oidc-j2i1", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "GYR7nq53Ysz8cHQ7vJXwQ8qfv_5neDLCao323fjDg30", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perf-749-oidc-g2a8", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "QGx0M02I8k8ED8P3_rg3DOyvTV4bzUqsKMFo4pAy8yc", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perf-03b-oidc-c4v1", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "V75AkrCHijFKALUGvh5ROfcK4AOMhBqvPfjtkr00zt0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perfsc-qxr-oidc-t9g8", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Vla3on9H2qa8azizbb3v6CPgCh1yS9CCgGy9dR43Q8A", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perfsc-s2p-oidc-s1o5", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "ZZjF-GEYPOuIRTGFB7RbqqRssYW_v8Wrrpy2cktQWcw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perfsc-lsm-oidc-m0w4", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "nR1vYHItCV41aNMi1mKswKWByH6AyPE90sdNq1I4aX8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "redhat-cloud-governance-perf-scale", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "nlyQOWIp7gCj9ZMQawcnzo0C7cxftHs4fII6bYnZtnk", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perf-3ed-oidc-b9f6", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "shdTXTMjA9Mhxm9XmHd_MUu05L5TvJ9k1XPPl7EWX-w", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "rbur-j4g-oidc-s6u5", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "zkV1owURj3mQsWwmSyptamJj6TJvwLZ-2kyqTV99P_w", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "perfsc-etz-oidc-w1h0", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "COktl9P_qqn5Mde7A3lmSqWKB1pgQ_oP8aXUOdOstr0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1684725598844.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "KdSP9D9Bmo3y5wYVEbdHvruwuYoUfAKVP877vRisBpU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1684738204411.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "L-xTdcxW977GmuUSX2XWLkPHUo_n834-mErmy7NErYw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1683121094696.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "M-h4pTwsGTe3ucJgZbvzM9nf6O1FSyPQ4-m5zduJ8sE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "perfscale-airflow-logs", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "gTiGeY_zAzM2oKodB-BqT1pYADpe1JfuKPWLst0Uglg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "perfscale-es-prod-backup", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "krKhnes2teOeHNCItRwbK8s282Gzz8L9cyb6-WYThS8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1694318489008.play-area.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "mKUTlDiZ1BAEW1iwAmG9OzFgo2RN1AW_C-dWKPSXVkU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "perfscale-es-dev-backup", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "mazCcuTsyfpLTYCJjQ9ZOZCbJPxb2ZCKBfYuap2HQyU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "play-area-cts6f-image-registry-us-west-2-xchglmivyahhfoqhewqgw", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "s2JWTiUi9CayBoQIDA87W6WyHwTHg3c1Wwl7JqmG6Qo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "perf-412-5429-aws-rhperfscale-org", + "Yes", + "No", + "Yellow", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "sK-MPNt_AaTADUnEYddl-VBKgsTiPfGp229nE9-NTkg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "perfscale-ocp-qe-prod-backup", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "zFNhukEYLDzUhneetP0DXbTI1L1X41xnHb7U4PzJbOU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "nb.1694313646643.play-area.perfscale.devcluster.openshift.com", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "zHxPT3ko52kxoF4bntOAnXaal_rrX5t7ZGdeGhgaCEg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "perfscale-thanos", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "aGtOrdiFdppzYgMlAWfg2OGGs6EMecjTF8ZRV4i2qP8", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "eu-west-1", + "uswest-dek-oidc-n4d9", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "Ers4YV1X6q11aXWl78iPkh4GDV2VTXsCELxauAMKvYo", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "us-east-1", + "useast-g00-oidc-f4o3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "GEBbAn_HpW1qoJVnj9tbHcELH65Bis9CbqH-S3npFMY", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "us-east-1", + "useast-g0z-oidc-n5x8", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "LTIu7atl-ATB6DAALP_1whvgyXQaq_IH0HTg7lOZVsQ", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "us-east-1", + "useast-j5p-oidc-q2h3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "qF-SC1l3KMPiSMEiTXf8l3DFzlnCJM2AmPlCyfQbu38", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "us-east-1", + "uswest-lsf-oidc-l1k2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "xkfhIDcmRWuZ4sqoODygKTw49qNrro1H8PJeNZDWND4", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "us-east-1", + "useast-mpr-oidc-o2b4", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "4GVWTTP1ZoeKNVixJARx2xqAkj6r52nq_coDPjW5t6Q", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "tefrm5-0sk-oidc-t8g9", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "KN3wFCWhBQUtN-y0-In66XusfyTvO_F39dXnET0Lmrk", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "tefrm5-z9v-oidc-p4t3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Ox515S3V9Ja3FKA9_pNPJO3cynUWHjOWEY4A9qrHqu0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "ros24-zcy-oidc-m5j2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "VL1ryvcWHE2IJY78Qb1juJtSdZyAF5pTLCnaHy89yfw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "tags-8ka-oidc-z6j1", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "WhlskTG1suaeI4Sfqk39MIdx8kReFG2yYusC5ymc2jU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "useast-vyv-oidc-m5u5", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "X7gC13IcaWugBufEHFkyHL0FjPP-q-zLuZwudRrXbdk", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "upgr-l9k-oidc-v1d8", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "l46EDK_gx1ewr_Wvl3HUp8Y1QEasH_WAQ6KcpaJZeJg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "useast-boe-oidc-w2c7", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "mpcbvEjRqw-OGSY-XBlMq17Qyv2VJEMsyNL04ee7yCg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "tefrm5-whv-oidc-p4u2", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "vFlBQidl-OHe7Sn45PsFXD_Qm_p-l7Z_UUN8kAG3CgY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "ros24-nx8-oidc-b9u5", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "yVTbG4gi-JA-_uUohb0nHF6DIiKEBOaGZOO-KhslMxs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "ros24-mgv-oidc-p4f4", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-1", + "resourceId": "PObqF_fpNcsDOOs6Rp9NkDA6YtiQneoQG9Lq_Caz8TE", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "us-west-1", + "uswest-n8p-oidc-g2a3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "0yDJD9e4xZk7u7PhXk3UpZvjVO_c9b8iuYF7dXtsNxE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "uswest-2up-oidc-y1i4", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "8TdpV-OIbO3yBFE2ZXDpax5VzTD8bteSw9bG5F1qIGM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "rydrew-6-1-ocp-vxbqq-bootstrap", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Alesk3UPlqHvkhS5jqtWAi0P6CzJ7RYB10522QRCNkI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "smanda-ocp1-tf7qf-image-registry-us-west-2-udvluotiodolwuvcajf", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "JSc5at2ykDEfwbk48lrz-JBQDw2zd4t-ZjJmDK-cyh8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "sai-hypershift", + "Yes", + "No", + "Yellow", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Rk_9QHb8jdri_FL3xM7mB8c6e3dA5xQxX7HlbFC7RCk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "rook-ci-cilium-t8w5l-bootstrap", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "SjVyggs0q-EjscODNwC-JwRO-pzvGEzhqEjBm0-4EhI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "rydrew-6-1-ocp-k2hdj-bootstrap", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Z88TpDGVZE8UYYtnU5h2m-j-NAUgg_RgebMbdLBUg_s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "rook-cilium-rjjxf-bootstrap", + "No", + "No", + "Green", + "Block Public Access Enabled", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qoLeNMWCjY89udj9elnxfTNQM6C6piiRTZGhNsUr4hE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "uswest-3jm-oidc-k3w6", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "4mYEZX5foTN2jKMyEgNgLE7IV4blGMaRb2VuF-gfazQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "us-east-2", + "vkommadi-oidc1", + "No", + "No", + "Green", + "No bucket policy", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "2NMDGZviskxGR_lsskWtJ3Xv_cFuzDsQc6_yUl7-GUg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "uswest-qq1-oidc-j8i0", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "M4C_Cz9yirYQMi9EFj4tMtEAzYAEW50gUeVGqGFL0ng", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "uswest-rlo-oidc-s6n3", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "YBsdPNKj0p8sbM3FYMyNjDEEGVoVTy8ZmIamh44fZck", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "uswest-x0r-oidc-j5j7", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "iM5oRVBjltpsr4zh6-Q0dwAu1WcNrS_ULenmp-_oUvo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "uswest-yq6-oidc-m3d6", + "No", + "No", + "Yellow", + "Yes", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kGvhYKFfkcF_JiajVPcjRtiPHoQyAomqc9CBnS6F28I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "vzepedam-mc-aws-rhperfscale-org", + "Yes", + "No", + "Yellow", + "No bucket policy", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "vdXdfS9iS0NIY5DXLpzRnWvB5nIwXJ2sojri3kc6tUU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "us-west-2", + "uswest-pob-oidc-r0h8", + "No", + "No", + "Yellow", + "Yes", + null + ] + } + ] + } + }, + "12Fnkpl8Y5": { + "metadata": { + "id": "12Fnkpl8Y5", + "name": "Exposed Access Keys", + "description": "Checks popular code repositories for access keys that have been exposed to the public and for irregular Amazon Elastic Compute Cloud (Amazon EC2) usage that could be the result of a compromised access key. An access key consists of an access key ID and the corresponding secret access key. Exposed access keys pose a security risk to your account and other users, could lead to excessive charges from unauthorized activity or abuse, and violate the AWS Customer Agreement. If your access key is exposed, take immediate action to secure your account. To protect your account from excessive charges, AWS temporarily limits your ability to create certain AWS resources when exposed access keys are identified. This does not make your account secure; it only partially limits the unauthorized usage for which you could be charged. Note: This check does not guarantee the identification of exposed access keys or compromised EC2 instances. You are ultimately responsible for the safety and security of your access keys and AWS resources.

\nIf a deadline is shown for an access key, AWS may suspend your AWS account if the unauthorized usage is not stopped by that date. If you believe an alert is in error, contact AWS Support.

\nThe information displayed in Trusted Advisor may not reflect the most recent state of your account. No exposed access keys are marked as resolved until all exposed access keys on the account have been resolved. This data synchronization can take up to one week.

\n

Alert Criteria


\nRed: Potentially compromised - AWS has identified an access key ID and corresponding secret access key that have been exposed on the Internet and may have been compromised (used).
\nRed: Exposed - AWS has identified an access key ID and corresponding secret access key that have been exposed on the Internet.
\nRed: Suspected - Irregular Amazon EC2 usage indicates that an access key may have been compromised, but it has not been identified as exposed on the Internet.

\n

Recommended Action


\nDelete the affected access key as soon as possible. If the key is associated with an IAM user, see Managing Access Keys for IAM Users.

\nCheck your account for unauthorized usage. Log in to the AWS Management Console and check each service console for suspicious resources. Pay special attention to running Amazon EC2 instances, Spot Instance requests, access keys, and IAM users. You can also check overall usage on the Billing & Cost Management Dashboard.

\n

Additional Resources


\nBest Practices for Managing AWS Access Keys
\nAWS Security Audit Guidelines", + "category": "security", + "metadata": [ + "Access Key ID", + "User Name (IAM or Root)", + "Fraud Type", + "Case ID", + "Time Updated", + "Location", + "Deadline", + "Usage (USD per Day)" + ] + }, + "reports": { + "checkId": "12Fnkpl8Y5", + "timestamp": "2023-11-27T11:23:09Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [] + } + }, + "Hs4Ma3G271": { + "metadata": { + "id": "Hs4Ma3G271", + "name": "API Gateway routes should specify an authorization type", + "description": "Checks if Amazon API Gateway routes have an authorization type. The check fails if the API Gateway route does not specify an authorization type
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: APIGateway.8
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G271", + "status": "not_available" + } + }, + "Hs4Ma3G150": { + "metadata": { + "id": "Hs4Ma3G150", + "name": "Elasticsearch domains should encrypt data sent between nodes", + "description": "Checks if Elasticsearch domains have node-to-node encryption enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ES.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G150", + "status": "not_available" + } + }, + "Hs4Ma3G272": { + "metadata": { + "id": "Hs4Ma3G272", + "name": "Users should not have root access to SageMaker notebook instances", + "description": "Checks if root access is turned off for Amazon SageMaker notebook instances. The check fails if root access is turned on for a SageMaker notebook instance.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: SageMaker.3
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G272", + "status": "not_available" + } + }, + "Hs4Ma3G151": { + "metadata": { + "id": "Hs4Ma3G151", + "name": "An RDS event notifications subscription should be configured for critical database parameter group events", + "description": "Checks if an Amazon RDS Event subscription for RDS parameter groups is configured to notify on event category of \"configuration change\".
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.21
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G151", + "status": "not_available" + } + }, + "Hs4Ma3G273": { + "metadata": { + "id": "Hs4Ma3G273", + "name": "Security contact information should be provided for an AWS account.", + "description": "Checks if an Amazon Web Services (AWS) account has security contact information. The check fails if security contact information is not provided for the account.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Account.1
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G273", + "status": "not_available" + } + }, + "Hs4Ma3G152": { + "metadata": { + "id": "Hs4Ma3G152", + "name": "An RDS event notifications subscription should be configured for critical database instance events", + "description": "Checks if an Amazon RDS Event subscription for RDS instances is configured to notify on event categories of both \"maintenance\", \"configuration change\", and \"failure\".
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.20
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G152", + "status": "not_available" + } + }, + "Hs4Ma3G274": { + "metadata": { + "id": "Hs4Ma3G274", + "name": "SageMaker notebook instances should be launched in a custom VPC", + "description": "Checks if an Amazon SageMaker notebook instance is launched within a custom VPC. The check fails if a SageMaker notebook instance is not launched within a custom VPC.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: SageMaker.2
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G274", + "status": "not_available" + } + }, + "Hs4Ma3G153": { + "metadata": { + "id": "Hs4Ma3G153", + "name": "RDS instances should not use a database engine default port", + "description": "Checks if RDS instances use the default port of that database engine.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.23
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G153", + "status": "not_available" + } + }, + "Hs4Ma3G275": { + "metadata": { + "id": "Hs4Ma3G275", + "name": "CloudFront distributions should not point to non-existent S3 origins", + "description": "Checks if Amazon CloudFront distributions are pointing to non-existent S3 origins. The check fails for a CloudFront distribution if the origin is configured to point to a non-existent bucket. This check only applies to CloudFront distributions where an S3 bucket without static website hosting is the S3 origin.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: CloudFront.12
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G275", + "status": "not_available" + } + }, + "Hs4Ma3G154": { + "metadata": { + "id": "Hs4Ma3G154", + "name": "An RDS event notifications subscription should be configured for critical database security group events", + "description": "Checks if an Amazon RDS Event subscription for RDS security groups is configured to notify on event categories of both \"configuration change\" and \"failure\".
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.22
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G154", + "status": "not_available" + } + }, + "Hs4Ma3G265": { + "metadata": { + "id": "Hs4Ma3G265", + "name": "A WAF Regional rule group should have at least one rule", + "description": "Checks if a WAF Regional rule group has at least one rule. The check fails if no rules are present within a rule group.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: WAF.3
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G265", + "status": "not_available" + } + }, + "Hs4Ma3G144": { + "metadata": { + "id": "Hs4Ma3G144", + "name": "Unused IAM user credentials should be removed", + "description": "Checks if your IAM users have passwords or active access keys that were not used within the previous 90 days.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.8
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G144", + "status": "not_available" + } + }, + "Hs4Ma3G266": { + "metadata": { + "id": "Hs4Ma3G266", + "name": "A WAF Regional web ACL should have at least one rule or rule group", + "description": "Checks if a WAF Regional web ACL contains any WAF rules or WAF rule groups. This check fails if a web ACL does not contain any WAF rules or rule groups.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: WAF.4
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G266", + "status": "not_available" + } + }, + "Hs4Ma3G145": { + "metadata": { + "id": "Hs4Ma3G145", + "name": "Amazon ECS task definitions should have secure networking modes and user definitions.", + "description": "Checks if an Amazon ECS Task Definition with host networking mode has \"privileged\" or \"user\" container definitions. The check fails with host network mode and container definitions are privileged=false or empty and user=root or empty.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ECS.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G145", + "status": "not_available" + } + }, + "Hs4Ma3G267": { + "metadata": { + "id": "Hs4Ma3G267", + "name": "A WAF global rule should have at least one condition", + "description": "Checks if a WAF global rule has at least one condition. This check fails if no conditions are present within a rule.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: WAF.6
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G267", + "status": "not_available" + } + }, + "Hs4Ma3G146": { + "metadata": { + "id": "Hs4Ma3G146", + "name": "ECS services should not have public IP addresses assigned to them automatically", + "description": "Checks if ECS services are configured to automatically assign public IP addresses. This check fails if AssignPublicIP is ENABLED.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ECS.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G146", + "status": "not_available" + } + }, + "Hs4Ma3G268": { + "metadata": { + "id": "Hs4Ma3G268", + "name": "A WAF global rule group should have at least one rule", + "description": "Checks if a WAF global rule group has at least one rule. The check fails if no rules are present within a rule group.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: WAF.7
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G268", + "status": "not_available" + } + }, + "Hs4Ma3G147": { + "metadata": { + "id": "Hs4Ma3G147", + "name": "Amazon Elasticsearch Service domains should be in a VPC", + "description": "Checks whether Amazon Elasticsearch Service domains are in a VPC. It does not evaluate the VPC subnet routing configuration to determine public reachability. This check also does not check whether the Amazon OpenSearch Service resource-based policy permits public access by other accounts or external entities. You should ensure that Amazon Elasticsearch Service domains are not attached to public subnets. See Resource-based policies (https://docs.aws.amazon.com/opensearch-service/latest/developerguide/ac.html#ac-types-resource) in the Amazon OpenSearch Service (successor to Amazon Elasticsearch Service) Developer Guide. You should also ensure that your VPC is configured according to the recommended best practices. See Security best practices for your VPC (https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-best-practices.html) in the Amazon VPC User Guide.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ES.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G147", + "status": "not_available" + } + }, + "Hs4Ma3G269": { + "metadata": { + "id": "Hs4Ma3G269", + "name": "A WAF global web ACL should have at least one rule or rule group", + "description": "Checks if a WAF global web ACL contains any WAF rules or WAF rule groups. This check fails if a web ACL does not contain any WAF rules or WAF rule groups.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: WAF.8
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G269", + "status": "not_available" + } + }, + "Hs4Ma3G148": { + "metadata": { + "id": "Hs4Ma3G148", + "name": "Elastic Beanstalk environments should have enhanced health reporting enabled", + "description": "Checks if enhanced health reporting is enabled for your AWS Elastic Beanstalk environments.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ElasticBeanstalk.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G148", + "status": "not_available" + } + }, + "Hs4Ma3G149": { + "metadata": { + "id": "Hs4Ma3G149", + "name": "Elastic Beanstalk managed platform updates should be enabled", + "description": "Checks if managed platform updates are enabled for the AWS Elastic Beanstalk environment.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ElasticBeanstalk.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G149", + "status": "not_available" + } + }, + "Hs4Ma3G160": { + "metadata": { + "id": "Hs4Ma3G160", + "name": "IAM authentication should be configured for RDS instances", + "description": "Checks if an RDS DB instance has IAM database authentication enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.10
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G160", + "status": "not_available" + } + }, + "Hs4Ma3G282": { + "metadata": { + "id": "Hs4Ma3G282", + "name": "RSA certificates managed by ACM should use a key length of at least 2,048 bits", + "description": "Checks if RSA certificates managed by AWS Certificate Manager use a key length of at least 2,048 bits. The check fails if the key length is smaller than 2,048 bits.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ACM.2
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G282", + "status": "not_available" + } + }, + "Hs4Ma3G161": { + "metadata": { + "id": "Hs4Ma3G161", + "name": "IAM authentication should be configured for RDS clusters", + "description": "Checks if an RDS DB cluster has IAM database authentication enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.12
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G161", + "status": "not_available" + } + }, + "Hs4Ma3G283": { + "metadata": { + "id": "Hs4Ma3G283", + "name": "AWS AppSync should have request-level and field-level logging turned on", + "description": "Checks if an AWS AppSync API has request-level and field-level logging turned on. The check fails if request-level logging isn't turned on or if the field resolver log level is set to \u2018None\u2019.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: AppSync.2
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G283", + "status": "not_available" + } + }, + "Hs4Ma3G162": { + "metadata": { + "id": "Hs4Ma3G162", + "name": "RDS automatic minor version upgrades should be enabled", + "description": "Checks if automatic minor version upgrades are enabled for the Amazon RDS database instance.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.13
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G162", + "status": "not_available" + } + }, + "Hs4Ma3G284": { + "metadata": { + "id": "Hs4Ma3G284", + "name": "CloudFront distributions should use origin access control", + "description": "Checks if an Amazon CloudFront distribution with an Amazon S3 origin has origin access check (OAC) configured. The check fails if OAC isn't configured.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: CloudFront.13
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G284", + "status": "not_available" + } + }, + "Hs4Ma3G163": { + "metadata": { + "id": "Hs4Ma3G163", + "name": "RDS DB clusters should be configured to copy tags to snapshots", + "description": "Checks if RDS DB clusters are configured to copy all tags to snapshots when the snapshots are created.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.16
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G163", + "status": "not_available" + } + }, + "Hs4Ma3G285": { + "metadata": { + "id": "Hs4Ma3G285", + "name": "EKS cluster endpoints should not be publicly accessible", + "description": "Checks if an Amazon EKS cluster endpoint is publicly accessible. The check fails if an EKS cluster has an endpoint that is publicly accessible.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: EKS.1
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G285", + "status": "not_available" + } + }, + "Hs4Ma3G164": { + "metadata": { + "id": "Hs4Ma3G164", + "name": "RDS DB instances should be configured to copy tags to snapshots", + "description": "Checks if RDS DB instances are configured to copy all tags to snapshots when the snapshots are created.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.17
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G164", + "status": "not_available" + } + }, + "Hs4Ma3G286": { + "metadata": { + "id": "Hs4Ma3G286", + "name": "ElastiCache for Redis cache clusters should have auto minor version upgrades enabled", + "description": "This check evaluates if auto minor version upgrades are enabled for ElastiCache for Redis cache clusters. This check fails if the ElastiCache for Redis cache cluster does not have auto minor version upgrades enabled.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ElastiCache.2
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G286", + "status": "not_available" + } + }, + "Hs4Ma3G165": { + "metadata": { + "id": "Hs4Ma3G165", + "name": "RDS instances should be deployed in a VPC", + "description": "Checks if an RDS instance is deployed in a VPC (EC2-VPC).
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: RDS.18
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G165", + "status": "not_available" + } + }, + "Hs4Ma3G276": { + "metadata": { + "id": "Hs4Ma3G276", + "name": "A WAFV2 web ACL should have at least one rule or rule group", + "description": "Checks if a WAFV2 web ACL contains at least one WAF rule or WAF rule group. The check fails if a web ACL does not contain any WAF rule or rule group.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: WAF.10
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G276", + "status": "not_available" + } + }, + "Hs4Ma3G155": { + "metadata": { + "id": "Hs4Ma3G155", + "name": "EC2 instances should be managed by AWS Systems Manager", + "description": "Checks if the Amazon EC2 instances in your account are managed by AWS Systems Manager.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SSM.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G155", + "status": "not_available" + } + }, + "Hs4Ma3G277": { + "metadata": { + "id": "Hs4Ma3G277", + "name": "EC2 launch templates should not assign public IPs to network interfaces", + "description": "Checks if Amazon EC2 launch templates are configured to assign public IP addresses to network interfaces upon launch. The check fails if an EC2 launch template is configured to assign a public IP address to network interfaces or if there is at least one network interface that has a public IP address.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: EC2.25
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G277", + "status": "not_available" + } + }, + "Hs4Ma3G156": { + "metadata": { + "id": "Hs4Ma3G156", + "name": "EC2 instances managed by Systems Manager should have a patch compliance status of COMPLIANT after a patch installation", + "description": "Checks if the compliance status of the Amazon EC2 Systems Manager patch compliance is COMPLIANT or NON_COMPLIANT after the patch installation on the instance. It only assesses instances that are managed by AWS Systems Manager Patch Manager.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SSM.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G156", + "status": "not_available" + } + }, + "Hs4Ma3G278": { + "metadata": { + "id": "Hs4Ma3G278", + "name": "Access logging should be configured for API Gateway V2 Stages", + "description": "Checks if Amazon API Gateway V2 stages have access logging configured. This check fails if access log settings aren\u2019t defined.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: APIGateway.9
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G278", + "status": "not_available" + } + }, + "Hs4Ma3G157": { + "metadata": { + "id": "Hs4Ma3G157", + "name": "EC2 instances managed by Systems Manager should have an association compliance status of COMPLIANT", + "description": "Checks if the status of the AWS Systems Manager association compliance is COMPLIANT or NON_COMPLIANT after the association is executed on an instance.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SSM.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G157", + "status": "not_available" + } + }, + "Hs4Ma3G158": { + "metadata": { + "id": "Hs4Ma3G158", + "name": "SSM documents should not be public", + "description": "Checks if AWS Systems Manager documents that the account owns are public. This check fails if SSM documents that have \"Self\" as the owner are public.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SSM.4
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G158", + "status": "not_available" + } + }, + "Hs4Ma3G159": { + "metadata": { + "id": "Hs4Ma3G159", + "name": "Elastic File System should be configured to encrypt file data at-rest using AWS KMS", + "description": "Checks if Amazon Elastic File System (Amazon EFS) is configured to encrypt the file data using AWS Key Management Service (AWS KMS). The check will fail if the encrypted key is set to false on DescribeFileSystems or if the KmsKeyId key on DescribeFileSystems does not match the KmsKeyId parameter.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EFS.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G159", + "status": "not_available" + } + }, + "Hs4Ma3G250": { + "metadata": { + "id": "Hs4Ma3G250", + "name": "ECS clusters should use Container Insights", + "description": "Checks if ECS clusters use Container Insights. This check fails if Container Insights are not set up for a cluster.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ECS.12
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G250", + "status": "not_available" + } + }, + "Hs4Ma3G251": { + "metadata": { + "id": "Hs4Ma3G251", + "name": "EFS access points should enforce a root directory", + "description": "Checks if Amazon Elastic File System (Amazon EFS) access points are configured to enforce a root directory. This check fails if the value of 'Path' is set to '/' (default root directory of the file system).
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: EFS.3
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G251", + "status": "not_available" + } + }, + "Hs4Ma3G130": { + "metadata": { + "id": "Hs4Ma3G130", + "name": "Lambda functions should use supported runtimes", + "description": "Checks that the lambda function settings for runtimes, match the expected values set for the supported runtimes for each language. The supported runtimes this check assesses for are: nodejs18.x, nodejs16.x, nodejs14.x, nodejs12.x, python3.10, python3.9, python3.8, python3.7, java11, java8, java8.al2, go1.x, dotnet6, ruby2.7.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Lambda.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G130", + "status": "not_available" + } + }, + "Hs4Ma3G252": { + "metadata": { + "id": "Hs4Ma3G252", + "name": "EFS access points should enforce a user identity", + "description": "Checks if Amazon Elastic File System (Amazon EFS) access points are configured to enforce a user identity. This check fails if \u2018PosixUser\u2019 is not defined under \u2018configuration\u2019 or if parameters are provided and there is no match in the corresponding parameter.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: EFS.4
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G252", + "status": "not_available" + } + }, + "Hs4Ma3G131": { + "metadata": { + "id": "Hs4Ma3G131", + "name": "Lambda function policies should prohibit public access", + "description": "Checks if the AWS Lambda function policy attached to the Lambda resource prohibits public access. If the Lambda function policy allows public access, the check fails.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Lambda.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G131", + "status": "not_available" + } + }, + "Hs4Ma3G253": { + "metadata": { + "id": "Hs4Ma3G253", + "name": "EKS clusters should run on a supported Kubernetes version", + "description": "Checks if an EKS cluster is running on a supported Kubernetes version. The check fails if the EKS cluster is running on an unsupported version.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: EKS.2
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G253", + "status": "not_available" + } + }, + "Hs4Ma3G132": { + "metadata": { + "id": "Hs4Ma3G132", + "name": "Database Migration Service replication instances should not be public", + "description": "Checks if AWS Database Migration Service replication instances are public by examining the PubliclyAccessible field value.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: DMS.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G132", + "status": "not_available" + } + }, + "Hs4Ma3G243": { + "metadata": { + "id": "Hs4Ma3G243", + "name": "Auto Scaling group launch configurations should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)", + "description": "Checks if only IMDSv2 is enabled. This check fails if the metadata version is not included in the launch configuration or if both IMDSv1 and IMDSv2 are enabled.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: AutoScaling.3
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G243", + "status": "not_available" + } + }, + "Hs4Ma3G122": { + "metadata": { + "id": "Hs4Ma3G122", + "name": "VPC flow logging should be enabled in all VPCs", + "description": "Checks if Amazon Virtual Private Cloud flow logs are found and enabled for Amazon VPCs. The traffic type is set to 'Reject'.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.6
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G122", + "status": "not_available" + } + }, + "Hs4Ma3G244": { + "metadata": { + "id": "Hs4Ma3G244", + "name": "Auto Scaling group launch configuration should not have a metadata response hop limit greater than 1", + "description": "Checks the number of network hops that the metadata token can travel. This check fails if the metadata response hop limit is greater than 1.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: AutoScaling.4
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G244", + "status": "not_available" + } + }, + "Hs4Ma3G123": { + "metadata": { + "id": "Hs4Ma3G123", + "name": "EC2 instances should not have a public IPv4 address", + "description": "Checks if EC2 instances have a public IP address. The check fails if the publicIp field is present in the EC2 instance configuration item. This check applies to IPv4 addresses only.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.9
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G123", + "status": "not_available" + } + }, + "Hs4Ma3G245": { + "metadata": { + "id": "Hs4Ma3G245", + "name": "CloudFormation stacks should be integrated with Simple Notification Service (SNS)", + "description": "Checks if your CloudFormation stacks are sending event notifications to SNS topic. This check fails if CloudFormation stacks are not sending event notifications to an SNS topic.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: CloudFormation.1
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G245", + "status": "not_available" + } + }, + "Hs4Ma3G124": { + "metadata": { + "id": "Hs4Ma3G124", + "name": "EC2 instances should use Instance Metadata Service Version 2 (IMDSv2)", + "description": "Checks if your Amazon Elastic Compute Cloud (Amazon EC2) instance metadata version is configured with Instance Metadata Service Version 2 (IMDSv2). The check passes if HttpTokens is set to required for IMDSv2. The check fails if HttpTokens is set to optional.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.8
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G124", + "status": "not_available" + } + }, + "Hs4Ma3G246": { + "metadata": { + "id": "Hs4Ma3G246", + "name": "CloudFront distributions should not use deprecated SSL protocols between edge locations and custom origins", + "description": "Checks if CloudFront distributions are using deprecated SSL protocols for HTTPS communication between CloudFront edge locations and your custom origins. This check fails for a CloudFront distribution if it has a 'CustomOriginConfig' where \u2018OriginSslProtocols\u2019 includes \u2018SSLv3\u2019.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: CloudFront.10
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G246", + "status": "not_available" + } + }, + "Hs4Ma3G125": { + "metadata": { + "id": "Hs4Ma3G125", + "name": "API Gateway should be associated with a WAF Web ACL", + "description": "Checks to see if an API Gateway stage is using an AWS WAF Web ACL. This check fails if an AWS WAF Web ACL is not attached to a REST API Gateway stage.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: APIGateway.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G125", + "status": "not_available" + } + }, + "Hs4Ma3G247": { + "metadata": { + "id": "Hs4Ma3G247", + "name": "EC2 Transit Gateways should not automatically accept VPC attachment requests", + "description": "Checks if EC2 Transit Gateways are automatically accepting shared VPC attachments requests. This check will fail for a Transit Gateway that automatically accept shared VPC attachment requests.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: EC2.23
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G247", + "status": "not_available" + } + }, + "Hs4Ma3G126": { + "metadata": { + "id": "Hs4Ma3G126", + "name": "DynamoDB Accelerator (DAX) clusters should be encrypted at rest", + "description": "Checks if a DAX cluster is encrypted at rest.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: DynamoDB.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G126", + "status": "not_available" + } + }, + "Hs4Ma3G248": { + "metadata": { + "id": "Hs4Ma3G248", + "name": "EC2 paravirtual instance types should not be used", + "description": "Checks if the virtualization type of an EC2 instance is paravirtual. The check fails for an EC2 instance if \u2018virtualizationType\u2019 is set to \u2018paravirtual\u2019.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: EC2.24
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G248", + "status": "not_available" + } + }, + "Hs4Ma3G127": { + "metadata": { + "id": "Hs4Ma3G127", + "name": "API Gateway REST and WebSocket API execution logging should be enabled", + "description": "Checks if all stages of Amazon API Gateway REST and WebSocket APIs have logging enabled. The check fails if logging is not enabled for all methods of a stage or if loggingLevel is neither ERROR nor INFO.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: APIGateway.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G127", + "status": "not_available" + } + }, + "Hs4Ma3G249": { + "metadata": { + "id": "Hs4Ma3G249", + "name": "ECS Fargate services should run on the latest Fargate platform version", + "description": "Checks if ECS Fargate services is running the latest Fargate platform version. This check fails if the platform version is not latest.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ECS.10
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G249", + "status": "not_available" + } + }, + "Hs4Ma3G128": { + "metadata": { + "id": "Hs4Ma3G128", + "name": "API Gateway REST API stages should be configured to use SSL certificates for backend authentication", + "description": "Checks if Amazon API Gateway REST API stages have SSL certificates configured that backend systems can use to authenticate that incoming requests are from the API Gateway.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: APIGateway.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G128", + "status": "not_available" + } + }, + "Hs4Ma3G129": { + "metadata": { + "id": "Hs4Ma3G129", + "name": "API Gateway REST API stages should have AWS X-Ray tracing enabled", + "description": "Checks if AWS X-Ray active tracing is enabled for your Amazon API Gateway REST API stages.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: APIGateway.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G129", + "status": "not_available" + } + }, + "c18d2gz186": { + "metadata": { + "id": "c18d2gz186", + "name": "Amazon CloudWatch Log Group retention period", + "description": "Checks if Amazon CloudWatch Log Group retention period is set to at least 365 days or other specified number.
\n
\nBy default, logs are kept indefinitely and never expire. However, you can adjust the retention policy for each log group to comply with industry regulations or legal requirements for a specific period.
\nYou can specify the minimum retention time and log group names, using the \"LogGroupNames\" and \"MinRetentionTime\" parameters in your AWS Config rules.
\n
\nSource
\nAWS Config Managed Rule: cw-loggroup-retention-period-check
\n
\nAlert Criteria
\nYellow: Retention period of an Amazon CloudWatch Log Group is less than the desired minimum number of days.
\n
\nRecommended Action
\nConfigure a retention period of more than 365 days for your log data stored in Amazon CloudWatch Logs to meet compliance requirements.
\n
\nFor more information, see Change log data retention in CloudWatch Logs.
\n
\nAdditional Resources
\nAltering CloudWatch log retention", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz186", + "status": "not_available" + } + }, + "Hs4Ma3G260": { + "metadata": { + "id": "Hs4Ma3G260", + "name": "OpenSearch domains should have fine-grained access control enabled", + "description": "Checks if Amazon OpenSearch domains have fine-grained access check enabled. This check fails if the fine-grained access check is not enabled.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.7
\n
\nAlert Criteria
\nRed: Critical or High Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G260", + "status": "not_available" + } + }, + "Hs4Ma3G261": { + "metadata": { + "id": "Hs4Ma3G261", + "name": "Redshift clusters should not use the default database name", + "description": "Checks if a Redshift cluster has changed the database name from its default value. This check will fail if the database name for a Redshift cluster is set to \u201cdev\u201d
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Redshift.9
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G261", + "status": "not_available" + } + }, + "Hs4Ma3G140": { + "metadata": { + "id": "Hs4Ma3G140", + "name": "IAM root user access key should not exist", + "description": "Checks if the root user access key is available.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.4
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G140", + "status": "not_available" + } + }, + "Hs4Ma3G262": { + "metadata": { + "id": "Hs4Ma3G262", + "name": "S3 buckets should have lifecycle policies configured", + "description": "Checks if a lifecycle policy is configured for an S3 bucket. This check fails if the lifecycle policy is not configured for an S3 bucket.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: S3.13
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G262", + "status": "not_available" + } + }, + "Hs4Ma3G141": { + "metadata": { + "id": "Hs4Ma3G141", + "name": "MFA should be enabled for all IAM users that have a console password", + "description": "Checks if AWS Multi-Factor Authentication (MFA) is enabled for all AWS Identity and Access Management (IAM) users that use a console password.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.5
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G141", + "status": "not_available" + } + }, + "Hs4Ma3G263": { + "metadata": { + "id": "Hs4Ma3G263", + "name": "Logging of delivery status should be enabled for notification messages sent to a topic", + "description": "Checks if logging is enabled for the delivery status of notification messages sent to a topic for the endpoints. This check fails if the delivery status notification for messages is not enabled.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: SNS.2
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G263", + "status": "not_available" + } + }, + "Hs4Ma3G142": { + "metadata": { + "id": "Hs4Ma3G142", + "name": "Hardware MFA should be enabled for the root user", + "description": "Checks if your AWS account is enabled to use hardware multi-factor authentication (MFA) device to sign in with root credentials.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.6
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G142", + "status": "not_available" + } + }, + "Hs4Ma3G264": { + "metadata": { + "id": "Hs4Ma3G264", + "name": "A WAF Regional rule should have at least one condition", + "description": "Checks if a WAF Regional rule has at least one condition. The check fails if no conditions are present within a rule.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: WAF.2
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G264", + "status": "not_available" + } + }, + "Hs4Ma3G143": { + "metadata": { + "id": "Hs4Ma3G143", + "name": "Password policies for IAM users should have strong configurations", + "description": "Checks if the account password policy for IAM users uses the following recommended configurations: RequireUppercaseCharacters: true, RequireLowercaseCharacters: true, RequireSymbols: true, RequireNumbers: true, MinimumPasswordLength: 8.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.7
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G143", + "status": "not_available" + } + }, + "Hs4Ma3G254": { + "metadata": { + "id": "Hs4Ma3G254", + "name": "Application Load Balancer should be configured with defensive or strictest desync mitigation mode", + "description": "Checks if the Application Load Balancer is configured with defensive or strictest de-sync mitigation mode. This check fails if the Application Load Balancer is not configured with defensive or strictest desync mitigation mode.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ELB.12
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G254", + "status": "not_available" + } + }, + "Hs4Ma3G133": { + "metadata": { + "id": "Hs4Ma3G133", + "name": "IAM customer managed policies should not allow decryption actions on all KMS keys", + "description": "Checks if the default version of IAM customer managed policies allow principals to use the AWS Key Management Service (KMS) decryption actions on all resources. This check fails if kms:Decrypt or kms:ReEncryptFrom actions are allowed on all KMS keys. The check evaluates both attached and unattached customer managed policies. It does not check inline policies or AWS managed policies.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: KMS.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G133", + "status": "not_available" + } + }, + "Hs4Ma3G255": { + "metadata": { + "id": "Hs4Ma3G255", + "name": "Classic Load Balancer should be configured with defensive or strictest desync mitigation mode", + "description": "Checks if the Classic Load Balancer is configured defensive or strictest desync mitigation mode. This check will fail if the Application Load Balancer is not configured with defensive strictest mitigation Desync mitigation mode.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ELB.14
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G255", + "status": "not_available" + } + }, + "Hs4Ma3G134": { + "metadata": { + "id": "Hs4Ma3G134", + "name": "IAM principals should not have IAM inline policies that allow decryption actions on all KMS keys", + "description": "Checks if the inline policies embedded in your IAM principals (Role/User/Group) allow the AWS Key Management Service (KMS) decryption actions on all KMS keys. This check fails if kms:Decrypt or kms:ReEncryptFrom actions are allowed on all KMS keys in an inline policy.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: KMS.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G134", + "status": "not_available" + } + }, + "Hs4Ma3G256": { + "metadata": { + "id": "Hs4Ma3G256", + "name": "Kinesis streams should be encrypted at rest", + "description": "Checks if Kinesis streams are encrypted at rest with server-side encryption. This check fails if a Kinesis stream is not encrypted at rest with server-side encryption.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Kinesis.1
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G256", + "status": "not_available" + } + }, + "Hs4Ma3G135": { + "metadata": { + "id": "Hs4Ma3G135", + "name": "AWS KMS keys should not be deleted unintentionally", + "description": "Checks whether AWS Key Management Service (KMS) keys are scheduled for deletion. The check fails if a KMS key is scheduled for deletion.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: KMS.3
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G135", + "status": "not_available" + } + }, + "Hs4Ma3G257": { + "metadata": { + "id": "Hs4Ma3G257", + "name": "Network Firewall policies should have at least one rule group associated", + "description": "Checks if a Network Firewall policy has any stateful or stateless rule groups associated. This check fails if stateless or stateful rule groups are not assigned.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: NetworkFirewall.3
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G257", + "status": "not_available" + } + }, + "Hs4Ma3G136": { + "metadata": { + "id": "Hs4Ma3G136", + "name": "Amazon SQS queues should be encrypted at rest", + "description": "Checks if Amazon SQS queues are encrypted at rest.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SQS.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G136", + "status": "not_available" + } + }, + "Hs4Ma3G258": { + "metadata": { + "id": "Hs4Ma3G258", + "name": "The default stateless action for Network Firewall policies should be drop or forward for full packets", + "description": "Checks if the default stateless action for full packets for a Network Firewall policy is drop or forward. The check passes if Drop or Forward is selected, and fails if Pass is selected.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: NetworkFirewall.4
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G258", + "status": "not_available" + } + }, + "Hs4Ma3G137": { + "metadata": { + "id": "Hs4Ma3G137", + "name": "IAM policies should not allow full \"*\" administrative privileges", + "description": "Checks if the default version of AWS Identity and Access Management (IAM) policies (also known as customer managed policies) do not have administrator access with a statement that has \"Effect\": \"Allow\" with \"Action\": \"*\" over \"Resource\": \"*\". It only assesses for the Customer Managed Policies that you created, but not inline and AWS Managed Policies.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G137", + "status": "not_available" + } + }, + "Hs4Ma3G259": { + "metadata": { + "id": "Hs4Ma3G259", + "name": "The default stateless action for Network Firewall policies should be drop or forward for fragmented packets", + "description": "Checks if a Network Firewall policy has drop or forward as the default stateless action for fragmented packets. The check passes if Drop or Forward is selected, and fails if Pass is selected.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: NetworkFirewall.5
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G259", + "status": "not_available" + } + }, + "Hs4Ma3G138": { + "metadata": { + "id": "Hs4Ma3G138", + "name": "IAM users should not have IAM policies attached", + "description": "Checks that none of your IAM users have policies attached. Instead, IAM users must inherit permissions from IAM groups or roles.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G138", + "status": "not_available" + } + }, + "Hs4Ma3G139": { + "metadata": { + "id": "Hs4Ma3G139", + "name": "IAM users' access keys should be rotated every 90 days or less", + "description": "Checks if the active access keys are rotated within 90 days.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: IAM.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G139", + "status": "not_available" + } + }, + "Hs4Ma3G230": { + "metadata": { + "id": "Hs4Ma3G230", + "name": "S3 bucket server access logging should be enabled", + "description": "Checks if an Amazon S3 Bucket has server access logging enabled to a chosen target bucket.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: S3.9
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G230", + "status": "not_available" + } + }, + "Hs4Ma3G231": { + "metadata": { + "id": "Hs4Ma3G231", + "name": "Stateless network firewall rule group should not be empty", + "description": "Checks if a Stateless Network Firewall Rule Group contains rules. The rule will fail if there are no rules in a Stateless Network Firewall Rule Group.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: NetworkFirewall.6
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G231", + "status": "not_available" + } + }, + "Hs4Ma3G110": { + "metadata": { + "id": "Hs4Ma3G110", + "name": "CloudTrail should have encryption at-rest enabled", + "description": "Checks whether AWS CloudTrail is configured to use the server-side encryption (SSE) AWS Key Management Service (AWS KMS) key encryption. The check will pass if the KmsKeyId is defined.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudTrail.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G110", + "status": "not_available" + } + }, + "Hs4Ma3G229": { + "metadata": { + "id": "Hs4Ma3G229", + "name": "CloudFront distributions should encrypt traffic to custom origins", + "description": "Checks if CloudFront distributions are encrypting traffic to custom origins. This check fails for a CloudFront distribution whose origin protocol policy allows 'http-only' or if it is 'match-viewer' and the viewer protocol policy is 'allow-all'.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: CloudFront.9
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G229", + "status": "not_available" + } + }, + "Hs4Ma3G108": { + "metadata": { + "id": "Hs4Ma3G108", + "name": "CloudTrail trails should be integrated with Amazon CloudWatch Logs", + "description": "Checks if AWS CloudTrail trails are configured to send logs to Amazon CloudWatch Logs.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudTrail.5
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G108", + "status": "not_available" + } + }, + "Hs4Ma3G109": { + "metadata": { + "id": "Hs4Ma3G109", + "name": "CloudTrail log file validation should be enabled", + "description": "Checks if CloudTrail log file validation is enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudTrail.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G109", + "status": "not_available" + } + }, + "Hs4Ma3G221": { + "metadata": { + "id": "Hs4Ma3G221", + "name": "OpenSearch domains should have audit logging enabled", + "description": "Checks if Amazon OpenSearch Service domains have audit logging enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.5
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G221", + "status": "not_available" + } + }, + "Hs4Ma3G100": { + "metadata": { + "id": "Hs4Ma3G100", + "name": "Amazon SageMaker notebook instances should not have direct internet access", + "description": "Checks if direct internet access is disabled for an Amazon SageMaker notebook instance by examining the DirectInternetAccess field is disabled for an Amazon SageMaker notebook instance.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SageMaker.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G100", + "status": "not_available" + } + }, + "Hs4Ma3G222": { + "metadata": { + "id": "Hs4Ma3G222", + "name": "OpenSearch domain error logging to CloudWatch Logs should be enabled", + "description": "Checks if Amazon OpenSearch domains are configured to send error logs to CloudWatch Logs. This check fails if error logging to CloudWatch is not enabled for a domain.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.4
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G222", + "status": "not_available" + } + }, + "Hs4Ma3G101": { + "metadata": { + "id": "Hs4Ma3G101", + "name": "Amazon Elastic MapReduce cluster master nodes should not have public IP addresses", + "description": "Checks if master nodes on EMR clusters have public IP addresses.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EMR.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G101", + "status": "not_available" + } + }, + "Hs4Ma3G223": { + "metadata": { + "id": "Hs4Ma3G223", + "name": "OpenSearch domains should encrypt data sent between nodes", + "description": "Checks if Amazon OpenSearch domains have node-to-node encryption enabled. This check fails if node-to-node encryption is disabled on the domain.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.3
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G223", + "status": "not_available" + } + }, + "Hs4Ma3G102": { + "metadata": { + "id": "Hs4Ma3G102", + "name": "Connections to Amazon Redshift clusters should be encrypted in transit", + "description": "Checks if connections to Amazon Redshift clusters are required to use encryption in transit. The check fails if the Amazon Redshift cluster parameter require_SSL is not set to 1.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Redshift.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G102", + "status": "not_available" + } + }, + "Hs4Ma3G224": { + "metadata": { + "id": "Hs4Ma3G224", + "name": "OpenSearch domains should be in a VPC", + "description": "Checks Amazon OpenSearch Service domains are in an Amazon Virtual Private Cloud (VPC).
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.2
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G224", + "status": "not_available" + } + }, + "Hs4Ma3G103": { + "metadata": { + "id": "Hs4Ma3G103", + "name": "Amazon Redshift clusters should prohibit public access", + "description": "Checks if Amazon Redshift clusters are publicly accessible. It evaluates the publiclyAccessible field in the cluster configuration item.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Redshift.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G103", + "status": "not_available" + } + }, + "Hs4Ma3G225": { + "metadata": { + "id": "Hs4Ma3G225", + "name": "OpenSearch domains should have encryption at rest enabled", + "description": "Checks if Amazon OpenSearch domains have encryption-at-rest configuration enabled. The check fails if encryption at rest is not enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.1
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G225", + "status": "not_available" + } + }, + "Hs4Ma3G104": { + "metadata": { + "id": "Hs4Ma3G104", + "name": "Redshift clusters should use enhanced VPC routing", + "description": "Checks if a Redshift cluster has EnhancedVpcRouting enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Redshift.7
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G104", + "status": "not_available" + } + }, + "Hs4Ma3G226": { + "metadata": { + "id": "Hs4Ma3G226", + "name": "Amazon EC2 instances launched using Auto Scaling group launch configurations should not have Public IP addresses", + "description": "Checks if Amazon EC2 Auto Scaling groups have public IP addresses enabled using launch configurations.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Autoscaling.5
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G226", + "status": "not_available" + } + }, + "Hs4Ma3G105": { + "metadata": { + "id": "Hs4Ma3G105", + "name": "Amazon Redshift should have automatic upgrades to major versions enabled", + "description": "Checks if an Amazon Redshift cluster is configured with automatic upgrades to major versions.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Redshift.6
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G105", + "status": "not_available" + } + }, + "Hs4Ma3G227": { + "metadata": { + "id": "Hs4Ma3G227", + "name": "CloudFront distributions should use custom SSL/TLS certificates", + "description": "Checks if CloudFront distributions are using the default SSL/TLS certificate CloudFront provides instead of a custom one. This check fails for a CloudFront distribution if it uses the default SSL/TLS certificate.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: CloudFront.7
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G227", + "status": "not_available" + } + }, + "Hs4Ma3G106": { + "metadata": { + "id": "Hs4Ma3G106", + "name": "Amazon Redshift clusters should have audit logging enabled", + "description": "Checks if an Amazon Redshift cluster has audit logging enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: Redshift.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G106", + "status": "not_available" + } + }, + "Hs4Ma3G228": { + "metadata": { + "id": "Hs4Ma3G228", + "name": "CloudFront distributions should use SNI to serve HTTPS requests", + "description": "Checks if Amazon CloudFront distributions are using a custom SSL/TLS certificate and are configured to use SNI to serve HTTPS requests as opposed to dedicated IP address.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: CloudFront.8
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G228", + "status": "not_available" + } + }, + "Hs4Ma3G107": { + "metadata": { + "id": "Hs4Ma3G107", + "name": "CloudFront distributions should require encryption in transit", + "description": "Checks if an Amazon CloudFront distribution requires viewers to use HTTPS directly, or if it uses redirection. The check fails if ViewerProtocolPolicy is set to allow-all for defaultCacheBehavior or for cacheBehaviors.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudFront.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G107", + "status": "not_available" + } + }, + "Hs4Ma3G241": { + "metadata": { + "id": "Hs4Ma3G241", + "name": "Secrets should not be passed as container environment variable", + "description": "Checks if the container environment variables includes the following keys - AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, or ECS_ENGINE_AUTH_DATA.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: ECS.8
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G241", + "status": "not_available" + } + }, + "Hs4Ma3G120": { + "metadata": { + "id": "Hs4Ma3G120", + "name": "Stopped EC2 instances should be removed after a specified time period", + "description": "Checks if any EC2 instances have been stopped for more than the allowed number of days. An EC2 instance fails this check if it is stopped for longer than the maximum allowed time period, which by default is 30 days.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G120", + "status": "not_available" + } + }, + "Hs4Ma3G242": { + "metadata": { + "id": "Hs4Ma3G242", + "name": "Amazon ECR private repositories should have image scanning enabled", + "description": "Checks if a private ECR repository has image scanning enabled. This check fails if a private ECR repository has image scanning disabled. Amazon ECR image scanning helps in identifying software vulnerabilities in your container images. Amazon ECR uses the Common Vulnerabilities and Exposures (CVEs) database from the open-source Clair project and provides a list of scan findings. Enabling image scanning on ECR repositories adds a layer of verification for the integrity and safety of the images being stored.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: ECR.1
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G242", + "status": "not_available" + } + }, + "Hs4Ma3G121": { + "metadata": { + "id": "Hs4Ma3G121", + "name": "EBS default encryption should be enabled", + "description": "Checks if Amazon Elastic Block Store (EBS) encryption is enabled by default. The check fails if EBS default encryption is not enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.7
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G121", + "status": "not_available" + } + }, + "Hs4Ma3G232": { + "metadata": { + "id": "Hs4Ma3G232", + "name": "RDS Database Clusters should use a custom administrator username", + "description": "Checks if an RDS database cluster has changed the admin username from its default value. This rule will fail if the admin username is set to the default value.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: RDS.24
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G232", + "status": "not_available" + } + }, + "Hs4Ma3G111": { + "metadata": { + "id": "Hs4Ma3G111", + "name": "CloudTrail should be enabled and configured with at least one multi-region trail", + "description": "Checks that there is at least one multi-region AWS CloudTrail trail.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudTrail.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G111", + "status": "not_available" + } + }, + "Hs4Ma3G233": { + "metadata": { + "id": "Hs4Ma3G233", + "name": "RDS database instances should use a custom administrator username", + "description": "Checks if an Amazon Relational Database Service (Amazon RDS) database instance has changed the admin username from its default value. This rule will only run on RDS database instances. The rule will fail if the admin username is set to the default value.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: RDS.25
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G233", + "status": "not_available" + } + }, + "Hs4Ma3G112": { + "metadata": { + "id": "Hs4Ma3G112", + "name": "Secrets Manager secrets should be rotated within a specified number of days", + "description": "Checks if your secrets have rotated at least once within 90 days.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SecretsManager.4
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G112", + "status": "not_available" + } + }, + "Hs4Ma3G234": { + "metadata": { + "id": "Hs4Ma3G234", + "name": "AWS CodeBuild S3 Logs should be encrypted", + "description": "Checks if a AWS CodeBuild project configured with Amazon S3 Logs has encryption enabled for its logs.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: CodeBuild.3
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G234", + "status": "not_available" + } + }, + "Hs4Ma3G113": { + "metadata": { + "id": "Hs4Ma3G113", + "name": "Secrets Manager secrets configured with automatic rotation should rotate successfully", + "description": "Checks if an AWS Secrets Manager secret rotated successfully based on the rotation schedule. The check fails if RotationOccurringAsScheduled is false. The check does not evaluate secrets that do not have rotation configured.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SecretsManager.2
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G113", + "status": "not_available" + } + }, + "Hs4Ma3G235": { + "metadata": { + "id": "Hs4Ma3G235", + "name": "Amazon ECR private repositories should have tag immutability enabled", + "description": "Checks if a private ECR repository has tag immutability enabled. This check fails if a private ECR repository has tag immutability disabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: ECR.2
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G235", + "status": "not_available" + } + }, + "Hs4Ma3G114": { + "metadata": { + "id": "Hs4Ma3G114", + "name": "Remove unused Secrets Manager secrets", + "description": "Checks if your secrets have been accessed within a specified number of days. The default value is 90 days. Secrets that have not been accessed even once within the number days you define, fail this check.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SecretsManager.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G114", + "status": "not_available" + } + }, + "Hs4Ma3G236": { + "metadata": { + "id": "Hs4Ma3G236", + "name": "Amazon ECS Task Definitions should not share the host's process namespace", + "description": "Checks if Amazon ECS Task Definitions are configured to share a host's process namespace with its containers.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: ECS.3
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G236", + "status": "not_available" + } + }, + "Hs4Ma3G115": { + "metadata": { + "id": "Hs4Ma3G115", + "name": "Secrets Manager secrets should have automatic rotation enabled", + "description": "Checks if a secret stored in AWS Secrets Manager is configured to rotate automatically.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: SecretsManager.1
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G115", + "status": "not_available" + } + }, + "Hs4Ma3G237": { + "metadata": { + "id": "Hs4Ma3G237", + "name": "Amazon ECS Containers should run as non-privileged", + "description": "Checks if the Privileged parameter in the container definition of Amazon ECS Task Definitions is set to 'true'.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: ECS.4
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G237", + "status": "not_available" + } + }, + "Hs4Ma3G116": { + "metadata": { + "id": "Hs4Ma3G116", + "name": "EBS snapshots should not be public, determined by the ability to be restorable by anyone", + "description": "Checks if Amazon Elastic Block Store snapshots are not publicly restorable.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G116", + "status": "not_available" + } + }, + "Hs4Ma3G238": { + "metadata": { + "id": "Hs4Ma3G238", + "name": "Amazon ECS Containers should only have read-only access to its root filesystems", + "description": "Checks if ECS Containers are limited to read-only access to its mounted root filesystems.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: ECS.5
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G238", + "status": "not_available" + } + }, + "Hs4Ma3G117": { + "metadata": { + "id": "Hs4Ma3G117", + "name": "Attached EBS volumes should be encrypted at-rest", + "description": "Checks if the EBS volumes that are in an attached state are encrypted.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.3
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G117", + "status": "not_available" + } + }, + "Hs4Ma3G118": { + "metadata": { + "id": "Hs4Ma3G118", + "name": "The VPC default security group should not allow inbound and outbound traffic", + "description": "Checks that the default security group of a VPC does not allow inbound or outbound traffic.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.2
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G118", + "status": "not_available" + } + }, + "c18d2gz152": { + "metadata": { + "id": "c18d2gz152", + "name": "AWS Backup Vault Without Resource-Based Policy to Prevent Deletion of Recovery Points", + "description": "Checks if AWS Backup vaults have an attached resource-based policy that prevents recovery point deletion.
\n
\nThe resource-based policy prevents unexpected deletion of recovery points, which allows you to enforce access control with least privileges against your backup data.
\nYou can specify the AWS Identity and Access Management (IAM) Amazon Resource Names (ARNs) that you do not want the rule to check in the \"principalArnList\" parameters of your AWS Config rules.
\n
\nSource
\nAWS Config Managed Rule: backup-recovery-point-manual-deletion-disabled
\n
\nAlert Criteria
\nYellow: There are AWS Backup vaults that don't have a resource-based policy to prevent deletion of recovery points.
\n
\nRecommended Action
\nCreate resource-based policies for your AWS Backup vaults to prevent unexpected deletion of recovery points.
\n
\nThe policy must include a \"Deny\" statement with backup:DeleteRecoveryPoint, backup:UpdateRecoveryPointLifecycle, and backup:PutBackupVaultAccessPolicy permissions.
\n
\nFor more information, see Set access policies on backup vaults.
\n
\nAdditional Resources
\nSetting access policies on backup vaults", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz152", + "status": "not_available" + } + }, + "Hs4Ma3G207": { + "metadata": { + "id": "Hs4Ma3G207", + "name": "EC2 subnets should not automatically assign public IP addresses", + "description": "Checks if the assignment of public IPs in Amazon Virtual Private Cloud (VPC) subnets have the MapPublicIpOnLaunch set to FALSE. The check will pass if the flag is set to FALSE.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.15
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G207", + "status": "not_available" + } + }, + "Hs4Ma3G208": { + "metadata": { + "id": "Hs4Ma3G208", + "name": "EC2 instances should not use multiple ENIs", + "description": "Checks to see if Amazon EC2 instance uses multiple ENI/EFA. This check will pass if single network adapters is used.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.17
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G208", + "status": "not_available" + } + }, + "Hs4Ma3G209": { + "metadata": { + "id": "Hs4Ma3G209", + "name": "Unused Network Access Control Lists should be removed", + "description": "Checks to see if there are any NACLs (Network Access Control List) that are unused. The check will check the item configuration of the resource AWS::EC2::NetworkAcl and determine the relationships of the NACL.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.16
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G209", + "status": "not_available" + } + }, + "Hs4Ma3G200": { + "metadata": { + "id": "Hs4Ma3G200", + "name": "CloudFront distributions should have a default root object configured", + "description": "Checks if an Amazon CloudFront distribution is configured to return a specific object that is the default root object. The check fails if the CloudFront distribution does not have a default root object configured.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudFront.1
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G200", + "status": "not_available" + } + }, + "Hs4Ma3G201": { + "metadata": { + "id": "Hs4Ma3G201", + "name": "CloudFront distributions should have WAF enabled", + "description": "Checks to see if Amazon CloudFront distributions are associated with either WAF or WAFv2 web ACLs. The check fails if a CloudFront distribution is not associated with a web ACL.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudFront.6
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G201", + "status": "not_available" + } + }, + "Hs4Ma3G202": { + "metadata": { + "id": "Hs4Ma3G202", + "name": "API Gateway REST API cache data should be encrypted at rest", + "description": "Checks if all methods in Amazon API Gateway REST API stages that have cache enabled are encrypted. The check fails if any method in API Gateway REST API stage is configured to cache and the cache is not encrypted.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: APIGateway.5
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G202", + "status": "not_available" + } + }, + "Hs4Ma3G203": { + "metadata": { + "id": "Hs4Ma3G203", + "name": "Amazon Elasticsearch Service domains should have audit logging enabled", + "description": "This check checks whether Amazon Elasticsearch Service domains have audit logging enabled. This check fails if an Amazon Elasticsearch Service domain does not have audit logging enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ES.5
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G203", + "status": "not_available" + } + }, + "Hs4Ma3G204": { + "metadata": { + "id": "Hs4Ma3G204", + "name": "Security groups should not allow unrestricted access to ports with high risk", + "description": "Checks if unrestricted incoming traffic for the security groups is accessible to the specified ports [3389, 20, 23, 110, 143, 3306, 8080, 1433, 9200, 9300, 25, 445, 135, 21, 1434, 4333, 5432, 5500, 5601, 22 ] that have the highest risk. This check passes when none of the rules in a security group allow ingress traffic from 0.0.0.0/0 for the listed ports.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.19
\n
\n

Alert Criteria


\nRed: Critical or High. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G204", + "status": "not_available" + } + }, + "Hs4Ma3G205": { + "metadata": { + "id": "Hs4Ma3G205", + "name": "Classic Load Balancers with HTTPS/SSL listeners should use a predefined security policy that has strong configuration", + "description": "Checks if your Classic Load Balancer SSL listeners use the predefined policy ELBSecurityPolicy-TLS-1-2-2017-01. The check fails if the Classic Load Balancer SSL listeners do not use the predefined policy ELBSecurityPolicy-TLS-1-2-2017-01.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: ELB.8
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G205", + "status": "not_available" + } + }, + "Hs4Ma3G206": { + "metadata": { + "id": "Hs4Ma3G206", + "name": "Amazon EC2 should be configured to use VPC endpoints that are created for the Amazon EC2 service", + "description": "Checks if a service endpoint for Amazon EC2 is created for each VPC. The check fails if a VPC does not have a VPC endpoint created for the Amazon EC2 service.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: EC2.10
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G206", + "status": "not_available" + } + }, + "Hs4Ma3G220": { + "metadata": { + "id": "Hs4Ma3G220", + "name": "Connections to OpenSearch domains should be encrypted using TLS 1.2", + "description": "Checks if connections to OpenSearch domains are required to use TLS 1.2. The check fails if the OpenSearch domain TLSSecurityPolicy is not Policy-Min-TLS-1-2-2019-07.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.8
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G220", + "status": "not_available" + } + }, + "Hs4Ma3G218": { + "metadata": { + "id": "Hs4Ma3G218", + "name": "CodeBuild project environments should not have privileged mode enabled", + "description": "Checks if an AWS CodeBuild project environment has privileged mode enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: CodeBuild.5
\n
\n

Alert Criteria


\nRed: Critical or High Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G218", + "status": "not_available" + } + }, + "Hs4Ma3G219": { + "metadata": { + "id": "Hs4Ma3G219", + "name": "Amazon Redshift clusters should not use the default Admin username", + "description": "Checks if a Redshift cluster has changed the Admin username from its default value. This check will fail if the admin username for a Redshift cluster is set to 'awsuser'.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: Redshift.8
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G219", + "status": "not_available" + } + }, + "c9D319e7sG": { + "metadata": { + "id": "c9D319e7sG", + "name": "Amazon Route 53 MX Resource Record Sets and Sender Policy Framework", + "description": "For each MX resource record set, checks that the TXT or SPF resource record set contains a valid SPF record. The record must start with \"v=spf1\". The SPF record specifies the servers that are authorized to send email for your domain, which helps detect and stop email address spoofing to reduce spam. Route 53 recommends that you use a TXT record instead of an SPF record. Trusted Advisor reports this check as green as long as each MX resource record set has at least one SPF or TXT record.\n
\n
\n

Alert Criteria

\n
\nYellow: An MX resource record set doesn\u2019t have a TXT or SPF resource record that contains a valid SPF value.\n

\n

Recommended Action

\n
\nFor each MX resource record set, create a TXT resource record set that contains a valid SPF value. For more information, see Sender Policy Framework: SPF Record Syntax and Creating Resource Record Sets By Using the Amazon Route 53 Console.\n

\n

Additional Information

\n
\nSender Policy Framework (Wikipedia)
\nMX record (Wikipedia)", + "category": "security", + "metadata": [ + "Hosted Zone Name", + "Hosted Zone ID", + "Resource Record Set Name", + "Status" + ] + }, + "reports": { + "checkId": "c9D319e7sG", + "timestamp": "2023-11-24T06:37:57Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Qsdfp3A4L4": { + "metadata": { + "id": "Qsdfp3A4L4", + "name": "Amazon EC2 instances with Microsoft Windows Server end of support", + "description": "This check alerts you if the versions are near or have reached the end of support. Each Windows Server version offers 10 years of support, including 5 years of mainstream support and 5 years of extended support. After the end of support, the Windows Server version won\u2019t receive regular security updates. Running applications with unsupported Windows Server versions can bring security or compliance risks.
\n
\n

Alert Criteria


\nRed: An EC2 instance has a Windows Server version that has reached end of support (Windows Server 2003, 2008, and 2008R2)
\nYellow: An EC2 instance has a Windows Server version that will reach end of support in less than 18 months (Windows Server 2012 & 2012 R2)
\n
\n

Recommended Action


\nConsider the following guidelines for end of support Windows Server EC2 instances:
\n
\nTo modernize your Windows Server workloads, consider the various pathways available on the Modernize Windows Workloads with AWS website.
\n
\nTo upgrade your Windows Server workloads onto modern versions of Windows Server, consider using an automation runbook to simplify your upgrade. For more information, see the AWS Systems Manager documentation.
\n
\nIf you can\u2019t upgrade your Windows Server workloads due to application incompatibilities, consider the End-of-Support Migration Program (EMP) for Windows Server. For more information on the program and tooling, see the EMP website. You can also purchase Extended Security Updates (ESU) from Microsoft for a maximum of 3 years after a product\u2019s end of support date. Learn more.
\n", + "category": "security", + "metadata": [ + "Status", + "Region", + "Instance ID", + "Windows Server Version", + "Support Cycle", + "End of Support", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Qsdfp3A4L4", + "timestamp": "2023-11-27T12:24:26Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Qsdfp3A4L3": { + "metadata": { + "id": "Qsdfp3A4L3", + "name": "Amazon EC2 instances with Microsoft SQL Server end of support", + "description": "Checks the SQL Server versions for Amazon Elastic Compute Cloud (Amazon EC2) instances running in the past 24 hours. This check alerts you if the versions are near or have reached the end of support. Each SQL Server version offers 10 years of support, including 5 years of mainstream support and 5 years of extended support. After the end of support, the SQL Server version won\u2019t receive regular security updates. Running applications with unsupported SQL Server versions can bring security or compliance risks.
\n
\n

Alert Criteria


\nRed: An EC2 instance has an SQL Server version that reached the end of support.
\nYellow: An EC2 instance has an SQL Server version that will reach the end of support in 12 months.
\n
\n

Recommended Action


\nTo modernize your SQL Server workloads, consider refactoring to AWS Cloud native databases like Amazon Aurora. For more information, see Modernize Windows Workloads with AWS.
\nTo move to a fully managed database, consider replatforming to Amazon Relational Database Service (Amazon RDS). For more information, see RDS for SQL Server.
\nTo upgrade your SQL Server on EC2, consider using the automation runbook to simplify your upgrade. For more information, see the AWS Systems Manager documentation.
\nIf you can\u2019t upgrade your SQL Server on EC2, consider the End-of-Support Migration Program (EMP) for Windows Server. For more information, see the EMP Website
\n
\n

Additional Resources


\nGet ready for SQL Server end of support with AWS
\nMicrosoft SQL Server on AWS
\n", + "category": "security", + "metadata": [ + "Status", + "Region", + "Instance ID", + "SQL Server Version", + "Support Cycle", + "End of Support", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Qsdfp3A4L3", + "timestamp": "2023-11-27T12:24:27Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Hs4Ma3G210": { + "metadata": { + "id": "Hs4Ma3G210", + "name": "CloudFront distributions should have logging enabled", + "description": "Checks to see if server access logging is enabled on Amazon CloudFront Distributions. The check will fail if access logging is not enabled for the distribution.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub control ID: CloudFront.5
\n
\n

Alert Criteria


\nYellow: Medium or Low. Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G210", + "status": "not_available" + } + }, + "Hs4Ma3G211": { + "metadata": { + "id": "Hs4Ma3G211", + "name": "S3 buckets with versioning enabled should have lifecycle policies configured", + "description": "Checks if Amazon Simple Storage Service (Amazon S3) version enabled buckets have lifecycle policy configured. This rule fails if Amazon S3 lifecycle policy is not enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: S3.10
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G211", + "status": "not_available" + } + }, + "Hs4Ma3G212": { + "metadata": { + "id": "Hs4Ma3G212", + "name": "S3 buckets should have event notifications enabled", + "description": "Checks if S3 Event Notifications are enabled on an S3 bucket. This check fails if S3 Event Notifications are not enabled on a bucket.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: S3.11
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G212", + "status": "not_available" + } + }, + "Hs4Ma3G213": { + "metadata": { + "id": "Hs4Ma3G213", + "name": "S3 access control lists (ACLs) should not be used to manage user access to buckets", + "description": "Checks if S3 buckets allow user permissions via access check lists (ACLs). This check fails if ACLs are configured for user access on S3 Bucket.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: S3.12
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G213", + "status": "not_available" + } + }, + "Hs4Ma3G214": { + "metadata": { + "id": "Hs4Ma3G214", + "name": "Network ACLs should not allow ingress from 0.0.0.0/0 to port 22 or port 3389", + "description": "Checks if a network access check list (NACL) allows unrestricted access to the default ports for SSH/RDP ingress traffic. The rule fails if a NACL inbound entry allows a source CIDR block of '0.0.0.0/0' or '::/0' for ports 22 or 3389
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: EC2.21
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G214", + "status": "not_available" + } + }, + "Hs4Ma3G215": { + "metadata": { + "id": "Hs4Ma3G215", + "name": "Unused EC2 security groups should be removed", + "description": "Checks that security groups are attached to Amazon EC2 instances or to an elastic network interface. The check will fail the security group is not associated with an Amazon EC2 instance or an elastic network interface.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: EC2.22
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G215", + "status": "not_available" + } + }, + "Hs4Ma3G216": { + "metadata": { + "id": "Hs4Ma3G216", + "name": "ECR repositories should have at least one lifecycle policy configured", + "description": "Checks if an ECR repository has at least one lifecycle policy configured. This check fails if an ECR repository does not have any lifecycle policies configured.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: ECR.3
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G216", + "status": "not_available" + } + }, + "Hs4Ma3G217": { + "metadata": { + "id": "Hs4Ma3G217", + "name": "CodeBuild project environments should have a logging configuration", + "description": "Checks if a CodeBuild project environment has at least one log option enabled.
\n
\n

Source


\nAWS Security Hub
\nSecurity Hub Control Id: CodeBuild.4
\n
\n

Alert Criteria


\nYellow: Medium or Low Security Hub control failed.
\n
\n

Recommended Action


\nFollow the Security Hub documentation to fix the issue.", + "category": "security", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G217", + "status": "not_available" + } + } + }, + "operational_excellence": { + "c18d2gz134": { + "metadata": { + "id": "c18d2gz134", + "name": "Amazon Redshift cluster audit logging", + "description": "Checks if your Amazon Redshift clusters have database audit logging turned on. Amazon Redshift logs information about connections and user activities in your database.
\n
\nFor more information, see Database audit logging
\n
\nSource
\nAWS Config Managed Rule: redshift-audit-logging-enabled
\n
\nAlert Criteria
\nYellow: Amazon Redshift cluster has database audit logging disabled
\n
\nRecommended Action
\nTurn on logging and monitoring for your Amazon Redshift clusters. For more information see Configuring auditing using the console.
\n
\nAdditional Resources
\nLogging and monitoring in Amazon Redshift", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz134", + "status": "not_available" + } + }, + "c18d2gz122": { + "metadata": { + "id": "c18d2gz122", + "name": "Amazon VPC Without Flow Logs", + "description": "Checks if Amazon VPC Flow Logs are created for a VPC.
\n
\nFor more information, see Logging IP traffic using VPC Flow Logs.
\n
\nSource
\nAWS Config Managed Rule: vpc-flow-logs-enabled
\n
\nAlert Criteria
\nYellow: VPCs do not have VPC Flow Logs.
\n
\nRecommended Action
\nCreate VPC Flow Logs for each of your VPCs.
\n
\nFor more information, see Create a flow log.
\n", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz122", + "status": "not_available" + } + }, + "c18d2gz121": { + "metadata": { + "id": "c18d2gz121", + "name": "Amazon SNS Topics Not Logging Message Delivery Status", + "description": "Checks if Amazon Simple Notification Service (SNS) topics have message delivery status logging turned on.
\n
\nConfigure SNS topics for logging message delivery status to help provide better operational insights. For example, message delivery logging verifies if a message was delivered to a particular Amazon SNS endpoint. And, it also helps identify the response sent from the endpoint.
\n
\nFor more information, see Amazon SNS message delivery status.
\n
\nSource
\nAWS Config Managed Rule: sns-topic-message-delivery-notification-enabled
\n
\nAlert Criteria
\nYellow: Message delivery status logging is not turned on for a SNS topic.
\n
\nRecommended Action
\nTurn on message delivery status logging for your SNS topics. For more information, see Configuring delivery status logging using the AWS Management Console.
\n\n
Turn on image tag immutability for a private ECR repository to prevent image tags from being overwritten. This allows you to rely on descriptive tags as a reliable mechanism to track and uniquely identify images.For example, if image tag immutability is turned on, users can reliably use an image tag to correlate a deployed image version with the build that produced such image.
\n
For more information, see Image tag mutability.
\n
\nSource
\nAWS Config Managed Rule: ecr-private-tag-immutability-enabled
\n
\nAlert Criteria
\nYellow: An Amazon ECR private repository doesn\u2019t have tag immutability turned on..
\n
\nRecommended Action
\nTurn on image tag immutability for your Amazon ECR private repositories. For more information, see Image tag mutability.
\n", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz129", + "status": "not_available" + } + }, + "c18d2gz126": { + "metadata": { + "id": "c18d2gz126", + "name": "Amazon API Gateway REST APIs Without X-Ray Tracing Enabled", + "description": "Checks if Amazon API Gateway REST APIs have AWS X-Ray tracing turned on.
\n
\nTurn on X-Ray tracing for your REST APIs to allow API Gateway to sample API invocation requests with trace information. This allows you to take advantage of AWS X-Ray to trace and analyze requests as they travel through your API Gateway REST APIs to the downstream services.
\n
For more information, see Tracing user requests to REST APIs using X-Ray.
\n
\nSource
\nAWS Config Managed Rule: api-gw-xray-enabled
\n
\nAlert Criteria
\nYellow: X-Ray tracing is not turned on for an API Gateway REST API.
\n
\nRecommended Action
\nTurn on X-Ray tracing for your API Gateway REST APIs. For more information, see Setting up AWS X-Ray with API Gateway REST APIs.
\n
\nAdditional Resources
\nTracing user requests to REST APIs using X-Ray
\nWhat is AWS X-Ray?", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz126", + "status": "not_available" + } + }, + "c18d2gz125": { + "metadata": { + "id": "c18d2gz125", + "name": "Amazon API Gateway Not Logging Execution Logs", + "description": "Checks if Amazon API Gateway has Amazon CloudWatch Logs turned on.
\n
Turn on CloudWatch logging for REST API methods or WebSocket API routes in Amazon API Gateway to collect execution logs in CloudWatch Logs for requests received by your APIs. The information contained in the execution logs helps identify and troubleshoot issues related to your API.
\nYou can specify the logging level, using the \"loggingLevel\" parameters in your AWS Config rules.
\n
\nRefer to the REST API or WebSocket API documentation for more information about CloudWatch logging in Amazon API Gateway.
\n
\nSource
\nAWS Config Managed Rule: api-gw-execution-logging-enabled
\n
\nAlert Criteria
\nYellow: CloudWatch logging for execution logs is not turned on for an Amazon API Gateway.
\n
\nRecommended Action
\nTurn on CloudWatch logging for execution logs for your Amazon API Gateway REST APIs or WebSocket APIs.
\nTo enable CloudWatch logging refer to the Amazon API Gateway documentation for REST APIs or WebSocket APIs.
\n
\nAdditional Resources
\nSetting up CloudWatch logging for a REST API
\nConfiguring logging for a WebSocket API", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz125", + "status": "not_available" + } + }, + "c18d2gz111": { + "metadata": { + "id": "c18d2gz111", + "name": "AWS CloudFormation Stack Notification", + "description": "Checks if all of your AWS CloudFormation stacks use Amazon SNS to receive notifications when an event occurs.
\nYou can configure this check to look for specific SNS Topic ARN using parameters in your AWS Config rules.
\nFor more information, see Setting AWS CloudFormation stack options for more information about AWS CloudFormation Stack Notification.
\n
\nSource
\nAWS Config Managed Rule: cloudformation-stack-notification-check
\n
\nAlert Criteria
\nYellow: SNS event notifications for your AWS CloudFormation stacks are not turned on.
\n
\nRecommended Action
\nMake sure that your AWS CloudFormation stacks use Amazon SNS to receive notifications when an event occurs. Monitoring stack events helps you to respond quickly to unauthorized actions that might alter your AWS environment.
\n
\nAdditional Resources
\nHow can I receive an email alert when my AWS CloudFormation stack enters ROLLBACK_IN_PROGRESS status?", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz111", + "status": "not_available" + } + }, + "c18d2gz110": { + "metadata": { + "id": "c18d2gz110", + "name": "Amazon CloudFront Access Log Configured", + "description": "Checks if Amazon CloudFront distributions are configured to capture information from Amazon S3server access logs. S3 server access logs contain detailed information about every user request that CloudFront receives.
\nYou can adjust the the name of the Amazon S3 bucket for storing server access logs, using the \"S3BucketName\" parameter in your AWS Config rules.
\nFor more information, see Configuring and using standard logs (access logs) for more information about Amazon CloudFront Logging
\n
\nSource
\nAWS Config Managed Rule: cloudfront-accesslogs-enabled
\n
\nAlert Criteria
\nYellow: Amazon CloudFront Access Logging is not enabled
\n
\nRecommended Action
\nMake sure that you turn on Amazon CloudFront access logging to capture detailed information about every user request that CloudFront receives.
\nYou can turn on standard logs when you create or update a distribution. For more information, see Values that you specify when you create or update a distribution.
\n
\nAdditional Resources
\nValues that you specify when you create or update a distribution
\nCloudFront Access Log", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz110", + "status": "not_available" + } + }, + "c18d2gz115": { + "metadata": { + "id": "c18d2gz115", + "name": "AWS CodeDeploy Lambda is using all at-once deployment configuration", + "description": "Checks if the AWS CodeDeploy deployment group for AWS Lambda compute platform is using all-at-once deployment configuration.
\n
\nTo reduce the risk of deployment failures of your Lambda functions in CodeDeploy, it's a best practice to use the canary or linear deployment configuration instead of the default option where all traffic is shifted from the original Lambda function to the updated function at once.
\n
For more information, see Lambda function versions and Deployment configuration
\n
\nSource
\nAWS Config Managed Rule: codedeploy-lambda-allatonce-traffic-shift-disabled
\n
\nAlert Criteria
\nYellow: AWS CodeDeploy Lambda deployment uses the all-at-once deployment configuration to shift all traffic to the updated Lambda functions at once.
\n
\nRecommended Action
\nUse the Canary or Linear deployment configuration of CodeDeploy deployment group for the Lambda compute platform.
\n
\nAdditional Resources
\nDeployment configuration", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz115", + "status": "not_available" + } + }, + "c18d2gz113": { + "metadata": { + "id": "c18d2gz113", + "name": "AWS CodeBuild Project Logging", + "description": "Checks If the AWS CodeBuild project environment uses logging. Logging options can be logs in Amazon CloudWatch Logs, or built in a specified S3 bucket, or both. Enabling logging in a CodeBuild project can provide several benefits such as debugging and auditing.
\nYou can specify the the name of the Amazon S3 bucket or CloudWatch Log Group for storing the logs, using the \u201cs3BucketNames\" or \"cloudWatchGroupNames\" parameter in your AWS Config rules.
\nFor more information, see Monitoring AWS CodeBuild.
\n
\nSource
\nAWS Config Managed Rule: codebuild-project-logging-enabled
\n
\nAlert Criteria
\nYellow: AWS Code Build Project Logging is not enabled
\n
\nRecommended Action
\nMake sure that logging is turned on in your AWS CodeBuild project.
\n
\nFor more information, see Logging and monitoring in AWS CodeBuild.
\n", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz113", + "status": "not_available" + } + }, + "c18d2gz114": { + "metadata": { + "id": "c18d2gz114", + "name": "AWS CodeDeploy Auto Rollback and Monitor Enabled", + "description": "Checks if the deployment group is configured with automatic deployment rollback and deployment monitoring with alarms attached. If something goes wrong during a deployment, it is automatically rolled back, and your application remains in a stable state.
\nFor more information, see Redeploy and roll back a deployment with CodeDeploy
\n
\nSource
\nAWS Config Managed Rule: codedeploy-auto-rollback-monitor-enabled
\n
\nAlert Criteria
\nYellow: AWS CodeDeploy automatic deployment rollback and deployment monitoring are not enabled
\n
\nRecommended Action
\nConfigure a deployment group or deployment to automatically roll back when a deployment fails or when a monitoring threshold you specify is met.
\n
\nConfigure alarm to monitor various metrics, such as CPU usage, memory usage, or network traffic, during the deployment process. If any of these metrics exceed certain thresholds, the alarms will trigger, and the deployment will be stopped or rolled back.
\n
\nFor more information on setting up automatic rollbacks and configuring alarms for your deployment groups, see Configure advanced options for a deployment group
\n
\nAdditional Resources
\nWhat is CodeDeploy", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz114", + "status": "not_available" + } + }, + "c18d2gz108": { + "metadata": { + "id": "c18d2gz108", + "name": "AWS Elastic Beanstalk Enhanced Health Reporting Is Not Configured", + "description": "Checks if an AWS Elastic Beanstalk environment is configured for enhanced health reporting.
\n
Elastic Beanstalk Enhanced Health Reporting provides detailed performance metrics, such as CPU usage, memory usage, network traffic, and infrastructure health information, such as number of instances and load balancer status.
\n
Turn on this feature to help optimize performance and troubleshoot issues for applications running on Elastic Beanstalk.
\n
For more information, see Enhanced health reporting and monitoring for more information about AWS Elastic Beanstalk enhanced health reporting
\n
\nSource
\nAWS Config Managed Rule: beanstalk-enhanced-health-reporting-enabled
\n
\nAlert Criteria
\nYellow: AWS Elastic Beanstalk environment is not configured for enhanced health reporting
\n
\nRecommended Action
\nMake sure that an Elastic Beanstalk environment is configured for enhanced health reporting.
\n
\nEnhanced Health Reporting provides detailed performance and infrastructure health metrics that help optimize application performance and troubleshoot issues in the Elastic Beanstalk environment. It includes metrics such as CPU usage, memory usage, network traffic, and infrastructure health, such as the number of instances and load balancer status.
\n
\nFor more information, see Enabling enhanced health reporting using the Elastic Beanstalk console.
\n
\nAdditional Resources
\nEnabling Elastic Beanstalk enhanced health reporting
\nEnhanced health reporting and monitoring", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz108", + "status": "not_available" + } + }, + "c18d2gz109": { + "metadata": { + "id": "c18d2gz109", + "name": "Amazon CloudWatch Alarm action is disabled", + "description": "Checks if your Amazon CloudWatch alarm action is in a disabled state.
\n
\nYou can use the AWS CLI to enable or disable the action feature in your alarm. Or, you can programatically disable or enable the action feature using the AWS SDK.When the alarm action feature is turned off, CloudWatch doesn't perform any defined action in any state (OK, INSUFFICIENT_DATA, ALARM).
\n
\nSource
\nAWS Config Managed Rule: cloudwatch-alarm-action-enabled-check
\n
\nAlert Criteria
\nYellow: Amazon CloudWatch Alarm action is not enabled. No action is performed in any alarm state.
\n
\nRecommended Action
\nEnable actions in your CloudWatch alarms unless you have a valid reason to disable them, such as for testing purposes.
\n
\nIf the CloudWatch alarm is no longer needed, delete it to avoid incurring unnecessary costs.
\n
\nFor more information, see enable-alarm-actions in the AWS CLI Command Reference and func (*CloudWatch) EnableAlarmActions in the AWS SDK for Go API Reference.", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz109", + "status": "not_available" + } + }, + "c1qf5bt010": { + "metadata": { + "id": "c1qf5bt010", + "name": "Amazon RDS DB instances in the clusters with heterogeneous parameter groups", + "description": "We recommend that all of the DB instances in the DB cluster use the same DB parameter group.
\n
\n

Alert Criteria


\nYellow: DB clusters have the DB instances with heterogeneous parameter groups
\n
\n

Recommended Action


\nAssociate the DB instance with the DB parameter group associated with the writer instance in your DB cluster
\n
\n

Additional Resources



When the DB instances in your DB cluster use different DB parameter groups, there can be an inconsistent behavior during a failover or compatibility issues between the DB instances in your DB cluster.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt010", + "timestamp": "2023-11-27T12:22:32Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt012": { + "metadata": { + "id": "c1qf5bt012", + "name": "Amazon RDS Performance Insights is turned off", + "description": "Amazon RDS Performance Insights monitors your DB instance load to help you analyze and resolve database performance issues. We recommend that you turn on Performance Insights.
\n
\n

Alert Criteria


\nYellow: RDS resources don't have Performance Insights turned on
\n
\n

Recommended Action


\nTurn on Performance Insights
\n
\n

Additional Resources



Performance Insights uses a lightweight data collection method that doesn't impact the performance of your applications. Performance Insights helps you assess the database load quickly.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt012", + "timestamp": "2023-11-27T12:22:33Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt004": { + "metadata": { + "id": "c1qf5bt004", + "name": "Amazon RDS Enhanced Monitoring is turned off", + "description": "Your database resources don't have Enhanced Monitoring turned on. Enhanced Monitoring provides real-time operating system metrics for monitoring and troubleshooting.
\n
\n

Alert Criteria


\nYellow: RDS resources don't have Enhanced Monitoring turned on
\n
\n

Recommended Action


\nTurn on Enhanced Monitoring
\n
\n

Additional Resources



Enhanced Monitoring for Amazon RDS provides additional visibility on the health of your DB instances. We recommend that you turn on Enhanced Monitoring. When the Enhanced Monitoring option is turned on for your DB instance, it collects vital operating system metrics and process information.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt004", + "timestamp": "2023-11-27T11:22:42Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 2, + "resourcesFlagged": 2, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Yellow", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:vchalla-quay-quay-db", + "60", + "mysql", + "2023-11-09T08:20:36.000Z" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Yellow", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:standardization-db", + "60", + "postgres", + "2023-11-09T01:51:15.000Z" + ] + } + ] + } + }, + "c1qf5bt027": { + "metadata": { + "id": "c1qf5bt027", + "name": "Amazon RDS track_counts parameter is turned off", + "description": "When the track_counts parameter is turned off, the database doesn't collect the database activity statistics. Autovacuum requires these statistics to work correctly.
\n
\nWe recommend that you set track_counts parameter to 1
\n
\n

Alert Criteria


\nYellow: DB parameter groups have track_counts parameter turned off
\n
\n

Recommended Action


\nSet track_counts parameter to 1
\n
\n

Additional Resources



When track_counts parameter is turned off, it disables the collection of database activity statistics. The autovacuum daemon requires the collected statistics to identify the tables for autovacuum and autoanalyze.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt027", + "timestamp": "2023-11-27T12:22:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c18d2gz184": { + "metadata": { + "id": "c18d2gz184", + "name": "Amazon OpenSearch Service logging CloudWatch not configured", + "description": "Checks if Amazon OpenSearch Service domains are configured to send logs to Amazon CloudWatch Logs.
\n
\nMonitoring logs is crucial for maintaining the reliability, availability, and performance of OpenSearch Service.
\n
Search slow logs, indexing slow logs, and error logs are useful for troubleshooting performance and stability issues your workload. These logs need to be enabled to capture data.
\n
\nFor more information, see Monitoring Amazon OpenSearch Service domainns.
\n
\nSource
\nAWS Config Managed Rule: opensearch-logs-to-cloudwatch
\n
\nAlert Criteria
\nYellow: Amazon OpenSearch does not have a logging configuration with Amazon CloudWatch Logs
\n
\nRecommended Action
\nConfigure OpenSearch Service domains to publish logs to CloudWatch Logs.
\n
\nFor more information, see Enabling log publishing (console).
\n
\nAdditional Resources
\nMonitoring OpenSearch cluster metrics with Amazon CloudWatch", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz184", + "status": "not_available" + } + }, + "c18d2gz177": { + "metadata": { + "id": "c18d2gz177", + "name": "AWS Elastic Beanstalk with Managed Platform Updates disabled", + "description": "Checks if managed platform updates in AWS Elastic Beanstalk environments and configuration templates are enabled.
\n
\nAWS Elastic Beanstalk regularly releases platform updates to provide fixes, software updates, and new features. With managed platform updates, Elastic Beanstalk can automatically perform platform updates for new patch and minor platform versions.
\nYou can specify your desired update level in the \"UpdateLevel\" parameters of your AWS Config rules.
\n
For more information, see Updating your Elastic Beanstalk environment's platform version.
\n
\nSource
\nAWS Config Managed Rule: elastic-beanstalk-managed-updates-enabled
\n
\nAlert Criteria
\nYellow: AWS Elastic Beanstalk managed platform updates is not enabled, or at minor/patch level.
\n
\nRecommended Action
\nEnable managed platform updates in your AWS Elastic Beanstalk environments, or configure it for at a minor or patch update level.
\n
\nFor more information, see Managed platform updates.
\n", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz177", + "status": "not_available" + } + }, + "c18d2gz175": { + "metadata": { + "id": "c18d2gz175", + "name": "Amazon ECS task Logging not enabled", + "description": "Checks if log configuration is set on active Amazon ECS task definitions. Checking the log configuration in your ECS task definitions makes sure that logs generated by containers are properly configured and stored. This helps identify and troubleshoot issues more quickly, optimize performance, and meet compliance requirements.
\n
\nBy default, the logs that are captured show the command output that you typically see in an interactive terminal if you ran the container locally. The awslogs driver passes these logs from Docker to Amazon CloudWatch Logs.
\n
\nFor more information, see Using awslogs log driver.
\n
\nSource
\nAWS Config Managed Rule: ecs-task-definition-log-configuration
\n
\nAlert Criteria
\nYellow: Amazon ECS task definition does not have a logging configuration.
\n
\nRecommended Action
\nConsider specifying the log driver configuration in container definition to send log information to CloudWatch Logs or a different logging driver.
\n
\nFor more information, see LogConfiguration.
\n
\nAdditional Resources
\nExample task definitions.", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz175", + "status": "not_available" + } + }, + "c18d2gz173": { + "metadata": { + "id": "c18d2gz173", + "name": "Amazon ECS clusters with Container Insights disabled", + "description": "Checks if Amazon CloudWatch Container Insights is turned on for your Amazon ECS clusters. CloudWatch Container Insights collects, aggregates, and summarizes metrics and logs from your containerized applications and microservices. The metrics include utilization for resources such as CPU, memory, disk, and network.
\n
\nFor more information, see Amazon ECS CloudWatch Container Insights.
\n
\nSource
\nAWS Config Managed Rule: ecs-container-insights-enabled
\n
\nAlert Criteria
\nYellow: Amazon ECS cluster does not have container insights enabled.
\n
\nRecommended Action
\nTurn on CloudWatch Container Insights on your ECS clusters.
\n
\nFor more information, see Using Container Insights.
\n
\nAdditional Resources
\nCloudWatch Container Insights for Amazon ECS", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz173", + "status": "not_available" + } + }, + "c18d2gz174": { + "metadata": { + "id": "c18d2gz174", + "name": "AWS Fargate platform version is not latest", + "description": "Checks if Amazon ECS is running the latest platform version of AWS Fargate. The Fargate platform version refers to a specific runtime environment for Fargate task infrastructure. It's a combination of the kernel and container runtime versions. New platform versions are released as runtime environment evolves. For example, if there are kernel or operating system updates, new features, bug fixes, or security updates.
\n
\nFor more information, see AWS Fargate task maintenance.
\n
\nSource
\nAWS Config Managed Rule: ecs-fargate-latest-platform-version
\n
\nAlert Criteria
\nYellow: ECS is not running on the latest version of the Fargate platform.
\n
\nRecommended Action
\n Update to the latest Fargate platform version. For more information, see AWS Fargate task maintenance.
\n
\nAdditional Resources
\nAWS Fargate task maintenance", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz174", + "status": "not_available" + } + }, + "c18d2gz166": { + "metadata": { + "id": "c18d2gz166", + "name": "AWS CloudTrail data events logging for objects in an S3 bucket", + "description": "Checks if at least one AWS CloudTrail trail logs Amazon S3 data events for all of your S3 buckets.
\nYou can adjust the the name of the Amazon S3 bucket for storing server access logs, using the \"S3BucketName\" parameter in your AWS Config rules.
\n
\nFor more information, see Logging Amazon S3 API calls using AWS CloudTrail.
\n
\nSource
\nAWS Config Managed Rule: cloudtrail-s3-dataevents-enabled
\n
\nAlert Criteria
\nYellow: AWS CloudTrail event logging for S3 buckets is not configured
\n
\nRecommended Action
\nEnable CloudTrail event logging for S3 buckets and objects to track requests for target bucket access.
\n
\nFor more information, see Enabling CloudTrail event logging for S3 buckets and objects.
\n", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz166", + "status": "not_available" + } + }, + "c18d2gz167": { + "metadata": { + "id": "c18d2gz167", + "name": "Application Load Balancers and Classic Load Balancers Without Access Logs Enabled", + "description": "Checks if Application Load Balancers and Classic Load Balancers have access logging enabled.
\n
\nElastic Load Balancing (ELB) provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and troubleshoot issues.
\n
\nAccess logs are an optional feature of Elastic Load Balancing that is disabled by default. After you enable access logs for your load balancer, Elastic Load Balancing captures the logs and stores them in the Amazon S3 bucket that you specify.
\nYou can adjust the the name of the Amazon S3 bucket for storing server access logs, using the \"S3BucketName\" parameter in your AWS Config rules.
\n
\nFor more information about ELB access logs, refer to the Application Load Balancer and Classic Load Balancer documentation.
\n
\nSource
\nAWS Config Managed Rule: elb-logging-enabled
\n
\nAlert Criteria
\nYellow: Access Logs feature not enabled for an Application or Classic Load Balancer
\n
\nRecommended Action
\nConsider enabling access logs for your Application Load Balancers and Classic Load Balancers.
\n
\nTo enable access logs, refer to the Application Load Balancer and Classic Load Balancer documentation.
\n
\nAdditional Resources
\nEnabling access logs for your Application Load Balancer
\nEnabling access logs for your Classic Load Balancer", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz167", + "status": "not_available" + } + }, + "c18d2gz164": { + "metadata": { + "id": "c18d2gz164", + "name": "CloudTrail trails are not configured with Amazon CloudWatch Logs", + "description": "Checks if AWS CloudTrail trails are configured to send logs to Amazon CloudWatch logs.
\n
\nMonitor CloudTrail Log fiiles with Amazon CloudWatch Logs to trigger an automated response when critical events are captured in Amazon CloudTrail.
\n
\nYou can adjust the maximum age (hours) of the most recent delivery to Amazon CloudWatch log, using the \"expectedDeliveryWindowAge\" parameter in your AWS Config rules.
\n
\nFor more information, see Monitoring CloudTrail Log Files with Amazon CloudWatch Logs.
\n
\nSource
\nAWS Config Managed Rule: cloud-trail-cloud-watch-logs-enabled
\n
\nAlert Criteria
\nYellow: AWS CloudTrail is not set up with CloudWatch Logs Integration.
\n
\nRecommended Action
\nConfigure AWS CloudTrail trail to send log events to Amazon CloudWatch Logs. CloudWatch Logs.
\n
\nFor more information, see Creating CloudWatch alarms for CloudTrail events: examples.", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz164", + "status": "not_available" + } + }, + "c18d2gz163": { + "metadata": { + "id": "c18d2gz163", + "name": "Amazon S3 does not have Event Notifications enabled", + "description": "Checks if Amazon S3 Event Notifications is enabled or is correctly configured with the desired destination or types.
\n
\nThe Amazon S3 Event Notifications feature sends notifications when certain events happen in your S3 buckets. Amazon S3 can send notification messages to Amazon Simple Queue Service (Amazon SQS) queues, Amazon Simple Notification Service (Amazon SNS) topics, and AWS Lambda function.
\nYou can specify your desired destination and event types using the \"destinationArn\" and \"eventTypes\" parameters of your AWS Config rules.
\n
For more information, see Amazon S3 Event Notifications.
\n
\nSource
\nAWS Config Managed Rule: s3-event-notifications-enabled
\n
\nAlert Criteria
\nYellow: Amazon S3 does not have Event Notifications enabled, or not configured with the desired desitnation or types.
\n
\nRecommended Action
\nConfigure Amazon S3 Event Notfiications for object and bucket events. For more information, see Enabling and configuring event notifications using the Amazon S3 console.
\n
\nAdditional Resources
\nEnable Amazon S3 Event Notifications", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz163", + "status": "not_available" + } + }, + "c18d2gz160": { + "metadata": { + "id": "c18d2gz160", + "name": "RDS DB Cluster Deletion Protection Check", + "description": "Checks if your Amazon RDS DB clusters have deletion protection enabled.
\n
\nWhen a cluster is configured with deletion protection, the database cannot be deleted by any user..
\n
\nDeletion protection is available for Amazon Aurora and Amazon RDS for MySQL, MariaDB, Oracle, PostgreSQL, and SQL Server database instances in all AWS Regions.
\n
\nFor more information, see Deletion protection for Aurora clusters.
\n
\nSource
\nAWS Config Managed Rule: rds-cluster-deletion-protection-enabled
\n
\nAlert Criteria
\nYellow: RDS DB Cluster has not enable deletion protection.
\n
\nRecommended Action
\nTurn on deletion protection when you create an RDS DB cluster.
\n
\nYou can only delete cluster that don't have deletion protection enabled. Enabling deletion protection adds an extra layer of protection and avoids data loss from accidental or non-accidental deletion of a database instance. Deletion protection also helps meet regulatory compliance requirements and ensure business continuity.
\n
\nFor more information, see Deletion protection for Aurora clusters
\n", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz160", + "status": "not_available" + } + }, + "c18d2gz168": { + "metadata": { + "id": "c18d2gz168", + "name": "Elastic Load Balancing Deletion Protection Not Enabled for Load Balancers", + "description": "Checks if deletion protection is turned on for your load balancers.
\n
\nElastic Load Balancing supports deletion protection for your Application Load Balancers, Network Load Balancers, and Gateway Load Balancers. Turn on deletion protection to prevent your load balancer from accidental deletion. Deletion protection is turned off by default when you create a load balancer. If your load balancers are part of a production environment, then consider turning on deletion protection.
\n
\nFor more information, see Application Load Balancer Deletion protection, Network Load Balancer Deletion protection and Gateway Load Balancer Deletion protection.
\n
\nSource
\nAWS Config Managed Rule: elb-deletion-protection-enabled
\n
\nAlert Criteria
\nYellow: Deletion protection is not enabled for a load balancer.
\n
\nRecommended Action
\nTurn on deletion protection for your Application Load Balancers, Network Load Balancers, and Gateway Load Balancers.
\n
\nFor more information, see Application Load Balancer Deletion protection, Network Load Balancer Deletion protection and Gateway Load Balancer Deletion protection documentation.
\n
\nAdditional Resources
\nApplication Load Balancer Deletion Protection
\nNetwork Load Balancer Deletion Protection
\nGateway Load Balancer Deletion Protection", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz168", + "status": "not_available" + } + }, + "c18d2gz155": { + "metadata": { + "id": "c18d2gz155", + "name": "RDS DB Instance Automatic Minor Version Upgrade Check", + "description": "Checks if Amazon RDS DB instances have automatic minor version upgrades configured.
\n
\nTurn on automatic minor version upgrades for an Amazon RDS instance to make sure that the database is always running the latest secure and stable version. Minor upgrades provide security updates, bug fixes, performance improvements, and maintain compatibility with existing applications.
\n
For more information please refer to here.
\n
\nSource
\nAWS Config Managed Rule: rds-automatic-minor-version-upgrade-enabled
\n
\nAlert Criteria
\nYellow: RDS DB Instance does not have automatic minor version upgrades turned on.
\n
\nRecommended Action
\nTurn on automatic minor version upgrades when you create a RDS DB instance.
\n
\nWhen you turn on minor version upgrade, the database version automatically upgrades if it is running a minor version of the DB engine that is lower than the preferred minor engine version.
\n", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz155", + "status": "not_available" + } + }, + "c18d2gz145": { + "metadata": { + "id": "c18d2gz145", + "name": "Amazon EC2 Instance Not Managed by AWS Systems Manager", + "description": "Checks if the Amazon EC2 instances in your account are managed by AWS Systems Manager.
\n
\nSystems Manager helps you understand and control the current state of your EC2 instance and OS configurations. With Systems Manager, you can collect software configuration and inventory information about your fleet of instances, including the software installed on them. This allows you to track detailed system configuration, OS patch levels, application configurations, and other details about your deployment.
\n
\nFor more information, see Setting up Systems Manager for EC2 instances.
\n
\nSource
\nAWS Config Managed Rule: ec2-instance-managed-by-systems-manager
\n
\nAlert Criteria
\nYellow: The Amazon EC2 instances are not managed by AWS Systems Manager.
\n
\nRecommended Action
\nConfigure your EC2 instance to be managed by AWS Systems Manager.
\n
\nFor more information, see Why is my EC2 instance not displaying as a managed node or showing a \"Connection lost\" status in Systems Manager?
\n
\nAdditional Resources
\nSetting up Systems Manager for EC2 instances", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz145", + "status": "not_available" + } + }, + "c18d2gz147": { + "metadata": { + "id": "c18d2gz147", + "name": "AWS Systems Manager State Manager Association in Non-compliant Status", + "description": "Checks if the status of the AWS Systems Manager association compliance is COMPLIANT or NON_COMPLIANT after the association execution on the instance.
\n
\nState Manager, a capability of AWS Systems Manager, is a secure and scalable configuration management service that automates the process of keeping your managed nodes and other AWS resources in a state that you define. A State Manager association is a configuration that you assign to your AWS resources. The configuration defines the state that you want to maintain on your resources, so it helps you to achieve the target, such as avoidance of configuration drifts across your EC2 instances.
\n
\nFor more information, see AWS Systems Manager State Manager.
\n
\nSource
\nAWS Config Managed Rule: ec2-managedinstance-association-compliance-status-check
\n
\nAlert Criteria
\nYellow: The status of the AWS Systems Manager association compliance is NON_COMPLIANT
\n
\nRecommended Action
\nValidate the status of the State Manager associations, and then take any needed actions to return the status back to COMPLIANT.
\n
\nFor more information, see About State Manager.
\n
\nAdditional Resources
\nAWS Systems Manager State Manager", + "category": "operational_excellence", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz147", + "status": "not_available" + } + } + }, + "fault_tolerance": { + "c18d2gz131": { + "metadata": { + "id": "c18d2gz131", + "name": "Amazon Aurora MySQL cluster backtracking not enabled", + "description": "Checks if an Amazon Aurora MySQL cluster has backtracking enabled.
\n
\nAmazon Aurora MySQL cluster backtracking is a feature that allows you to restore an Aurora DB cluster to a previous point in time without creating a new cluster. It enables you to roll back your database to a specific point in time within a retention period, without the need to restore from a snapshot.
\n
\nFor more information, see Backtracking an Aurora DB cluster.
\n
\nSource
\nAWS Config Managed Rule: aurora-mysql-backtracking-enabled
\n
\nAlert Criteria
\nYellow: Amazon Aurora MySQL clusters backtracking is not enabled.
\n
\nRecommended Action
\nTurn on backtracking for your Amazon Aurora MySQL cluster.
\n
\nFor more information, see Backtracking an Aurora DB cluster
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz131", + "status": "not_available" + } + }, + "c18d2gz138": { + "metadata": { + "id": "c18d2gz138", + "name": "Amazon DynamoDB Point-in-time Recovery", + "description": "Checks if point-in time-recovery is enabled for your Amazon DynamoDB tables.Point-in time-recovery helps protect your DynamoDB tabels from accidental write or delete operations. With point-in time-recovery, you don't have to worry about creating, maintaining, or scheduling on-demand backups. Point-in time-recoveryr estores tables to any point in time during the last 35 days. DynamoDB maintains incremental backups of your table.
\n
\nFor more information, see Point-in-time recovery for DynamoDB.
\n
\nSource
\nAWS Config Managed Rule: dynamodb-pitr-enabled
\n
\nAlert Criteria
\nYellow: Point-in-time recovery is not enabled for your DynamoDB tables.
\n
\nRecommended Action
\nTurn on point-in-time recovery in Amazon DynamoDB to continuously back up your table data.
\n
\nFor more information, see Point-in-time recovery: How it works.
\n
\nAdditional Resources
\nPoint-in-time recovery for DynamoDB", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz138", + "status": "not_available" + } + }, + "c18d2gz135": { + "metadata": { + "id": "c18d2gz135", + "name": "Amazon Redshift cluster automated snapshots", + "description": "Checks if automated snapshots are enabled for your Amazon Redshift clusters. Amazon Redshift automatically takes incremental snapshots that track changes to the cluster since the previous automated snapshot. Automated snapshots retain all of the data required to restore a cluster from a snapshot. To disable automated snapshots, set the retention period to zero. You can't disable automated snapshots for RA3 node types.
\n
\nYou can specify your desired minimum and maximum retention period, using the \u201cMinRetentionPeriod\" and \"MaxRetentionPeriod\" parameters of your AWS Config rules.
\n
\nFor more information, see Amazon Redshift snapshots and backups.
\n
\nSource
\nAWS Config Managed Rule: redshift-backup-enabled
\n
\nAlert Criteria
\nRed: Amazon Redshift cluster has automated snapsots disabled
\n
\nRecommended Action
\nEnsure that automated snapshots are enabled for your Redshift clusters.
\n
\nFor more information, see Managing snapshots using the console.
\n
\nAdditional Resources
\nSnapshots and backups for Amazon Redshift", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz135", + "status": "not_available" + } + }, + "cF171Db240": { + "metadata": { + "id": "cF171Db240", + "name": "Amazon Route 53 Name Server Delegations", + "description": "Checks for Amazon Route 53 hosted zones for which your domain registrar or DNS is not using the correct Route 53 name servers. When you create a hosted zone, Route 53 assigns a delegation set of four name servers. The names of these servers are ns-###.awsdns-##.com, .net, .org, and .co.uk, where ### and ## typically represent different numbers. Before Route 53 can route DNS queries for your domain, you must update your registrar's name server configuration to remove the name servers that the registrar assigned and add all four name servers in the Route 53 delegation set. For maximum availability, you must add all four Route 53 name servers. Hosted zones created by AWS services won\u2019t appear in your check results.
\n
\n

Alert Criteria


\nYellow: A hosted zone for which the registrar for your domain does not use all four of the Route 53 name servers in the delegation set.
\n
\n

Recommended Action


\nAdd or update name server records with your registrar or with the current DNS service for your domain to include all four of the name servers in your Route 53 delegation set. To find these values, see Getting the Name Servers for a Hosted Zone. For information about adding or updating name server records, see Creating and Migrating Domains and Subdomains to Amazon Route 53.
\n
\n

Additional Resources


\nWorking with Hosted Zones
", + "category": "fault_tolerance", + "metadata": [ + "Hosted Zone Name", + "Hosted Zone ID", + "Number of Name Server Delegations Used" + ] + }, + "reports": { + "checkId": "cF171Db240", + "timestamp": "2023-11-23T17:06:31Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 11, + "resourcesFlagged": 11, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "resourceId": "1HwvxHf7MKvaJtpZ2gfWV2LNxZJ4auhoqw44cWUmum4", + "isSuppressed": false, + "metadata": [ + "8jk1.s1.devshift.org.", + "Z02284101H68GL4WGQX0E", + "0" + ] + }, + { + "status": "warning", + "resourceId": "1VmZ6jxF2dZRxYVrQNYRPLPVdKhvY9WbygZfya09Zus", + "isSuppressed": false, + "metadata": [ + "hyp.59i8.s1.devshift.org.", + "Z02140521B1ORB2AQZO45", + "0" + ] + }, + { + "status": "warning", + "resourceId": "BlwJBVmLA225xmrFEyOaAQ9CY0Ax12v8K_m1hXr_Bbc", + "isSuppressed": false, + "metadata": [ + "hyp.ry7i.s1.devshift.org.", + "Z06824103QBWZA97L7K7H", + "0" + ] + }, + { + "status": "warning", + "resourceId": "LlC7MViyKL2Ht1XQs1sTQLz5N_B3WYbTD551PQl76TI", + "isSuppressed": false, + "metadata": [ + "quaydev.org.", + "Z0876828306FNOPWG6YTZ", + "0" + ] + }, + { + "status": "warning", + "resourceId": "QKaR-jdqFsHmwd4_VnAdbCLS-rBYEW1lrEygxffsU2Q", + "isSuppressed": false, + "metadata": [ + "hyp.59i8.s1.devshift.org.", + "Z02142733551QSXDMGM87", + "0" + ] + }, + { + "status": "warning", + "resourceId": "TfhwSIknnkOBrNGyHSKwFVkQhHvH0LPupuq8Ol-HtIo", + "isSuppressed": false, + "metadata": [ + "59i8.s1.devshift.org.", + "Z05427931H0X97AASBHOS", + "0" + ] + }, + { + "status": "warning", + "resourceId": "W_TwOHVVvFDM9auvD4cXmwH-BbgaWVvJkqNxZ1lIsR4", + "isSuppressed": false, + "metadata": [ + "qabb.s1.devshift.org.", + "Z06542801TJ7BEVJKXKBS", + "0" + ] + }, + { + "status": "warning", + "resourceId": "fw0DpPtFQXkpgT9dWgriIk712FcnENbBAY5Zk1gV_rU", + "isSuppressed": false, + "metadata": [ + "hyp.0q9w.s1.devshift.org.", + "Z0695767CCXITQ0GEJJX", + "0" + ] + }, + { + "status": "warning", + "resourceId": "hAc_QRCMatyRfqgOu_PDDz_8kQj1PvfjplZJ4P52QFw", + "isSuppressed": false, + "metadata": [ + "hyp.d1tf.s1.devshift.org.", + "Z03457791Z2KK8QIN5HH4", + "0" + ] + }, + { + "status": "warning", + "resourceId": "qnRmJhyr0EKTDRtFweytPqrLEftK-o4-IlAZkyNAmpo", + "isSuppressed": false, + "metadata": [ + "hyp.2m2s.s1.devshift.org.", + "Z01535741BAIS73QRC8NL", + "0" + ] + }, + { + "status": "warning", + "resourceId": "y5E4D4k8-wBCyUrX-8dkmhMOsslLtMaE0--zsClv9us", + "isSuppressed": false, + "metadata": [ + "hyp.iukj.s1.devshift.org.", + "Z0094233DZVCUOTCU54H", + "0" + ] + } + ] + } + }, + "c18d2gz123": { + "metadata": { + "id": "c18d2gz123", + "name": "AWS Site-to-Site VPN has at least one Tunnel in DOWN Status", + "description": "Checks the number of tunnels that are active for each of your AWS Site-to-Site VPNs.
\n
\nA VPN should have two tunnels configured at all times. This provides redundancy in case of outage or planned maintenance of the devices at the AWS endpoint. For some hardware, only one tunnel is active at a time. If a VPN has no active tunnels, charges for the VPN might still apply.
\n
\nFor more information, see What is AWS Site-to-Site VPN?
\n
\nSource
\nAWS Config Managed Rule: vpc-vpn-2-tunnels-up
\n
\nAlert Criteria
\nYellow: A Site-to-Site VPN has at least one tunnel DOWN.
\n
\nRecommended Action
\nMake sure that two tunnels are configured for VPN connections. And, if your hardware supports it, then make sure that both tunnels are active. If you no longer need a VPN connection, then delete it to avoid charges.
\n
\nFor more information, see Your customer gateway device and the content available on the AWS Knowledge Center.
\n
\nAdditional Resources
\nAWS Site-to-Site VPN User Guide
\nAdding a Virtual Private Gateway to Your VPC", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz123", + "status": "not_available" + } + }, + "f2iK5R6Dep": { + "metadata": { + "id": "f2iK5R6Dep", + "name": "Amazon RDS Multi-AZ", + "description": "Checks for DB instances that are deployed in a single Availability Zone. Multi-AZ deployments enhance database availability by synchronously replicating to a standby instance in a different Availability Zone. During planned database maintenance or the failure of a DB instance or Availability Zone, Amazon RDS automatically fails over to the standby so that database operations can resume quickly without administrative intervention. Because Multi-AZ deployments for the SQL Server engine use a different mechanism for synchronization, this check does not examine SQL Server instances.
\n
\n

Alert Criteria


\nYellow: A DB instance is deployed in a single Availability Zone.
\n
\n

Recommended Action


\nIf your application requires high availability, modify your DB instance to enable Multi-AZ deployment. See High Availability (Multi-AZ).
\n
\n

Additional Resources


\nRegions and Availability Zones", + "category": "fault_tolerance", + "metadata": [ + "Region/AZ", + "DB Instance", + "VPC ID", + "Multi-AZ", + "Status" + ] + }, + "reports": { + "checkId": "f2iK5R6Dep", + "timestamp": "2023-11-22T02:51:01Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 2, + "resourcesFlagged": 2, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NgNXUH1ZkTbZuEiM-FICcKpea-BBi_HnllstrgmidP8", + "isSuppressed": false, + "metadata": [ + "us-west-2b", + "vchalla-quay-quay-db", + "vpc-0fea556d697f714be", + "false", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "c5hhJ2y6QXtpWODiw7Mq_1XSwG4LBu4M7HSj03KXVFc", + "isSuppressed": false, + "metadata": [ + "us-west-2d", + "standardization-db", + "vpc-078d4380da954500a", + "false", + "Yellow" + ] + } + ] + } + }, + "c18d2gz112": { + "metadata": { + "id": "c18d2gz112", + "name": "Amazon CloudFront Origin Failover", + "description": "Checks that an origin group is configured for distributions that include two origins in Amazon CloudFront. For more information, see Optimizing high availability with CloudFront origin failover.
\n
\nSource
\nAWS Config Managed Rule: cloudfront-origin-failover-enabled
\n
\nAlert Criteria
\nYellow: Amazon CloudFront Origin Failover is not enabled
\n
\nRecommended Action
\nMake sure that you turn on the origin failover feature for your CloudFront distributions to ensure high availability of your content deilivery to end users. When you turn on this feature, traffic is automatically routed to the backup origin server if the primary origin server is unavailable. This minimizes potential downtime and ensures continuous availability of your content.
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz112", + "status": "not_available" + } + }, + "R365s2Qddf": { + "metadata": { + "id": "R365s2Qddf", + "name": "Amazon S3 Bucket Versioning", + "description": "Checks for Amazon Simple Storage Service buckets that do not have versioning enabled, or have versioning suspended. When versioning is enabled, you can easily recover from both unintended user actions and application failures. Versioning allows you to preserve, retrieve, and restore any version of any object stored in a bucket. You can use lifecycle rules to manage all versions of your objects as well as their associated costs by automatically archiving objects to the Glacier storage class or removing them after a specified time period. You can also choose to require multi-factor authentication (MFA) for any object deletions or configuration changes to your buckets.

\nVersioning cannot be disabled after it has been enabled, but it can be suspended, which prevents new versions of objects from being created. Using versioning can increase your costs for Amazon S3, because you pay for storage of multiple versions of an object.

\n

Alert Criteria


\nGreen: Versioning is enabled for the bucket.
\nYellow: Versioning is not enabled for the bucket.
\nYellow: Versioning is suspended for the bucket.

\n

Recommended Action


\nEnable bucket versioning on most buckets to prevent accidental deletion or overwriting. See Using Versioning and Enabling Versioning Programmatically.

\nIf bucket versioning is suspended, consider reenabling versioning. For information on working with objects in a versioning-suspended bucket, see Managing Objects in a Versioning-Suspended Bucket.

\nWhen versioning is enabled or suspended, you can define lifecycle configuration rules to mark certain object versions as expired or to permanently remove unneeded object versions. For more information, see Object Lifecycle Management.

\nMFA Delete requires additional authentication when the versioning status of the bucket is changed or when versions of an object are deleted. It requires the user to enter credentials and a code from an approved authentication device. For more information, see MFA Delete.

\n

Additional Resources


\nWorking with Buckets", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Bucket Name", + "Versioning", + "MFA Delete Enabled", + "Status" + ] + }, + "reports": { + "checkId": "R365s2Qddf", + "timestamp": "2023-11-25T21:17:39Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 234, + "resourcesFlagged": 234, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "SdSzOb9M9TW0Uj4ewM_SChP9ayKMeB5J9hRtGvz7WG4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "27h8qk4nh4caip52q9u66alh55muubud-image-registry-eu-west-1-gkix", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "QTqiB683QoAztxne9Twlf5XFBW3DmqgylnUSTtcaqRI", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "cloudability-prod", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "1qy4XM9ci7ZwGjS9_9sx2hCHInLmv9hJMyL6j-1LmB4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls8dj8t6seguk00egivtbulmfblpud-image-registry-us-east-2-tdeh", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "311sQlxb001B2J_sUZBSvZko8yVynJsu_ujFtYFE6MY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "chktag-8cb-oidc-u9c2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "EexcYgiHELTCDRQelRMg_dtIGyS0ePgy1uJDieM_AwA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls91qsiqghj0nnph9l7m4tc8qeqjjh-image-registry-us-east-2-fekd", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "IiYkcB3gixbMszG_H6EUkJTXq4dpQrMMTMvMu06mWs8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls8o69530l22lf8pto8vvn7p9lo3r5-image-registry-us-east-2-loao", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "LgnP8PB9ea2YKCjcqVECramijS6950ZWtjc4hrdBBIo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9hp4929lvu3orfskc3up0msfks8g-image-registry-us-east-2-nwjw", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "TM5eDekw50ryWF7nAlqK4i_Qi8wEz1ZRby8swi9EVJ4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls8t2g033igd6mgjeildda9ejn3ufp-image-registry-us-east-2-mvxu", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "ZD5IdhIeD1xUaMFGlPJBssmHgAWklR3wggmtcdSmZ9Y", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9rt40viaro8s0okpu9qhqq02841f-image-registry-us-east-2-vtdj", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "gUPh35dKC9AMLpur28r58g0vHkvvD8SwiQrvJ9oL5kA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls96qkglvfadaooe0rvefanpj1mc1u-image-registry-us-east-2-iqgn", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "sA5LJagyKG1OHDnqhOy5P0GZoc6eWdW27q88IXWGSOQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "chktag-njc-oidc-m8j9", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "xYIDn-DQ5lUXfBmZknzk0s3-ZleWnaBcWCKfu7KO0ig", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9c3h6uok27vttonht7itbg6j0bp4-image-registry-us-east-2-wvqt", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "xx0tY-Cb9b5ZZ2NQgs6T694MzppQZNJpiuhP4eSOZ1E", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9moffkk6ueg2nf7c56jphqm0j7r2-image-registry-us-east-2-cqpu", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-1", + "resourceId": "OhHLYfBuUELz0Zcx7nhoGwXz_dqS__rI06C4r19_mBI", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "cf-templates-1lim0y8ue8igw-us-west-1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "-4WBHCCO9FpD7H8D6hNtsClxrHyPLk44Iyh_W_zUpG4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "4-8-aws-ovn-qwz4s-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1cXLmSqer4cqxC2nSXalUcb7p19bnupmEZrs4OnNPug", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "cloud-bulldozer-ci-6hwqr-oidc", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1spdAFwgjxLcy2Ib2FC9fCqAwcYpej-0cWPRIprIfNc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2619-ancoll-ptfqt-image-registry-us-west-2-upoikoeft", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "32a1-aS2W3Sv9Np-V2zPXFllQKkzUF_ze6iyVEhwYis", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2619-ancoll-5b8gn-image-registry-us-west-2-ualugvovx", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5V0ZpmN1IzNtK3-W7Hm8GEYqvrbjHJ_jRrRgNzkUU3Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2619-ancoll-xrppt-image-registry-us-west-2-ricewsmdm", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "9VZuCn1ucbR53EWd9AmIA8DSDSt4UQP4Yy9_95ji7eI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "dry-oidc-z0i1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BRo88lRjYmLCW7ODolvPZDuf1X2pt-0WmdCyxH0qG6A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "cloud-bulldozer-ci-6hwqr-image-registry-us-west-2-grohilnqkulf", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "C_bO6_rim-q4qtuBSQLyqP5fAio_wIB92yHwcUlw0dw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "1v8oivnenj18te68g4a4321jhqn44e87", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kJCAJV1hEueEXZ7rbEuMdkK2NOiswmwbFdqGvaKG2cM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "cilium-97cm8-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qdEyOsKiHTYM_rZLlKdPsxtJVMmXw85NLrKoNO2BkcE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2273-c-d-v2-2ph95-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tiQ_riDcyT_PrkXcshqQvi_sr6jKE4wAKKm0dOFjTWU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2273-c-d-v2-jd4fn-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "ca-central-1", + "resourceId": "AfZYfpmk5xl0U0pL9NjC1cBwtmC6IOjtSeLOMTMVwQU", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "hypers", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-central-1", + "resourceId": "2YId7iQt_A0R3Y9WpO_KbWFO-N3EPVqSBDrMFCXX3Xw", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "eucn1-9rf-oidc-h7p7", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-central-1", + "resourceId": "ZQ7HLYX4CSU14Q21gEYj0jlla1Kgj49dCpy2oMSpI6M", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "eucn1-px3-oidc-b8t2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "5am2g24sm9a2iz95421Upu08YOcjpC4eE_q-wSnuixU", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-2a1-oidc-i4o8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "7JBSazGKGrTrysVvzAV1WkjqNAspwznC6S4DsUYjduc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-wgp-oidc-u9p2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "EKnE0-KrlnCU8Io4PPoBIMOZ_rXwPK4VZF1kYwWew-4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-d3h-oidc-a6j3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "GaaOY1QpsO-Xgg5qDGrGbY0zjjEpLvG2zuE8f1h2nJw", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwest-ilk-oidc-c4z6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "XK96_sgYLINHY70Qj49LFdLoYnrDkxcR0dCNQ9Y0c50", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-m5z-oidc-v3i8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "duEvAcsZo6le_fRYFXydtmWAYcyl5UERIBNSeXH2-6M", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-dw3-oidc-s4u2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "gQWHPQdJYoL1xKGTtrP_sCkx_IlYVqOZSccqUKICROE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwest-ugl-oidc-a0z3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "oyR-1xJhInUe6QfdVre1Bn9FqqnJKgDIDgXj5lJoQe0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwest-2ai-oidc-k9i9", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "wTy2y3UzjTVNTLmKHDcMZfy0FH5OvMEvCy6JrDpXm-U", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-n8p-oidc-f8s3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "8rgIOyHi1pPgzTW6IE4tVlw5zPP5aEXnqqhabeGYpSA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "dry-pd98p-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "PmfHD6tANI9ByrEIECpOS6CNA8nA4mX2gKApSyqUHCY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "kprod-dds-oidc-q6v0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "b8GO802RO0_VEu7pfEhzuoahli_U9knzYVMqwWo5nAg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "king-m9n-oidc-k5u1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fT06l5XhdHEdkRt2GmWsdpR5daOxmzvtc2SZ2lno-Rs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krvoor-wxd-oidc-d5g7", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fk_yu7pfjhyOEzbCjI4jUHIDaPpKFaRZlxnNByzByJI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krvoor-jll-oidc-e6y0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "yGX74PTlku4QfxjQ2SqR0fFQW0gDat50xjNGCHi4a14", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "kruize-2e8-oidc-y5p7", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "2-E85-Dnvs1IcXjK5lc70-rbZ2-UmNffBhUYwEAX5qI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "gavin-stackrox-4-7-aw-l96s7-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5xpQ8utIzsLi-scSQt-I6uwd0yaWN1SX5wPNg1yMSxc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "gavin-stackrox-4-7-aw-wws7x-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "JKodJOvVnps8LHCn_jfeOwOA-LP7MYAL7rkzfVBZWtY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "kprod-mv9-oidc-i6e2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "e7qRfhRD5LYEeDM6DJ17FNPCjC6nlF1Ewzsdlnnc5DQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "kprod-xmj-oidc-n7g0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "lLBKxE23GF-A0pPzMJaWlx3PUMZ7dL0ybgXkaOkTbtg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "euwest-agf-oidc-w6x8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "wFjpTzzg_bdmPiMOK7pY14XcUqEGdD6VdXFKdwShMoE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "foo-oidc-r4y6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yzfwY2NcKq_to2lp7MvVDU-GqFOS7hlWr6wisdZ8TWo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "euwest-ijx-oidc-u9e6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "5Tb_FUVdDOUGiAIupHPEvn-FcTXgmbXrlKrL0MZ_7us", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krz24-dpt-oidc-o7w0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fIVbz2Wh_7rwNINyi_uqPtHTDnGepoPVWjkVOmck7LM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "mrnd-f9n-oidc-l1s6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "maWSRlIfaK5mFZmhXeJWMbwMUZM9ZvLmnudjaWk13J8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "mrnd-cxp-oidc-y8l3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "rgInaGNyxSIM-WXnqFeLaZ0pUox3XFuacynoBkZr5ZU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krvoor-zho-oidc-x3a2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "3202MYc4xQgtFxAjHc2YCLguql9UUKxDKpiN4XYl8GQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-cdb05009-b68f-471e-956f-15fa3892c753", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5nKICyO1eZWuy42df9-TNTBS2HnSNVKjg6Yz5VvpEHI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-cef71340-5aa9-4314-8e21-0eb66ec2d6c1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BnICVOk3wt5zTqnmbA7hgkaKEUtQs_R1J5T5xFUKnCU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-37d894f1-3beb-40e6-8354-0da16233f53e", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ClfmkDmYzUnWed2p0Ox4ebnqwNBFNsS6sWoJ0A4rLU4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1611591204987.storage.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "J85znpwq8bqFQxfhFzZsxDnB139BOX3LjlUf6l7ho5g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-6d87cd0e-4b23-4405-9fc8-c35fadcdd422", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "K_Jcjuy-M-JaM3HQmF944d8RrbgsGl0rgLCNPhcDZ6s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-ceafc9f9-5fb1-4f0f-8e68-c1e4afca0a26", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Q26QC1AbzrEgt4CI7TzjJoJdiQuyunciJQ0g705OWhk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-ecf47847-6d30-4c83-8478-7c3ce5eb2d09", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "S3dwJof9f6guIa78HGNo2dvmX_j2oxtjarDZ3cGsXNA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-c28ca9fe-9484-44ac-8d34-bad3baaf7d66", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "VQuSGC2kt15k3UGXIKbWkYz4hikNzpVnt7YbDRU1VoQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-edb88afe-ce9b-45a4-989c-8a3c4f14a387", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Vv5E-SD5aLOkdp1VDrEo7ruB-jppjFHPHh-PP85nD0E", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-18883db3-7bf9-4d8b-bfc4-70769d8c2894", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "X7WS3UQ9z6KAhUPTwjLH1dtDzxzvr-TGdHAbJCw-LW4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-e9c72d27-b6f8-4f36-9854-47493bc8b7dc", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Zihic1nhewUFv4vaFTrbfxkQG0IJhjrxM2PkepORLIA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-935e9025-fcd3-4f8b-9fc8-dfa650774d77", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "fSAbW5BxRQk-TcGpvpe2aZJOxqX1Xr8p889XJWCos_8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-732ded30-5427-4bdd-81a2-d2cfa6ff4baf", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "h5HR-dg67MwCsJmf5f2jmiwFX_hZpKVk0vDexstDqhs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-a51f5a90-037e-4b3e-a9b7-70fcfc23f7e3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "j45ILUOaOfr54P2JCCg07Nc24y4r0E-2dNy8YzzJGaM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-265ff78d-33fc-405d-b365-caf4d6bfd109", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "mHiBycKqXFRlep5eXSMbywz-OJfz7Z7z9gbxZUY6Udk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-718901e7-e9d6-45a9-a9c5-ea7f95178184", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nglnrUTHnn71qpvyY4UeQqCzmnJKRYPn-IgvakGM7UY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "loop-test-oidc-y9p1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "oH4d62q02hlWujcLSY0-eVc8mCq3jE4jfw50VzX37rw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-66706d9f-e5af-4ab1-a614-e99516995fb5", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "q5s6sAOWMATcXFutm_7jxIlFi8Ke4wTcbcRsuD92dI4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1610617788602.storage.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "uxnKjxqgWEurSsfMqbbFA0QX17Y1TKk8noqHfkHM1Fc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-1000fdbf-3c9a-4de9-bfc4-8cd3c806466a", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ypBsI750kIQGJLJtciA-9CgnWftXxp0RVITIdw6UlLo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-73d2740c-2460-4ea8-adc2-9af3a3b4f09a", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "-zCUu_VYqUPZKwB4eu2LQgGta0Ol3ZrgeAbdCjFU0KY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1613409309642.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "2UygcmbNz9KH98qL5Qqa864PdsOH_3sS5qL672dtvZU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1614780452723.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Aj5qHvWiZILeOoI9RLWppDuUHaiKgY2N1TH5YAc_kNY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612862265304.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "CFQXNwZT8u0l5uALOTjr_yaLayxHEsnn6ezFexIbt6w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615312877275.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "CmWfCfO_xB_EoA2aQNZxy2Z6R5dCzpuVa1CSNPJFbHQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617023377213.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "E6uS01-JKI5k2XmIl6FXJOoJGm8jNOW9Bd4Q-s-EnyU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616602248363.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "EGGkLaMEy2EYsYIW26KQHbTYzQ2LuBkCSDj_-4a8bEI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616681025069.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FKhXHfCtB97ZT1cphhBxwGjXURpu4q_9cTn19Dt7ipo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617726413639.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "LBdhnQ5tj-KZm5iiqfg0-j7kSjFU72ZpT76Ta9WYZ2k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1614940983222.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NgL76V5SitGnfbgDpXH99GZHkZzfqYH7pC7pPOwOB4U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612165008685.storagev47.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NuvhjWa9PTr-YfY0mqvScctgHarR3F6DTDBj5fy_a5s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612795851782.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QBwWquRBwguHEeJbMJc64YZ-4vh08AS7Hpd2b3LHFuI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1614846281589.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QMXu4j0h7WYK2c8bBZvOL0eqq8423mJIDUB2DWB8BzM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1613403917149.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "RZr2FaYp6ukFcEMj43NwIbdmEh83uZQM_xynMc71Nis", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616659869027.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "hkIYNOr_z4rRx6-vQFWrFlFXj_Sy8E89YzCwAw-oF_I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617374122085.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "j2OwAdxnQd0h2ajmwaF05m43ZMy0BKkYOcCCnr6H8f0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617005003708.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nLrLbsvk681H6TyNAPDQVjbAFnd3j0Hcqk5TgIe6KUU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612266940462.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nnS5VDcbceSPyuFMYXmUmwugt3UMuQ_vVs6g5qlhRGU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615275000737.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "pzD4DwZvtS0bCoOzZzYHjOpbhpMZDiTeVQP5seHWP7M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617287240483.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "q4ze-c1N6_bledhpmHYTvEfWDZZElqDoelch6nh5KGE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616410669912.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sO9fQrPdH3sghdYnR8j5jlw0b_LDTDMwQGY021-_liQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615386793629.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "spin_B5LnXT-m8d1cz-RUY4H3qCeD0DyvjIT3dUftbU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617284999484.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "uBFLYfO2DaZSTBqzw6PaQl95cS0WLlawLekw39C9Zw4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617868448423.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xpaHviha82SD8Hr7YHm2QhMRcpKXKW-AtvzAbO6e54Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615449577728.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "znPrgHBW_ZvtxNYAwIAO2Jna_9IdnMdZzNzdlN9feqU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1613708362577.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1Q9OgWHw_i5r3zknMxvRzPm_48Q3nqJBl2eH_pCxgFw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631614706735.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "3PRt9vU8OnXCHPc1mD37-rQIljwnwRmH3xVCD_zQlfQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631542777748.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "4pGBravvURyPVNwQE24NgZAz__bk-P8jdWPbHcTBQLg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1624966471907.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5oulgWdSO0MMV77PE2CiuDtHiWCB9jVT_6LN4U89-8g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1629094543280.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "8MujpxAPcpiUtIjrBBnSOvMauvDKjdovTCDhgvMPzeA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1658976500857.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ED42muyziE4rzKQgxLBa8dE1FoeD6NCrTaReXO_x2oM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631096576858.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GEH4Yx6Ow4Sn0U04mW-ym9Nm2fPyaYBOKZYl-dVJyX4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625055479118.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "KzMCL2I5lan22gkUG8APmlnpayb25ErOV9enRQp6qKs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631277274924.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "L3Y-DnDaHcdM5vnXNZR4PCeBagWv_zVkEILqSr0sfGo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625649692373.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Ma6xWL56F15lDA8-bLCC59shM1q4D6T9sLPanX_lVBg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1646969602043.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "PgtpFByhhstMf1omgzgr-ZMNxuCCFVPYpJntRe9MPLA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1627867596844.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "SWS0cu9m5bAM74huwj5HFVSEJj3L3X5c67c9EiezKTE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625494381580.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Vd5xuP-RWf9Z-nvc7293_3Bu90Ke_P1uckw6LYkZIrE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631615861929.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "WV_Gh18iz0AgqwtOFL_G5zIk0NzgvrObZY6ekStiBjk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1621333000728.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ZmMhECGBFoC2lbleeQE31GY-bJGDPpJVLqX8HvayNRI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1626083843458.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ctbWA_qQrT8OdO-8-pAMzXGDbfeS3A8yIGbMqj0HcX4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1624951725463.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "gtWlDrYbHONjaZ4NltYPJL4HI_qXIBAEV8N40-qLdZw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625154354601.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "k0n6zivdWi1fkSdW3M_lGEAvvHvmkYGuOFq16CUf8CU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631869813152.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kL6MGd8G2703eXqG9hX8Da8ylZNAMMxRDg-Fw5ivGT8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1654498144641.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "laIDzpOYu0uPwI0VVoOfglgR4UGEwcmhmrbYdTxC5-s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1621339002978.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "luPrZVVB0IY5-oUdB-vIl_lYqIKo2JB1EQGPSITqQjg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1674525013364.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "n8D5Ff5zcRhcBnc6HcBWWRMn1wKAecZ8P3uFKR533mM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1644465822735.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nwyx3K_BafUl2GgolYcoLaQR7ZW5y4DXoAgx_Oep_08", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1674683071318.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "t0PxV4EKldlGuAf-5glova6aLA1TTI83iRQk9hiIXvg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1621937562435.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xPRHdUMwiXuEjwa-KPWvc7oA3zL1D9NUatM-cs-Iq5U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631758557440.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "0FdOJl-Ebceve9JcqgBRPre4U4uspgA0wnAILCOEsEc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682310610050.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "6dQFW1p42GBMJF5uvTS7mdLaU0CMiARX1-RaGldzevE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682308445878.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "89uoflan-Kl3F8PT9tEHsADHKlAnGe1Tx_QqHF3Vv7o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682313779566.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "AiVG2sHjrbZxrBLnndAoqKbFPyFr9gV3zUeKkMAjgd0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682059141954.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Dt474fMeKrQuRJsJnGIm7KCH-QoNw69MnPjJLoysOYw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682313575081.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ERVl1YJNFs7g0jxgBsoAxBcrY603Vh_-jiXga4F2Wdg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682085309431.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FCl2TmUr41Y6hx8iPVJWmdwwwb68zdpUkV7zedlN1qg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682255249292.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "RrH6e1KIDGe3nlDEOqiLX4S-FJn9BRp2UutHDBXDiUg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1678139206610.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "T6XqB7BpibJd8EzzJh5eSZsjVj3UA3Xq2zf_gBlYJvk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682260756702.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "U8b-HN5ah3s3VDr7kWh6d_IxLOIuDlcn31-OzulzXCQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1678128411285.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ViwVJy1wRxj3M9sX3vetLSgQfe0fSkqAk6EoCzctI0U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1680510016987.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "VxlKsChLCL4aD9WK7sJFvXHelQeOZP9vyIynW5XqJPc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1681320205200.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "_e9ZMHFo6omjw2EXENKP5FjacaYDSjVYtgFeTzyYwBs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1681975792013.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "arF9dQJaEjTNDhDUMp5Z68f5mvZnSu5RopZjwJHO-9s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1677625407859.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "cKOb3YrTi-8luws1VCFpu0CdYdYvrjqo5yDVo3XecXs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682247283139.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "dSXaZGhA87d32I4pbm_rkIJN1HMa733qLqhfz7TIoFw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1679451800362.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "dbforczZblhZjPH0ARZPvKy4LpIv52_H5P4AAYcs2pc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682060000995.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "fJtqC4XOoX-AULDLa7nVSz1uha5qUxkOslobFYx3u9Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682065703069.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "fRmzYqU79zRyWflOk2-g6d-4bdhRYjKSFHyZK3BAw9M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682042601747.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "i7KrECC0B_Gq7D5Sue5V2Gzki9WTVuMJXzIPJv2nNfM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682238312583.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "jvtq8mc1x7y8cYosdga0aJFCOnWmuozGCh3KjKEMTcg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682061576309.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "lhNiTh53g9iD3CqZmG05c-fOgGjI0FGE2GBHBowPm68", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682211520552.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "r-sWMPBOwxawsmy2YSE8F3YxcIK6m1wWiLE-Z9W_GA8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682238816619.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "suOVIlL_X6o6VaYng_UfjlZipAjv7YMmr0OZT6Oln6g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682294428826.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tqnpLe896O2zC4aozWRdJpw88sshNmY-oi80wHR4veY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1679067630151.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "2oUlhJD0EK39qaLsb-rPzTw68Wm4nqxti9jGTUvOAt4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-03b-oidc-c4v1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "6E5kEvHQ60cvT1e9Gz73o1a8iWnF9vNmw006GMGt-9A", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-s2p-oidc-s1o5", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Ameal5DWksSwPoBuYL77LpX9rlenGbqgYgwbigZlGLU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-749-oidc-g2a8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "IcmU1Z2XB9ydQP7_GjF_GgTUpyHGxl5MUvCKpq54K6E", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-qxr-oidc-t9g8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "J33kFVlAJLo7JjhfS6TgC7jv0063hN0OgJ4g3AhkVes", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-etz-oidc-w1h0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "MofJG-7EvUO3lHPhOCBDhJfqxwo1oNbZHsc5W78NW78", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-3ed-oidc-b9f6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "SgeQDcWFsU3pl-jWqYCPjmzGROC3XoORB30R7ZUbZ2k", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-hcp-oidc-x1w5", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "aq4WL8lpwkGvE001U_KDzp_RvQ-MSZvsieB5Aqt994k", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-lsm-oidc-m0w4", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "gjN5OQi_J0Rfn8NhXoiPi0C4_6513G7aogsAjA5Yy38", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-0d7-oidc-j2i1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "jZV6OhNn_eMEH5OvuG_dCvmuD8aHo4oi1_sevAUJ-CM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-35u-oidc-x2k1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "6exlVFNfmLI3uZuC4MfKlt8qKs3pTdzRFW3sarZnYss", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1684725598844.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7yukdvHGkW2KXhF10LOoOZCOQ87zj1s5K1e6BcmMXGA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1694313646643.play-area.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "8izoY-qkVipIAdgKkWHCZ6fGEoEBR9sEcRTLJxp9Qnc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-airflow-logs", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "IlDPfMVIwyFsSXh6nCPMIhKtb7tH3HJ6HSVbnu0JQls", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682328397165.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "MBCRfcKIabbc6WUHTgUTFsUo7VqJLiQJuzx926FEYlU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1683121094696.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "S--LNpXKbhA963Cm2kE_jy2GFrHyjLwCTwfq7XM9thM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-412-5429-aws-rhperfscale-org", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "TGFW5kFem68JZJ76TPuaB5gbDRgojvXY_lMvrNfm-V8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682342385627.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "YixAN3m68hyC8MGemlFQ0Svm8ATpMXdblbSjDgJn5Q4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682380793954.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Zof0IrsFW5ev9BrCWRdtlSrRdVfqhdnHWbF9YilRLFQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682318030429.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "a1HDONpk64LFIdrqeUq5WAY0UM6u1EKYNYi-olGIXqw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-es-prod-backup", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "jwUYh4sxFBHUWbpnwYNaSJHLU-C_qrnk2otRsZ-a2GQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1684738204411.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "n6qVO6mlyfW7FpqdsulRAToppaOPvDIHqt9x9lhtwsI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1694318489008.play-area.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nAZ2_vIPE0JVUqjSnbF4tGMNQIvbEOjie1GDRX3IP4g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682340114273.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qy1rKbYNOBiVg1B8IArKIRaRH6YdiGS-dfZCBGNKXYQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682335989254.perfscale.devcluster.openshift.com", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "wyhegEYTyIg452-dQlRlz3nsJ5TwQUMci2BujRmReGA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-es-dev-backup", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "CHHd6DvnP21V0tDzkQIkuAAXycCjLuri_Z_jP6OLaYs", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "redhat-cost-management-bucket-cf7f4bb943359dc9", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "3MfBAvzxBtzzvRsn1UkSxyuE7yZdeV33RU06GykuhxI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-j4g-oidc-s6u5", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "6n_A14klAiltNYE6CTwmOhnomJDUx3yoJw2MJATXapw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-ls8-oidc-g4b0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "75VgyUvoAErtHYgEK9R1rfJ5LoMMIqEVYtprxCwVo3g", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-b1z-oidc-f6m2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Bvpm67E6_ChIcJFHVDQv5u9ZVCrxITg_O7j1OCgZphk", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-war-oidc-q6m7", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "DJsfSaUUvCm4QlmX2V0e9rMp-irIJTAefKuveeLHGFo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-y3j-oidc-u5m0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "GXbMs9kfA-Wl6RtmFlKfNiTGT1HgPP-Qz-NQ7U10SSs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-l81-oidc-m8o3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "GqJ38yci9xUvt-hVNdsTGE0tVHtbC6xYLsQJVFLEm24", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-hep-oidc-l8w8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "MpDVUiKS6KuVtnebIUOwoa0_05kDN_cJ-ShI0xzmhc8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-x5z-oidc-g7l8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "SrxahkpuSfCqvmwxlyu0m97PajD4026X8hAYI5wYb9Y", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-052-oidc-r5q8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "VwhlNvPP3_Z01id1rw6AXgtIS6yEeW8Cy7lpwtUWLcA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-cf5-oidc-a2d2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "aDcVV5sFIFwQ0cZZV4dgwWOnM_f-2suxpel3TwPX050", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-742-oidc-j7l5", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "eFcFLSst8jTVhxrqTdk6b2vSB2TrSjCR6s4IcRYxgXQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "redhat-cloud-governance-perf-scale", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "eaExrc3FuQwVBCD2r1hOh7CUalRUBcsb8iAjsi5tQYM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-r89-oidc-s0i2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "ebka0g1d1oooqM9X-yDQQrFda227PI76N-ObJAF-8CM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-ubd-oidc-w1p1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "hkwGCLPkoCUz8PgRnQwU2NYqtZJzIzd54dv7eB5thLU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-igy-oidc-b2p7", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "i-1zgkWNzp-R1O0fxhDnDHyctOtZJlsJzmVK59KoCVQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-rgy-oidc-x1l4", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "oHc4Xq-EUB5FcscMS_957vNyIVkd2ZplqE-uQl3cBfk", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-yr9-oidc-n1s2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "sC-ybCk5Nafx-0StPJ3No3I45F5aNOC1JnrNU0UnPpg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-gzm-oidc-v6t3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "v_kRFQzd1t6odTkyzDKvnJwQkGvYlTWfdVrAqe0URQ8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-ce2-oidc-g7d6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "z_A-4-lY6eaR7AX9c-Hlp_BbUM7x2aNmI0JCQZJtgxg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-5to-oidc-u5h2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "3aiCzFV02sYmum4509XYgjkom5xHo0JbPhMVLObrrtY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-thanos", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "9CiWaSZLSyrZMS2XMlCHVUUFuGbZQTs3Jtx2KauS81c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-ocp-qe-prod-backup", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "JI619SNmzhC-6GtSmk8W5iQ5rmzSHAWvWDSjryb_PI8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "play-area-cts6f-image-registry-us-west-2-xchglmivyahhfoqhewqgw", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QS73lSm51VUx9StCclozp9T4aTYIcMh0A-mF17p_zJ0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rook-ci-cilium-t8w5l-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "7QAGPepxEeVNnFBVI0B7pFw2M-seSpT1tTNQ0-HMb0A", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "uswest-dek-oidc-n4d9", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "1amhu1Sf_ENoFsbvqAsSdfBn7Z6i6XjwSWdpjKarDfQ", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-j5p-oidc-q2h3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "8ubodDylu9IsLXP8aefQKZJCrD-VNWoLI_g541WN63Q", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-g0z-oidc-n5x8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "snrr23Yco-DTLVyA3rphzefZxQZg1u4JqNcDlxI0m9U", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-mpr-oidc-o2b4", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "ulIZsA7UPIruQuk3CNAEpJy0FVRFtjWJyDiX3TuySS4", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-g00-oidc-f4o3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "0SZxsZqV_w-96qnvdXct6_88HJ16ZxpFoCtLBnSCdyU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tefrm5-0sk-oidc-t8g9", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "FVRjKDK-hwYfbFSthR1UI_f21SsZDRCaDeXnqoSPTQM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "useast-vyv-oidc-m5u5", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "HpQ0mHeikcmzykHJo6DELXPKNitHPXL3_MFxI7fiYPo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "ros24-nx8-oidc-b9u5", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "HzyIejH83tjS_-8XkpN124q7u2pumwhBNJe9wyUWYmQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "s3-quota-1-27n4ejpu5lo8rgsvrpnastlh8ja2sb3n", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "K_QW94TZ2dbaBsUiLPX96xzVgMC1qXHhovxFQcd0ql0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "ros24-mgv-oidc-p4f4", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "MGclGm1ANiHDm3AjQTrpLhkZ5WHmjYwq4S_LaEqy6E4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "s3-quota-1-27n4e91rofrurp2pfos0uesfhfah9iej", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "SE7UOJWOCFv0ku1CruGJc4pTeKwuksq0xSz-MKq6EmE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "useast-boe-oidc-w2c7", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "SdZyG1IlucAwhv6jzf_iJz4YwP8XhCTXr_n-cKtfmOI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "upgr-l9k-oidc-v1d8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fW6M2DfvCogAr-N2V-Jh7A0aDAVZ8OJrImhcmygwMgw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "ros24-zcy-oidc-m5j2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "m-s1LZKTnv5S-PtYYffcFx5zNQs_MIIqmk32Ap9KzPI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tefrm5-z9v-oidc-p4t3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "oZCjpIDxX80SoqImclBDiz1Ae6p30YQMHe0dynXKp1o", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tefrm5-whv-oidc-p4u2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "r_rPhfsYZcaR9qL3t77Wdl7AQXrInT8QxitG1KkTUuc", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tags-8ka-oidc-z6j1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "CzvCFImPpFrcc9sIUK_Wnz55jSdezZDB23kfMMzPXFU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rydrew-6-1-ocp-k2hdj-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "IT7tgv7SZ_Aw1Y4bMPynMJ5Bu08Gz4KOK8UHbochTao", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-2up-oidc-y1i4", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "TC6yfnE7m5x1SqDVrshFUaHOddfd6xDBZaSjIK2-vuI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "sai-hypershift", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "YwmcnnMZKoMNKuurOe0v8uf2UAFtyasErgGsm9Hn1X8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "smanda-ocp1-tf7qf-image-registry-us-west-2-udvluotiodolwuvcajf", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "_jMU5AdJGHyR6GuUrwjNfYaCYf_SPubH_9U7ZGxKgHA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rydrew-6-1-ocp-vxbqq-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "cKgvuHJylAZolWzVvAknz8UQl4UDPDxkqz4FU0r6DMM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rsevilla87-haproxy-re-dtrbt-image-registry-us-west-2-ciumwessx", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "j2xIC5b_QE34hwzhI9dfzPsqzsPmkJC38b3M1TtB2nw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-3jm-oidc-k3w6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "lIsR6NlieTlQpVcYE2v9D1eAi5Th6Nm7v8tSjHkeRK8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rook-cilium-rjjxf-bootstrap", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "CaG8oEn-HKy2QGNYzSGKeqcWJ5SN_YH0nbLGEKLZkyI", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "uswest-lsf-oidc-l1k2", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "3Y4sBz7beMIPiRgsqFr5czu5-gl486DuTPj8Lx8S8ds", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "vkommadi-oidc1", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-1", + "resourceId": "32sYA6JyG5nuUA6z0jeRijBAqZN9sTUbWCHVdB49UUU", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "uswest-n8p-oidc-g2a3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7-qACustL9RcfYOenc3GT_tFi-oe1IDyB1wUNWJe5MI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-yq6-oidc-m3d6", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7ZR3BL3Yuy8MsYuSxVeATR3ejvb2iz73QsuDkYjVJrQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vzepedam-mc-aws-rhperfscale-org", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "N8348VyJLu-vKV6Df3QTNrMS6GGXBQMGyK4xxUUZsbs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-pob-oidc-r0h8", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "bhO5yL6T0SZreoUnOHHJDb-ohAGchW7OLKgBfkWLrNE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-rlo-oidc-s6n3", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kARvXFuu2PrVBVIJbpmAOPYcB3wJo4BT-BEntKFXX8s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-qq1-oidc-j8i0", + "Not enabled", + "No", + "Yellow" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yMWCgIkk0snQg2XT28_8nu8osRqlAzE3SFpO2Sk4UoI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-x0r-oidc-j5j7", + "Not enabled", + "No", + "Yellow" + ] + } + ] + } + }, + "c18d2gz119": { + "metadata": { + "id": "c18d2gz119", + "name": "Amazon S3 Bucket Replication Not Enabled", + "description": "Checks if your Amazon S3 buckets have replication rules enabled for Cross-Region Replication, Same-Region Replication, or both.
\n
Replication is the automatic, asynchronous copying of objects across buckets in the same or different AWS Regions. Replication copies newly created objects and object updates from a source bucket to a destination bucket or buckets.
\n
\nUsing S3 bucket replication can help improve the resilience, and compliance of your applications and data storage.
\nYou can specify your desired replication type in the \"ReplicationType\" parameters of your AWS Config rules.
\n
For more information, see Replicating objects.
\n
\nSource
\nAWS Config Managed Rule: s3-bucket-replication-enabled
\n
\nAlert Criteria
\nYellow: Amazon S3 Bucket Replication Rules are not enabled for Cross-Region Replication, Same-Region Replication, or both
\n
\nRecommended Action
\nTurn on Amazon S3 bucket replication rules to improve the resiliency and compliance of your applications and data storage.
\n
\nAdditional Resources
\nExamples for configuring replication", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz119", + "status": "not_available" + } + }, + "c18d2gz117": { + "metadata": { + "id": "c18d2gz117", + "name": "Amazon EFS not in AWS Backup Plan", + "description": "Checks if Amazon EFS file systems are included in backup plans with AWS Backup. AWS Backup is a unified backup service designed to simplify the creation, migration, restoration, and deletion of backups, while providing improved reporting and auditing. For more information, see Backing up your Amazon EFS file systems.
\n
\nSource
\nAWS Config Managed Rule: efs-in-backup-plan
\n
\nAlert Criteria
\nRed: Amazon EFS are not included in AWS Backup plan.
\n
\nRecommended Action
\nMake sure that your EFS file systems are included in your AWS Backup plan to protect against accidental data loss or data corruption.
\n
\nAdditional Resources
\nWhat is Amazon Elastic File System
\nAmazon EFS Backup & Restore using AWS Backup", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz117", + "status": "not_available" + } + }, + "Wxdfp4B1L4": { + "metadata": { + "id": "Wxdfp4B1L4", + "name": "AWS Well-Architected high risk issues for reliability", + "description": "Checks for high risk issues (HRIs) for your workloads in the Reliability pillar. This check is based on your AWS-Well Architected reviews. Your check results depend on whether you completed the workload evaluation with AWS Well-Architected.
\n
\n

Alert Criteria


\nRed: At least one active high risk issue was identified in the reliability pillar for AWS Well-Architected.
\nGreen: No active high risk issues were detected in the reliability pillar for AWS Well-Architected.
\n
\n

Recommended Action


\nAWS Well-Architected detected high risk issues during your workload evaluation. These issues present opportunities to reduce risk and save money. Sign in to the AWS Well-Architected tool to review your answers and take action to resolve your active issues.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Workload ARN", + "Workload Name", + "Reviewer Name", + "Workload Type", + "Workload Started Date", + "Workload Last Modified Date", + "Number of identified HRIs for Reliability", + "Number of HRIs resolved for Reliability", + "Number of questions answered for Reliability", + "Total number of questions in Reliability pillar", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Wxdfp4B1L4", + "timestamp": "2023-11-27T12:21:49Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "opQPADkZvH": { + "metadata": { + "id": "opQPADkZvH", + "name": "Amazon RDS Backups", + "description": "Checks for automated backups of Amazon RDS DB instances. By default, backups are enabled with a retention period of 1 day. Backups reduce the risk of unexpected data loss and allow for point-in-time recovery.
\n
\n

Alert Criteria


\nRed: A DB instance has the backup retention period set to 0 days.
\n
\n

Recommended Action


\nSet the retention period for the automated DB instance backup to 1 to 35 days as appropriate to the requirements of your application. See Working With Automated Backups.
\n
\n

Additional Resources


\nGetting Started with Amazon RDS", + "category": "fault_tolerance", + "metadata": [ + "Region/AZ", + "DB Instance", + "VPC ID", + "Backup Retention Period", + "Status" + ] + }, + "reports": { + "checkId": "opQPADkZvH", + "timestamp": "2023-11-23T18:44:34Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "region": "us-west-2", + "resourceId": "NgNXUH1ZkTbZuEiM-FICcKpea-BBi_HnllstrgmidP8", + "isSuppressed": false, + "metadata": [ + "us-west-2b", + "vchalla-quay-quay-db", + "vpc-0fea556d697f714be", + "0", + "Red" + ] + } + ] + } + }, + "c18d2gz101": { + "metadata": { + "id": "c18d2gz101", + "name": "Amazon EC2 AutoScaling Group Multiple Availability Zone", + "description": "Checks if the Amazon EC2 Auto Scaling group is deployed in multiple Availability Zones or the minimum number of Avalability Zones specified.
Deploy EC2 instances in multiple Availability Zones for high availability. You can adjust the minimum number of availability zones using the \"minAvailabilityZones\" parameter\" in your AWS Config rules.
For more information, see Auto Scaling groups with multiple instance types and purchase options.
\n
\nSource
\nAWS Config Managed Rule: autoscaling-multiple-az
\n
\nAlert Criteria
\nRed: The Amazon EC2 group doesn't have multiple AZs configured, or does not meet the minimum number of AZs specified.
\n
\nRecommended Action
\nMake sure that your Amazon EC2 Auto Scaling group is configured with multiple AZs. Deploy EC2 instances in multiple Availability Zones to ensure high availability.
\n
To configure an Auto Scaling group in multiple Availability Zones, see the following documentation:
Create an Auto Scaling group using a launch template
Create an Auto Scaling group using a launch configuration
\n
", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz101", + "status": "not_available" + } + }, + "0t121N1Ty3": { + "metadata": { + "id": "0t121N1Ty3", + "name": "AWS Direct Connect Connection Redundancy", + "description": "Checks for regions that have only one AWS Direct Connect connection. Connectivity to your AWS resources should have two Direct Connect connections configured at all times to provide redundancy in case a device is unavailable.
\n

Note:

Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.

\n

Alert Criteria


\nYellow: The region has only one Direct Connect connection.

\n

Recommended Action


\nConfigure an additional Direct Connect connection in this region to protect against device unavailability. For more information, see Configure Redundant Connections with AWS Direct Connect. To protect against site unavailability and add location redundancy, configure the additional Direct Connect connection to a different Direct Connect location.

\n

Additional Resources


\nGetting Started with AWS Direct Connect
\nAWS Direct Connect FAQs", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Timestamp", + "Location", + "Connection ID" + ] + }, + "reports": { + "checkId": "0t121N1Ty3", + "status": "not_available" + } + }, + "c18d2gz106": { + "metadata": { + "id": "c18d2gz106", + "name": "Amazon EBS Not Included in AWS Backup Plan", + "description": "Check if Amazon Elastic Block Store (Amazon EBS) volumes are present in backup plans of AWS Backup.
\n
\nInlcude EBS volumes in an AWS Backup plan to automate regular backups for the data stored on those volumes. This protects you against data loss, makes data management easier, and allows for data restoration, when needed. A backup plan ensures that your data is safe and that you're able to meet recovery time and point objectives (RTO/RPO) for your application and services.
\n
For more information, see Creating a backup plan
\n
\nSource
\nAWS Config Managed Rule: ebs-in-backup-plan
\n
\nAlert Criteria
\nYellow: EBS volume is not in an AWS Backup plan.
\n
\nRecommended Action
\nEnsure that your Amazon Elastic Block Store (Amazon EBS) volumes are part of AWS Backup plan.
\n
\nAdditional Resources
\nCreating AWS Backup plan
\nWhat is AWS Backup
\nCreating Scheduled Backup", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz106", + "status": "not_available" + } + }, + "c18d2gz107": { + "metadata": { + "id": "c18d2gz107", + "name": "Amazon DynamoDB Table Not Included in Backup Plan", + "description": "Checks whether Amazon DynamoDB table is part of AWS Backup plan.
\n
\nAWS Backup provides incremental backups for DynamoDB tables that capture changes made since the last backup. Including DynamoDB tables in an AWS Backup Plan helps protect your data from accidental data loss scenarios and automates the backup process. This provides a reliable and scalable backup solution for your DynamoDB tables, ensuring that your valuable data is protected and available for recovery as needed.
\n
For more information, see Creating backups of DynamoDB tables with AWS Backup
\n
\nSource
\nAWS Config Managed Rule: dynamodb-in-backup-plan
\n
\nAlert Criteria
\nYellow: Amazon DynamoDB table is not included in AWS Backup plan.
\n
\nRecommended Action
\nEnsure that your Amazon DynamoDB tables are part of an AWS Backup plan.
\n
\nAdditional Resources
\nCreating Scheduled Backup
\nWhat is AWS Backup
\nCreating AWS Backup plan", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz107", + "status": "not_available" + } + }, + "c18d2gz104": { + "metadata": { + "id": "c18d2gz104", + "name": "Amazon EC2 Auto Scaling Group does not have ELB Health Check Enabled", + "description": "Checks if your Amazon EC2 Auto Scaling groups that are associated with a Classic Load Balancer are using Elastic Load Balancing (ELB) health checks.
\n
The default health checks for an Auto Scaling group are EC2 status checks only. If an instance fails these status checks, it is marked unhealthy and is terminated. Amazon EC2 Auto Scaling launches a new replacement instance. The Elastic Load Balancer health check periodically monitors EC2 instances to detect and terminate unhealthy instances and then launch new instances.
\n
For more information, see Elastic Load Balancing health checks.
\n
\nSource
\nAWS Config Managed Rule: autoscaling-group-elb-healthcheck-required
\n
\nAlert Criteria
\nYellow: Amazon EC2 Auto Scaling Group attached to Classic Load Balancer has not enabled ELB Health Check
\n
\nRecommended Action
\nEnsure that your Auto Scaling groups that are associated with a Classic Load Balancer use ELB health checks.
\n
ELB health checks report if the load balancer is healthy and available to handle requests. This ensures high availability for your application.
\n
\nFor more information, see Add Elastic Load Balancing health checks to an Auto Scaling group.
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz104", + "status": "not_available" + } + }, + "hc0dfs7601": { + "metadata": { + "id": "hc0dfs7601", + "name": "AWS CloudHSM clusters running HSM instances in a single AZ", + "description": "Checks your clusters that run HSM instances in a single Availability Zone (AZ). This check alerts you if your clusters are at risk of not having the most recent backup.
\n
\nAlert Criteria
\nYellow: A CloudHSM cluster is running all HSM instances in a single Availability Zone for more than 1 hour.
\nGreen: A CloudHSM cluster is running all HSM instances in at least two different Availability Zones.
\n
\nRecommended Action
\nCreate at least one more instance for the cluster in a different Availability Zone.
\n
\nAdditional Information
\nBest practices for AWS CloudHSM\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Cluster ID", + "Number of HSM Instances", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "hc0dfs7601", + "timestamp": "2023-11-27T12:21:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c18d2gz105": { + "metadata": { + "id": "c18d2gz105", + "name": "Network Load Balancers Cross Load Balancing", + "description": "Checks if cross-zone load balancing is enabled on Network Load Balancers (NLBs)
\n
Cross-zone load balancing ensures even distribution of incoming traffic across instances in different Availability Zones. This prevents the load balancer from routing all traffic to instances in the same availability zone, which can cause uneven traffic distribution and potential overloading. The feature also application reliability by automatically routing traffic to healthy instances in other availability zones in the event of a single availability zone failure.
\n
For more information, see Cross-zone load balancing.
\n
\nSource
\nAWS Config Managed Rule: nlb-cross-zone-load-balancing-enabled
\n
\nAlert Criteria
\nYellow: Network Load Balancers (NLB) does not have cross-zone load balancing enabled.
\n
\nRecommended Action
\nEnsure that cross-zone load balancing is enabled on Network Load Balancers (NLBs)
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz105", + "status": "not_available" + } + }, + "c18d2gz103": { + "metadata": { + "id": "c18d2gz103", + "name": "Amazon EC2 Auto Scaling Group has Capacity Rebalancing Enabled", + "description": "Checks if Capacity Rebalancing is enabled for Amazon EC2 Auto Scaling groups that use multiple instance types.
\n
Configuring EC2 Auto Scaling group with capacity rebalancing helps ensure that EC2 instances are evenly distributed across the Availability Zones, regardless of instance types and purchasing options. It uses a target tracking policy associated with the group, such as CPU utilization or network traffic.
\n
For more information, see Auto Scaling groups with multiple instance types and purchase options
\n
\nSource
\nAWS Config Managed Rule: autoscaling-capacity-rebalancing
\n
\nAlert Criteria
\nYellow: Amazon EC2 Auto Scaling Group capacity rebalancing is not enabled
\n
\nRecommended Action
\nEnsure that capacity rebalancing is enabled for your Amazon EC2 Auto Scaling groups that use multiple instance types.

\nConfiguring your EC2 Auto Scaling group with capacity rebalancing helps ensure that the capacity of your EC2 instances are evenly distributed across the Availability Zones, regardless of your instance types and purchasing options. It uses a target tracking policy associated with the group, such as CPU utilization or network traffic.

\nFor more information, see Enable Capacity Rebalancing (console).
\n
\nAdditional Resources
\nEnable Capacity rebalancing
\nAuto Scaling groups with multiple instance types and purchase options", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz103", + "status": "not_available" + } + }, + "Chrv231ch1": { + "metadata": { + "id": "Chrv231ch1", + "name": "Amazon Route53 Resolver Endpoint Availability Zone Redundancy", + "description": "Checks to see if your service configuration has IP addresses specified in at least two Availability Zones (AZs) for redundancy. An AZ is a distinct location that is insulated from failures in other zones. By specifying IP addresses in multiple AZs in the same Region, you can help protect your applications from a single point of failure.
\n
\nAlert Criteria
\nYellow: IP addresses are specified only in one AZ.
\nGreen: IP addresses are specified in at least two AZs.
\n
\nRecommended Action
\nSpecify IP addresses in at least two Availability Zones for redundancy.
\n
\nAdditional Resources
\nIf you require more than one elastic network interface endpoint to be available at all times, we recommend that you create at least one more network interface than you need, to make sure you have additional capacity available for handling possible traffic surges. The additional network interface also ensures availability during service operations like maintenance or upgrades.
\nHigh availability for Resolver endpoints", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource ARN", + "Number of AZs" + ] + }, + "reports": { + "checkId": "Chrv231ch1", + "timestamp": "2023-11-22T08:33:24Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "C056F80cR3": { + "metadata": { + "id": "C056F80cR3", + "name": "Amazon Route 53 High TTL Resource Record Sets", + "description": "Checks for resource record sets that can benefit from having a lower time-to-live (TTL) value. TTL is the number of seconds that a resource record set is cached by DNS resolvers. When you specify a long TTL, DNS resolvers take longer to request updated DNS records, which can cause unnecessary delay in rerouting traffic (for example, when DNS Failover detects and responds to a failure of one of your endpoints). Hosted zones created by AWS services won\u2019t appear in your check results.
\n
\n

Alert Criteria


\nYellow: A resource record set whose routing policy is Failover has a TTL greater than 60 seconds.
\nYellow: A resource record set with an associated health check has a TTL greater than 60 seconds.
\n
\n

Recommended Action


\nEnter a TTL value of 60 seconds for the listed resource record sets. For more information, see Working with Resource Record Sets.
\n
\n

Additional Resources


\nAmazon Route 53 Health Checks and DNS Failover", + "category": "fault_tolerance", + "metadata": [ + "Hosted Zone Name", + "Hosted Zone ID", + "Resource Record Set Name", + "Resource Record Set Type", + "Resource Record Set ID", + "TTL", + "Status" + ] + }, + "reports": { + "checkId": "C056F80cR3", + "timestamp": "2023-11-26T02:20:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1dfptbg10": { + "metadata": { + "id": "c1dfptbg10", + "name": "NAT Gateway AZ Independence", + "description": "Checks if your NAT Gateways are configured with Availability Zone (AZ) independence.
\nA NAT Gateway enables resources in your private subnet to securely connect to services outside the subnet using the NAT
\nGateway\u2019s IP addresses and drops any unsolicited inbound traffic. Each NAT Gateway operates within a designated
\nAvailability Zone (AZ) and is built with redundancy in that AZ only. Therefore, your resources in a particular AZ should use a
\nNAT Gateway in the same AZ so that any potential outage of a NAT Gateway or its AZ does not impact your resources in
\nanother AZ.
\n
\nAlert Criteria
\nRed: Traffic from your subnet in one AZ is being routed through a NATGW in a different AZ
\nGreen: Traffic from your subnet in one AZ is being routed through a NATGW in the same AZ
\n
\nRecommended Action
\nPlease check the AZ of your subnet and route traffic through a NAT Gateway in the same AZ.
\nIf there is no NATGW in the AZ, please create one and then route your subnet traffic through it.
\nIf you have the same route table associated across subnets in different AZs, keep this route table associated to the subnets
\nthat reside in the same AZ as the NAT Gateway and for subnets in the other AZ, please associate a separate route table
\nwith a route to a NAT Gateway in this other AZ.
\nWe recommend choosing a maintenance window for architecture changes in your Amazon VPC.
\n
\nAdditional Resources
\n
\nPlease refer to the AWS Public documentation on:", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "NAT Availability Zone", + "NAT ID", + "Subnet Availability Zone", + "Subnet ID", + "Route Table ID", + "NAT ARN", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfptbg10", + "timestamp": "2023-11-26T12:22:04Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 89, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-04441869943ac488b", + "isSuppressed": false, + "metadata": [ + "Green", + "eu-west-1", + "euw1-az1", + "nat-04441869943ac488b", + "euw1-az1", + "subnet-0963bf2a7ea16e03b", + "rtb-0f35d131bb6ff8301", + "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-04441869943ac488b", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-05ad13e44ab675ade", + "isSuppressed": false, + "metadata": [ + "Green", + "eu-west-1", + "euw1-az3", + "nat-05ad13e44ab675ade", + "euw1-az3", + "subnet-087a9b31b3abd0750", + "rtb-0a33156062272e396", + "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-05ad13e44ab675ade", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-0b02c8b7c236e4151", + "isSuppressed": false, + "metadata": [ + "Green", + "eu-west-1", + "euw1-az2", + "nat-0b02c8b7c236e4151", + "euw1-az2", + "subnet-0b4068773389eb498", + "rtb-07268ea280d45269c", + "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-0b02c8b7c236e4151", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-0bf27f183c654125b", + "isSuppressed": false, + "metadata": [ + "Green", + "eu-west-1", + "euw1-az2", + "nat-0bf27f183c654125b", + "euw1-az2", + "subnet-08fdf1734e6f3cbec", + "rtb-0b5d1840a8925cfeb", + "arn:aws:ec2:eu-west-1:415909267177:natgateway/nat-0bf27f183c654125b", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-00c8071a90a0b3815", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-00c8071a90a0b3815", + "use2-az3", + "subnet-0b2a85ba1eb76b35d", + "rtb-0afe2b399a8d4eb62", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-00c8071a90a0b3815", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-00cf3522e7ebeaa98", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-00cf3522e7ebeaa98", + "use2-az3", + "subnet-0524aeac2e3f465e0", + "rtb-069f25b633cf23dda", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-00cf3522e7ebeaa98", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-010ae5dbf53574e98", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-010ae5dbf53574e98", + "use2-az1", + "subnet-05f41e7b22b87d7e7", + "rtb-0600968dccf1f0ba8", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-010ae5dbf53574e98", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-014ab926275e70966", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-014ab926275e70966", + "use2-az3", + "subnet-0ad6e73a788a7f23b", + "rtb-089df682687e56fb2", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-014ab926275e70966", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-01b2a4d0611f75104", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-01b2a4d0611f75104", + "use2-az1", + "subnet-0cb5f869122e21a32", + "rtb-0a6799f4a26dc9a5f", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-01b2a4d0611f75104", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-01b45d504106f0fc0", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-01b45d504106f0fc0", + "use2-az2", + "subnet-0d484e77206ab8ebd", + "rtb-0ce9f9c1fe9bdc0d4", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-01b45d504106f0fc0", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-023bbd3fb5957b01a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-023bbd3fb5957b01a", + "use2-az2", + "subnet-0c61d84226b556b0f", + "rtb-009b804f05ee365ae", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-023bbd3fb5957b01a", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-02421b72ec43939ba", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-02421b72ec43939ba", + "use2-az1", + "subnet-09798b9ba47853a1b", + "rtb-0af30fa12c205ed41", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-02421b72ec43939ba", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-024abdf2243af355a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-024abdf2243af355a", + "use2-az3", + "subnet-0a17b170f6175411d", + "rtb-01b7dbe71294a9599", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-024abdf2243af355a", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0252e37ad81648408", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0252e37ad81648408", + "use2-az2", + "subnet-02459cccfc0473821", + "rtb-095dccbc387516a7e", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0252e37ad81648408", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-02c030a124c9c7f7a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-02c030a124c9c7f7a", + "use2-az2", + "subnet-0212309b46e43fe32", + "rtb-0e5e891618782e7ce", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-02c030a124c9c7f7a", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-02e85ad1a20d47674", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-02e85ad1a20d47674", + "use2-az2", + "subnet-0c781bc1b343e7730", + "rtb-0f3685cdcac85d544", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-02e85ad1a20d47674", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-031168c48aa600119", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-031168c48aa600119", + "use2-az3", + "subnet-006b8a9a10307ddbf", + "rtb-07606b4ea3c18d914", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-031168c48aa600119", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-032410029c6974835", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-032410029c6974835", + "use2-az3", + "subnet-00f89068161366f89", + "rtb-0cdcc8ee259a2b51b", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-032410029c6974835", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-036cd959ee61cbafb", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-036cd959ee61cbafb", + "use2-az2", + "subnet-01c03885e0f34cc7f", + "rtb-0ad4a0e83e1c22b90", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-036cd959ee61cbafb", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-036d8786afce83468", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-036d8786afce83468", + "use2-az3", + "subnet-055ab3beffe4e5240", + "rtb-05e8cfd9cd8d4326a", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-036d8786afce83468", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0382fddfe96624c7d", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0382fddfe96624c7d", + "use2-az2", + "subnet-081bc490dc92221a9", + "rtb-02cf7db30c57c3cec", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0382fddfe96624c7d", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-042cd87d7098448f8", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-042cd87d7098448f8", + "use2-az1", + "subnet-084efbf9d710af89e", + "rtb-05b795ded90834da9", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-042cd87d7098448f8", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-042f5fb9dc2a73c78", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-042f5fb9dc2a73c78", + "use2-az3", + "subnet-02d73541ab3ef22d3", + "rtb-005a1cea1487bc53e", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-042f5fb9dc2a73c78", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0442ea5ecd09baa3b", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0442ea5ecd09baa3b", + "use2-az1", + "subnet-0d3a22871050a944a", + "rtb-0d49fa7ff44da0f23", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0442ea5ecd09baa3b", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-047c6f95578e83080", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-047c6f95578e83080", + "use2-az1", + "subnet-05cf54381667ddf52", + "rtb-04f2e0fcbd118a016", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-047c6f95578e83080", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-04dcbfe243044fe10", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-04dcbfe243044fe10", + "use2-az1", + "subnet-0456f9f43d00719af", + "rtb-0f35fffa46eda833e", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-04dcbfe243044fe10", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-057fce9e96bd76d94", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-057fce9e96bd76d94", + "use2-az2", + "subnet-0b113c72f8ed30326", + "rtb-0aa13f54a5982630a", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-057fce9e96bd76d94", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-05a71edcffea817e0", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-05a71edcffea817e0", + "use2-az2", + "subnet-0a7b2f30955a0cab3", + "rtb-0cc2fedb6b6f16c4e", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-05a71edcffea817e0", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-05e475220c69d7c88", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-05e475220c69d7c88", + "use2-az3", + "subnet-0607334cf1b2cb9f1", + "rtb-0b9912b621eb90a3b", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-05e475220c69d7c88", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-064b9d5909fbd5f28", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-064b9d5909fbd5f28", + "use2-az2", + "subnet-04515a4db5ab6c5a6", + "rtb-0e19f0c696f5f7182", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-064b9d5909fbd5f28", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-065f692d5944cfe32", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-065f692d5944cfe32", + "use2-az1", + "subnet-08756e736e9a63821", + "rtb-046bb46270999ed75", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-065f692d5944cfe32", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-066f67f8a42c1e63e", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-066f67f8a42c1e63e", + "use2-az3", + "subnet-013c1d24a3c48f5aa", + "rtb-05f14f928a89f6bd8", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-066f67f8a42c1e63e", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0679c3f1c1d0f54b9", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0679c3f1c1d0f54b9", + "use2-az3", + "subnet-092ee71bd08e46b14", + "rtb-021a1cb65d023d40c", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0679c3f1c1d0f54b9", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-068f7dcb1604029a5", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-068f7dcb1604029a5", + "use2-az2", + "subnet-01a480a0d064d4546", + "rtb-0c5be3810eb530a2c", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-068f7dcb1604029a5", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0722551ca92a15027", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0722551ca92a15027", + "use2-az2", + "subnet-0d637ff45af444d29", + "rtb-0b37856d7e4192ede", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0722551ca92a15027", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0863f8b48cd7ed001", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0863f8b48cd7ed001", + "use2-az1", + "subnet-04d0c06b50ba57ebe", + "rtb-0569c1dd626c63564", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0863f8b48cd7ed001", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0894967a56bd855d3", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0894967a56bd855d3", + "use2-az3", + "subnet-0faf13ca695c0dfb0", + "rtb-0202c00a671980880", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0894967a56bd855d3", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0a56555c9dbcd259c", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0a56555c9dbcd259c", + "use2-az2", + "subnet-0a849af2f9fdb3c31", + "rtb-0f387d36327474860", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0a56555c9dbcd259c", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0ac35337d74b2442a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0ac35337d74b2442a", + "use2-az2", + "subnet-0f21a834d7045244d", + "rtb-0d364802fefecbc67", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0ac35337d74b2442a", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0adbe7e92b182b7a1", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0adbe7e92b182b7a1", + "use2-az2", + "subnet-0ea1dbadcfa9145ae", + "rtb-00c01e5375d67a012", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0adbe7e92b182b7a1", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0af2d240d8fa02df8", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0af2d240d8fa02df8", + "use2-az2", + "subnet-02bd9aaba5d6dc14e", + "rtb-07ff39d1f4458b513", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0af2d240d8fa02df8", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0affe490e0c5cd241", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0affe490e0c5cd241", + "use2-az3", + "subnet-0a9e4ac6e94420661", + "rtb-0a0854fe5c572337a", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0affe490e0c5cd241", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0bd4f9c9fb4dc5d30", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0bd4f9c9fb4dc5d30", + "use2-az1", + "subnet-058e9ee364c08d156", + "rtb-0763023766ad27a95", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0bd4f9c9fb4dc5d30", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0bec0d5e66afe5027", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0bec0d5e66afe5027", + "use2-az1", + "subnet-00cb27d81bb4b81b1", + "rtb-0e493fc5962d46a83", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0bec0d5e66afe5027", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c4891cf5f39796f0", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0c4891cf5f39796f0", + "use2-az3", + "subnet-09c08777f1769778c", + "rtb-0b61c2bcb20e1c862", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c4891cf5f39796f0", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c734808d2c07e8c8", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0c734808d2c07e8c8", + "use2-az1", + "subnet-0268c87696b99e987", + "rtb-08903b12c7820ac28", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c734808d2c07e8c8", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c7a2fb44bb71cbdd", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0c7a2fb44bb71cbdd", + "use2-az3", + "subnet-09c486843d5564e70", + "rtb-01f6e79927acba91d", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c7a2fb44bb71cbdd", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c8a5bab1efce4971", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0c8a5bab1efce4971", + "use2-az1", + "subnet-0a121ff860490bce8", + "rtb-0a06ac3c5bd8ad278", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0c8a5bab1efce4971", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0cb34d8c1f0d2af4c", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0cb34d8c1f0d2af4c", + "use2-az2", + "subnet-0f683dc473d6c737f", + "rtb-0cedbd2ddcf6c1ccc", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0cb34d8c1f0d2af4c", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0cb76eebd287bb94a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0cb76eebd287bb94a", + "use2-az3", + "subnet-03bd74aa7d1b961fd", + "rtb-0429494921ccfb9b0", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0cb76eebd287bb94a", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0cd7899636914e0f6", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0cd7899636914e0f6", + "use2-az3", + "subnet-05f8253df9d03f4b6", + "rtb-0ca41eb53796282a0", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0cd7899636914e0f6", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0d291551bb7bba3f0", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0d291551bb7bba3f0", + "use2-az1", + "subnet-01c78611cf1bd7222", + "rtb-0d26dbdce6ba32544", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0d291551bb7bba3f0", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0dc6b3976afee8cca", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0dc6b3976afee8cca", + "use2-az1", + "subnet-07867a265ac1614b8", + "rtb-09230cd74a0a94087", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0dc6b3976afee8cca", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0dfdf4e71e3acc6b9", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0dfdf4e71e3acc6b9", + "use2-az2", + "subnet-02b06d16f0c53d119", + "rtb-0821a9a3944bf8717", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0dfdf4e71e3acc6b9", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e0a16ab54ac727ed", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0e0a16ab54ac727ed", + "use2-az3", + "subnet-0e0fa3b9c1584e08c", + "rtb-0ef88ab7052b2e088", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e0a16ab54ac727ed", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e1be2065b69963c1", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az2", + "nat-0e1be2065b69963c1", + "use2-az2", + "subnet-085e23e788fce052a", + "rtb-03902961d3d5b42b8", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e1be2065b69963c1", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e5e00d64b04ccaeb", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0e5e00d64b04ccaeb", + "use2-az1", + "subnet-029e250f4b132ede6", + "rtb-033c4b2816e303fbd", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e5e00d64b04ccaeb", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e7974ff6bca57ffd", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0e7974ff6bca57ffd", + "use2-az1", + "subnet-0f62f88a279ed9abd", + "rtb-0422a7e3c56e35021", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e7974ff6bca57ffd", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e7ba8fd7bd04b2a0", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0e7ba8fd7bd04b2a0", + "use2-az1", + "subnet-0379b218ec98390bc", + "rtb-035fe6d1e7c3cbf11", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0e7ba8fd7bd04b2a0", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0ed2cec2704dd17e4", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az1", + "nat-0ed2cec2704dd17e4", + "use2-az1", + "subnet-00a067fbadcec008f", + "rtb-039325541eac1591f", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0ed2cec2704dd17e4", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0f70df50209b3aaeb", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "use2-az3", + "nat-0f70df50209b3aaeb", + "use2-az3", + "subnet-0788566ec75bf0352", + "rtb-0f454e3de0ae99e4c", + "arn:aws:ec2:us-east-2:415909267177:natgateway/nat-0f70df50209b3aaeb", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-001922173453d9069", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az1", + "nat-001922173453d9069", + "usw2-az1", + "subnet-0f981cd89f3b316ee", + "rtb-09145d3d437184776", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-001922173453d9069", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-005439ab0c3e49e1d", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az2", + "nat-005439ab0c3e49e1d", + "usw2-az2", + "subnet-0f23355a2969511f6", + "rtb-07021344c3ba1af6e", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-005439ab0c3e49e1d", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-034d710bcd70d9a94", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az1", + "nat-034d710bcd70d9a94", + "usw2-az1", + "subnet-06b199c4b928ae01f", + "rtb-0f446afbbf16ebce9", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-034d710bcd70d9a94", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-03fdeaf4736ee997a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az1", + "nat-03fdeaf4736ee997a", + "usw2-az1", + "subnet-07308e0c14b43c9bb", + "rtb-088c2377b2a0304ad", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-03fdeaf4736ee997a", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-04735b6e560df7419", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az3", + "nat-04735b6e560df7419", + "usw2-az3", + "subnet-04a009b4e307d67b2", + "rtb-0b01a4c411022dd80", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-04735b6e560df7419", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-04cc3abc003b48496", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az3", + "nat-04cc3abc003b48496", + "usw2-az3", + "subnet-01c901f52d4d98663", + "rtb-0d6dbef0848750c80", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-04cc3abc003b48496", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-05b4d8ccd8d54a6a7", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az1", + "nat-05b4d8ccd8d54a6a7", + "usw2-az1", + "subnet-034238add34346399", + "rtb-015e7ae84dc0aec12", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-05b4d8ccd8d54a6a7", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-05d8c4819ca588831", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az3", + "nat-05d8c4819ca588831", + "usw2-az3", + "subnet-0f2c8384dd7203699", + "rtb-0812bfe69d78042db", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-05d8c4819ca588831", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-07f4ab20c6e15ec74", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az2", + "nat-07f4ab20c6e15ec74", + "usw2-az2", + "subnet-0f18f75a0ec9fddc5", + "rtb-0f8bc3e0a7e1e0bc4", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-07f4ab20c6e15ec74", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-08dbd6161e864d29b", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az1", + "nat-08dbd6161e864d29b", + "usw2-az1", + "subnet-023244ae0a3c4a67d", + "rtb-049915d0c1eb5fe22", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-08dbd6161e864d29b", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-08f45283f1b7f09f1", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az2", + "nat-08f45283f1b7f09f1", + "usw2-az2", + "subnet-0aacb87bcbe682478", + "rtb-012e29998a9c62e29", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-08f45283f1b7f09f1", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-093a924e7d7de6541", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az4", + "nat-093a924e7d7de6541", + "usw2-az4", + "subnet-09496f5667b28889c", + "rtb-0857c1468702d0531", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-093a924e7d7de6541", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-094a60de710640369", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az3", + "nat-094a60de710640369", + "usw2-az3", + "subnet-0aa05701704f7a888", + "rtb-0e7cccdab584dea34", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-094a60de710640369", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-09a1da44ca8bcaa7d", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az4", + "nat-09a1da44ca8bcaa7d", + "usw2-az4", + "subnet-06b64a81f0e68cbde", + "rtb-0fc633eefd76352e6", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-09a1da44ca8bcaa7d", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0aaed17f8134c6323", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az3", + "nat-0aaed17f8134c6323", + "usw2-az3", + "subnet-0cddd551db649b809", + "rtb-05f22b498ef1a0851", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0aaed17f8134c6323", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0adde716778fc1108", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az2", + "nat-0adde716778fc1108", + "usw2-az2", + "subnet-087b3309c3f5581c9", + "rtb-096d223a052d1ed01", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0adde716778fc1108", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0afea9c693dda2f89", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az1", + "nat-0afea9c693dda2f89", + "usw2-az1", + "subnet-020bbf423a4a903b8", + "rtb-05b63377a1686edd3", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0afea9c693dda2f89", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0bf75ac5d0e0b90ab", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az1", + "nat-0bf75ac5d0e0b90ab", + "usw2-az1", + "subnet-048f6d330a4d2b81e", + "rtb-02eca0a7099db6452", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0bf75ac5d0e0b90ab", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0bfffba3ec95aa9b4", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az4", + "nat-0bfffba3ec95aa9b4", + "usw2-az4", + "subnet-0b092d3906dc8d6aa", + "rtb-0518e69a3fa679a15", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0bfffba3ec95aa9b4", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0cc56a089ecb42864", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az4", + "nat-0cc56a089ecb42864", + "usw2-az4", + "subnet-0027e66d40de69d2c", + "rtb-0a8dacf7e057060cf", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0cc56a089ecb42864", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0d4267c76154b88f8", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az4", + "nat-0d4267c76154b88f8", + "usw2-az4", + "subnet-0e1815596292bb7f1", + "rtb-090a58fdda43d86fa", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0d4267c76154b88f8", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0d8a78ccabf6ebe0a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az4", + "nat-0d8a78ccabf6ebe0a", + "usw2-az4", + "subnet-0dafb7dcbf615e722", + "rtb-0962b0f4ddab1d715", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0d8a78ccabf6ebe0a", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0dc706a605826f99b", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az2", + "nat-0dc706a605826f99b", + "usw2-az2", + "subnet-019cdc9d54917e093", + "rtb-07d93954fecc85f41", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0dc706a605826f99b", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0df0b88d6b59907ac", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az2", + "nat-0df0b88d6b59907ac", + "usw2-az2", + "subnet-02a34c73f1cdfa1e9", + "rtb-0921fb9c461d68a4e", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0df0b88d6b59907ac", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0e0ab573df89d0162", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az3", + "nat-0e0ab573df89d0162", + "usw2-az3", + "subnet-0ac928696508b2c87", + "rtb-069bb39c1bd4dc259", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0e0ab573df89d0162", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0e3a547e1649513b9", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az4", + "nat-0e3a547e1649513b9", + "usw2-az4", + "subnet-0c56895165bf454b1", + "rtb-0c731780836793a6e", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0e3a547e1649513b9", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0ecf10ce3f7692b8c", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az2", + "nat-0ecf10ce3f7692b8c", + "usw2-az2", + "subnet-0b988c485c5e32557", + "rtb-00b9f1faaeda84cfd", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0ecf10ce3f7692b8c", + "2023-11-26 16:49:02.307284" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0f30a1ea9ccf96746", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "usw2-az3", + "nat-0f30a1ea9ccf96746", + "usw2-az3", + "subnet-0253d500ebff27c32", + "rtb-082b00d6b22da4c73", + "arn:aws:ec2:us-west-2:415909267177:natgateway/nat-0f30a1ea9ccf96746", + "2023-11-26 16:49:02.307284" + ] + } + ] + } + }, + "c1dfptbg11": { + "metadata": { + "id": "c1dfptbg11", + "name": "Single AZ Application Check", + "description": "Checks through network patterns if your egress network traffic is routing through a single Availability Zone (AZ).
\n
\nAn AZ is a distinct location that is insulated from any impact in other zones. By spreading your service across multiple AZs, you limit the blast radius of an AZ failure.
\n
\nAlert Criteria
\nYellow: Your application may be deployed in only one AZ based on observed egress network patterns. If this is true
and your application expects high availability, we recommend that you provision your application resources and
\nimplement your network flows to utilize multiple Availability Zones.
\n
\nRecommended Action
\nIf your application requires high availability, consider implementing a multi-AZ architecture for higher availability.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "VPC ID", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfptbg11", + "timestamp": "2023-11-26T12:22:04Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 28, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "eu-west-1/vpc-016461b6db6727603", + "isSuppressed": false, + "metadata": [ + "Green", + "eu-west-1", + "vpc-016461b6db6727603", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "eu-west-1/vpc-04e76310e855f1713", + "isSuppressed": false, + "metadata": [ + "Green", + "eu-west-1", + "vpc-04e76310e855f1713", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-00eb1f8d56a9f692e", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-00eb1f8d56a9f692e", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-011eb76c754e43b95", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-011eb76c754e43b95", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-015ccfcac5f20f8c6", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-015ccfcac5f20f8c6", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-02c4b4a8e5e79cac0", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-02c4b4a8e5e79cac0", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-033a85f30e78481a9", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-033a85f30e78481a9", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-033d20d8636c4a8ab", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-033d20d8636c4a8ab", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-03e2566895d79e820", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-03e2566895d79e820", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-04a2fa4f8182a1556", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-04a2fa4f8182a1556", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-04a59731fe19a92ac", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-04a59731fe19a92ac", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-0727ede1e4721fca4", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-0727ede1e4721fca4", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-077a80d9bc9adb58a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-077a80d9bc9adb58a", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-081ff429b3435f56d", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-081ff429b3435f56d", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-08c737a442ff62c49", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-08c737a442ff62c49", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-09e74231361ad0e61", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-09e74231361ad0e61", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-0dc9114cbec4e5c80", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-0dc9114cbec4e5c80", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-0e0f44a22ab8b6199", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-0e0f44a22ab8b6199", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-0e8f2ae35422a17a1", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-0e8f2ae35422a17a1", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-0f5463d65863baf25", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-0f5463d65863baf25", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "us-east-2/vpc-0fb6b6e659384190a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpc-0fb6b6e659384190a", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "us-west-2/vpc-00bee640db155dac7", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "vpc-00bee640db155dac7", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "us-west-2/vpc-029256ad61963f1c8", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "vpc-029256ad61963f1c8", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "us-west-2/vpc-03da3c877ae0e831c", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "vpc-03da3c877ae0e831c", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "us-west-2/vpc-03fccd00db73fb188", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "vpc-03fccd00db73fb188", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "us-west-2/vpc-0676c51454e7f5d48", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "vpc-0676c51454e7f5d48", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "us-west-2/vpc-0cff7c0742d8ef66a", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "vpc-0cff7c0742d8ef66a", + "2023-11-26 16:49:04.286524" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "us-west-2/vpc-0ddda14d2de356963", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "vpc-0ddda14d2de356963", + "2023-11-26 16:49:04.286524" + ] + } + ] + } + }, + "c1z7dfpz01": { + "metadata": { + "id": "c1z7dfpz01", + "name": "Amazon ECS service using a single AZ", + "description": "Checks that your service configuration uses a single Availability Zone (AZ).

An AZ is a distinct location that is insulated from failures in other zones. This supports inexpensive, low-latency network connectivity between AZs in the same AWS Region. By launching instances in multiple AZs in the same Region, you can help protect your applications from a single point of failure.
\n
\nAlert Criteria
\nYellow: An Amazon ECS service is running all tasks in a single AZ.
\nGreen: An Amazon ECS service is running tasks in at least two different AZs.
\n
\nRecommended Action
\nCreate at least one more task for the service in a different AZ.
\n
\nAdditional Resources
\nAmazon ECS capacity and availability", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "ECS Cluster Name/ECS Service Name", + "Number of Availability Zones", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1z7dfpz01", + "timestamp": "2023-11-27T12:22:08Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1z7dfpz02": { + "metadata": { + "id": "c1z7dfpz02", + "name": "Amazon ECS Multi-AZ placement strategy", + "description": "Checks that your Amazon ECS service uses the spread placement strategy based on availability zone. This strategy distributes tasks across Availability Zones (AZs) in the same AWS Region and can help protect your applications from a single point of failure.

For tasks that run as part of an Amazon ECS service, spread is the default task placement strategy.

This check also verifies that spread is the first or only strategy in your list of enabled placement strategies.
\n
\nAlert Criteria
\nYellow: Spread by availability zone is disabled or isn't the first strategy in your list of enabled placement strategies for your Amazon ECS service.
\nGreen: Spread by availability zone is the first strategy in your list of enabled placement strategies or the only placement strategy enabled for your Amazon ECS service.
\n
\nRecommended Action
\n Enable the spread task placement strategy to distribute tasks across multiple AZs. Verify that spread by availability zone is the first strategy for all enabled task placement strategies or the only strategy used. If you choose to manage AZ placement, you can use a mirrored service in another AZ to mitigate these risks.
\n
\nAdditional Resources
\nAmazon ECS task placement strategies", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "ECS Cluster Name/ECS Service Name", + "Spread Task Placement Strategy Enabled and Applied Correctly", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1z7dfpz02", + "timestamp": "2023-11-27T12:22:09Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "CLOG40CDO8": { + "metadata": { + "id": "CLOG40CDO8", + "name": "Auto Scaling Group Health Check", + "description": "Examines the health check configuration for Auto Scaling groups. If Elastic Load Balancing is being used for an Auto Scaling group, the recommended configuration is to enable an Elastic Load Balancing health check. If an Elastic Load Balancing health check is not used, Auto Scaling can only act upon the health of the Amazon Elastic Compute Cloud (Amazon EC2) instance and not on the application that is running on the instance.
\n
\n

Alert Criteria


\nYellow: An Auto Scaling group has an associated load balancer, but the Elastic Load Balancing health check is not enabled.
\nYellow: An Auto Scaling group does not have an associated load balancer, but the Elastic Load Balancing health check is enabled.
\n
\n

Recommended Action


\nIf the Auto Scaling group has an associated load balancer, but the Elastic Load Balancing health check is not enabled, see Add an Elastic Load Balancing Health Check to your Auto Scaling Group.
\nIf the Elastic Load Balancing health check is enabled, but no load balancer is associated with the Auto Scaling group, see Set Up an Auto-Scaled and Load-Balanced Application.
\n
\n

Additional Resources


\nAuto Scaling Developer Guide", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Auto Scaling Group Name", + "Load Balancer Associated", + "Health Check", + "Status" + ] + }, + "reports": { + "checkId": "CLOG40CDO8", + "timestamp": "2023-11-22T02:19:41Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Cmsvnj8db1": { + "metadata": { + "id": "Cmsvnj8db1", + "name": "Amazon RDS ReplicaLag", + "description": "Checks to see if the ReplicaLag CloudWatch metric for an RDS database instance has increased above an operationally reasonable threshold over the past day.ReplicaLag metric measures the number of seconds a read replica is behind the primary instance. Replication lag occurs when the asynchronous updates made to the read replica cannot keep up with the updates happening on the primary database instance. In the event of a failure to the primary instance, data could be missing from the read replica if the ReplicaLag is above an operationally reasonable threshold.
\n
\nAlert Criteria
\nRed: ReplicaLag metric exceeded 60 seconds at least once during the week.
\nYellow: ReplicaLag metric exceeded 10 seconds at least once during the week.
\nGreen: ReplicaLag is less than 10 seconds.
\n
\nRecommended Action
\nThere are several possible causes for ReplicaLag to increase beyond operationally safe levels. For example, it can be caused by recently replaced/launched replica instances from older backups and these replicas requiring substantial time to catch-up to the primary database instance and live transactions. This ReplicaLag may dwindle over time as catch-up occurs. Another example could be that the transaction velocity able to be achieved on the primary database instance is higher than the replication process or replica infrastructure is able to match. This ReplicaLag may grow over time as replication fails to keep pace with the primary database performance. Finally, the workload may be bursty throughout different periods of the day/month/etc. that result in occasional ReplicaLag to fall behind. Your team should investigate which possible root cause has contributed to high ReplicaLag for the database, and possibly change the database instance type or other characteristics of the workload to ensure data continuity on the replica matches your requirements.
\n
\nAdditional Resources
\nWorking with read replicas for Amazon RDS for PostgreSQL
\nWorking with MySQL replication in Amazon RDS
\nWorking with MySQL read replicas", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "DB Instance ARN", + "ReplicaLag Metric" + ] + }, + "reports": { + "checkId": "Cmsvnj8db1", + "timestamp": "2023-11-21T18:43:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Cmsvnj8db2": { + "metadata": { + "id": "Cmsvnj8db2", + "name": "Amazon RDS FreeStorageSpace", + "description": "Checks to see if the FreeStorageSpace CloudWatch metric for an RDS database instance has increased above an operationally reasonable threshold.
\n
\nAlert Criteria
\nRed: FreeStorageSpace has reached / exceeded 90% of total capacity
\nYellow: FreeStorageSpace is between 80% and 90% of total capacity
\nGreen: FreeStorageSpace is less than 80% of total capacity
\n
\nRecommended Action
\nScale up the storage space for the RDS database instance that is running low on memory using the Amazon RDS Management Console, Amazon RDS API or AWS Command Line Interface.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "DB Instance ARN", + "FreeStorageSpace Metric (MB)", + "DB Instance Allocated Storage (MB)", + "DB Instance Storage Used Percent" + ] + }, + "reports": { + "checkId": "Cmsvnj8db2", + "timestamp": "2023-11-22T00:56:18Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 2, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ksjyp-w59I6h-2uSIyMsz7ZuFYoGaDImWHlMaWyhbyI", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:standardization-db", + "18381.04", + "21474.8", + "14.41" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tNwAwh-Q4eX30Q_4Ssgc4nSqG7iZsy3LlW-gSDjWez4", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:vchalla-quay-quay-db", + "4713.3", + "5368.7", + "12.21" + ] + } + ] + } + }, + "Cmsvnj8db3": { + "metadata": { + "id": "Cmsvnj8db3", + "name": "Amazon RDS DiskQueueDepth", + "description": "Checks to see if the CloudWatch metric DiskQueueDepth shows that number of queued writes to the RDS Instance database storage has grown to a level where an operational investigation should be suggested.
\n
\nAlert Criteria
\nRed: DiskQueueDepth CloudWatch metric has exceeded 10
\nYellow: DiskQueueDepth CloudWatch metric is greater than 5 but less than or equal to 10
\nGreen: DiskQueueDepth CloudWatch metric is less than or equal to 5
\n
\nRecommended Action
\nConsider moving to instances and storage volumes that support the read/write characteristics.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "DB Instance ARN", + "DiskQueueDepth Metric" + ] + }, + "reports": { + "checkId": "Cmsvnj8db3", + "timestamp": "2023-11-23T02:00:29Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 2, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ksjyp-w59I6h-2uSIyMsz7ZuFYoGaDImWHlMaWyhbyI", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:standardization-db", + "0.03" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tNwAwh-Q4eX30Q_4Ssgc4nSqG7iZsy3LlW-gSDjWez4", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:vchalla-quay-quay-db", + "0.0" + ] + } + ] + } + }, + "Cmsvnj8vf1": { + "metadata": { + "id": "Cmsvnj8vf1", + "name": "Amazon MSK brokers hosting too many partitions", + "description": "Checks that the brokers of a Managed Streaming for Kafka (MSK) Cluster do not have more than the recommended number of partitions assigned.
\n
\nAlert Criteria
\nRed: Your MSK broker has reached or exceeded 100% of the recommended maximum partition limit
\nYellow: Your MSK has reached 80% of the recommended maximum partition limit
\n
\nRecommended Action
\nPlease follow MSK recommended best practices to scale your MSK Cluster or delete any unused partitions.
\n
\nAdditional Resources
\nRight-sizing your Cluster", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Cluster ARN", + "Broker ID", + "Partition Count" + ] + }, + "reports": { + "checkId": "Cmsvnj8vf1", + "timestamp": "2023-11-24T01:55:54Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "xdeXZKIUy": { + "metadata": { + "id": "xdeXZKIUy", + "name": "ELB Cross-Zone Load Balancing", + "description": "With Cross-zone load balancing turned off, there is a risk of service unavailability due to uneven distribution of traffic or backend overloading. This problem can occur when clients incorrectly cache DNS information, or when there are an unequal number of instances in each Availability Zone (for example, if you have taken down some instances for maintenance).\n

\n

Alert Criteria


\nYellow: Cross-zone load balancing is not enabled for a load balancer.

\n

Recommended Action


\nConfirm that the Amazon EC2 instances registered with the load balancer are launched in multiple Availability Zones, and then enable cross-zone load balancing for the load balancer. For more information, see Availability Zones and Regions and Enable or Disable Cross-Zone Load Balancing for Your Load Balancer.

\n

Additional Resources


\nRequest Routing
\nElastic Load Balancing Concepts", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Load Balancer Name", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "xdeXZKIUy", + "timestamp": "2023-11-24T12:06:28Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 11, + "resourcesFlagged": 11, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-east-2", + "resourceId": "e_Ehe5_ts8jKyGGY0VQYXnJR7OTrRUXvJ-dot5TR3sE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "a1a5dec191a564d909092dcb2d9956a7", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "6BFrYIRNJ5BQ7ONbYVh5TWXBWL59ZUNb8c2xNyaalZc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a3264560fd1c141809263bc702080f05", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "DviuBWf6nHD9z__wi56GftO1HWqW7q7CWd0YzC9_Y6I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a644ed01d193e4549a874e7e5a0eabe7", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "G_TogNnpVFpg_Ps-AoL_V1_89mGCkfZhslKLZwcBKpU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a23e595fab3334f50994f255529fb7d0", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Kv4pKUKswleOvNWnCR3J2UA-TQdtX8vBSVqLiRBns_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a27abbe72757b46d0b11857a6e9887a3", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "PTyBH8vXw48g-9sRbfFrelZHVtqINeTKFcgNV6P_rug", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "abf84ee009fdb40549ca76bf10f341df", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "UEaCC9GFIbjASL2Q--3EivpdlG2rD_lGPXDJwfkF_YQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "aec8c7ebf2eb149909978c8179bb82ca", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "anCQFp6vlD1h7GQ5WjIaAK7Hfp121RKp7DpIikdeoPA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a559ef1ae4b234f99985aae08493ea30", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "bGsjfz-gvJR8J2oUmDwCtI3VjMxneOdhkMQCbsekaLw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "ad9789baf3f204dda814bb82df95a220", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sk_NYnJc3xTh-6tbVbCan_kiVoerzl9uddlV372LauE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "af74f1f143f534387bd5a9ef8d0e3650", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yPbtNYfa4aLnpKnYY3By3GSTq3xdVf63q-IPUDXo2lg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a4c60e1ef3747463bbfc7c3cca8762c2", + "Yellow", + "Cross-zone load balancing is not enabled" + ] + } + ] + } + }, + "Cb877eB72b": { + "metadata": { + "id": "Cb877eB72b", + "name": "Amazon Route 53 Deleted Health Checks", + "description": "Checks for resource record sets that are associated with health checks that have been deleted. Amazon Route 53 does not prevent you from deleting a health check that is associated with one or more resource record sets. If you delete a health check without updating the associated resource record sets, the routing of DNS queries for your DNS failover configuration will not work as intended. Hosted zones created by AWS services won\u2019t appear in your check results.\n
\n
\n

Alert Criteria


\nYellow: A resource record set is associated with a health check that has been deleted.\n

\n

Recommended Action


\nCreate a new health check and associate it with the resource record set; see Creating, Updating, and Deleting Health Checks and Adding Health Checks to Resource Record Sets.\n
\n
\n

Additional Information


\nAmazon Route 53 Health Checks and DNS Failover
\nHow Health Checks Work in Simple Amazon Route 53 Configurations", + "category": "fault_tolerance", + "metadata": [ + "Hosted Zone Name", + "Hosted Zone ID", + "Resource Record Set Name", + "Resource Record Set Type", + "Resource Record Set Identifier" + ] + }, + "reports": { + "checkId": "Cb877eB72b", + "timestamp": "2023-11-23T14:19:08Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Cm24dfsM13": { + "metadata": { + "id": "Cm24dfsM13", + "name": "Amazon Comprehend Endpoint Access Risk", + "description": "Checks the AWS Key Management Service (AWS KMS) key permissions for an endpoint where the underlying model was encrypted by using customer managed keys. If the customer managed key is disabled or the key policy was changed to alter the allowed permissions for Amazon Comprehend, the endpoint availability might be affected.
\n

Note:

This check is automatically refreshed multiple times a day. It might take a few hours for the latest results to appear.
\n
\n

Alert Criteria


\nRed: The customer managed key is disabled or the key policy was changed to alter the allowed permissions for Amazon Comprehend access.
\n
\n

Recommended Action

\n
If the customer managed key was disabled, we recommend that you enable it. For more information, see Enabling keys. If the key policy was altered and you want to keep using the endpoint, we recommend that you update the KMS key policy. For more information, see Changing a key policy.
\n
\n

Additional Resources


\nKMS Key Encryption Permissions\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Endpoint ARN", + "Model ARN", + "KMS KeyId", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Cm24dfsM13", + "timestamp": "2023-11-27T12:22:26Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "cIdfp1js9r": { + "metadata": { + "id": "cIdfp1js9r", + "name": "Number of AWS Regions in an Incident Manager replication set", + "description": "Checks that an Incident Manager replication set's configuration uses more than one AWS Region to support regional failover and response. For incidents created by CloudWatch alarms or EventBridge events, Incident Manager creates an incident in the same AWS Region as the alarm or event rule. If Incident Manager is temporarily unavailable in that Region, the system attempts to create an incident in another Region in the replication set. If the replication set includes only one Region, the system fails to create an incident record while Incident Manager is unavailable.
\n
\nAlert Criteria
\nGreen: The replication set contains more than one Region.
\nYellow: The replication set contains one Region.
\n
\nRecommended Action
\nAdd at least one more Region to the replication set.
\n
\nAdditional Resources
\nFor more information, see Cross-region Incident management.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Multi-region", + "Replication Set", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "cIdfp1js9r", + "timestamp": "2023-11-27T12:22:31Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "7qGXsKIUw": { + "metadata": { + "id": "7qGXsKIUw", + "name": "ELB Connection Draining", + "description": "Checks for load balancers that do not have connection draining enabled. When connection draining is not enabled and you remove (deregister) an Amazon EC2 instance from a load balancer, the load balancer stops routing traffic to that instance and closes the connection. When connection draining is enabled, the load balancer stops sending new requests to the deregistered instance but keeps the connection open to serve active requests.

\n

Alert Criteria


\nYellow: Connection draining is not enabled for a load balancer.

\n

Recommended Action


\nEnable connection draining for the load balancer. For more information, see Connection Draining and Enable or Disable Connection Draining for Your Load Balancer.

\n

Additional Resources


\nElastic Load Balancing Concepts", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Load Balancer Name", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "7qGXsKIUw", + "timestamp": "2023-11-22T00:09:38Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 18, + "resourcesFlagged": 18, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "CC5SImTt1S_HgLZnKa7Auu4BfEAa8m8I8SENTcHouGM", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "a240b947ec5a54f96ad145a84f466e14", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "HJ_Zv6jOcDOtH8GgcgD_ijIJGILoKXlVhV9xG3RCSJE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "ae0193540897846c0aaada8f80840886", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "U64S-CpMVz1aKvPjeC9oB4uQx5vqv7Xib7O-k7M60F0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "a204904c846d7485282f1b896d0f9ffd", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "cEnb09RxuWyG3nTUj1Ivw54PxKDCLYxrFULPSvDkfeI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "ad195e378b7424805b1265cd886ced70", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "hlWAUjclBz1M2EkmtRwZ34-zrb816nOAqEgRC6XX7rA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "a70f4528b2c3e47e0af6864d5707078b", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "j4yki1we0AuFND7-AHzUuaPZ8VCjHHX9iLao7kJ9Dw0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "a9ac699e5fd054714816d0ebe7ea5bb6", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "pQ0cfLs6bLOyUiNWtOV3UovTeFbUb4BcVfmpQU54-d0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "a6f69a1d99a574e46ae62b0a5c7147e6", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "pnNZX9iiwqP2Rneh2htIwH2kyL6iYvSwSeinNGcNvLM", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "aa49f35e892ce4f9aab17775fc982afd", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "voqRkWiblzhKmmRNYRozZgNFK7bQnRby2t1O1k6eT0w", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "a8fb58d28368646c9a00f356379b28ff", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "6BFrYIRNJ5BQ7ONbYVh5TWXBWL59ZUNb8c2xNyaalZc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a3264560fd1c141809263bc702080f05", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7QAmlKuahQGeS41cCZcyffh7IbDYzdbCfiFa--6kgP0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a6d814b9b5ac44ad29b2af2a76f96d4d", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "DviuBWf6nHD9z__wi56GftO1HWqW7q7CWd0YzC9_Y6I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a644ed01d193e4549a874e7e5a0eabe7", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "G_TogNnpVFpg_Ps-AoL_V1_89mGCkfZhslKLZwcBKpU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a23e595fab3334f50994f255529fb7d0", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Kv4pKUKswleOvNWnCR3J2UA-TQdtX8vBSVqLiRBns_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a27abbe72757b46d0b11857a6e9887a3", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "UEaCC9GFIbjASL2Q--3EivpdlG2rD_lGPXDJwfkF_YQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "aec8c7ebf2eb149909978c8179bb82ca", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "anCQFp6vlD1h7GQ5WjIaAK7Hfp121RKp7DpIikdeoPA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a559ef1ae4b234f99985aae08493ea30", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sk_NYnJc3xTh-6tbVbCan_kiVoerzl9uddlV372LauE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "af74f1f143f534387bd5a9ef8d0e3650", + "Yellow", + "Connection draining is not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yPbtNYfa4aLnpKnYY3By3GSTq3xdVf63q-IPUDXo2lg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a4c60e1ef3747463bbfc7c3cca8762c2", + "Yellow", + "Connection draining is not enabled" + ] + } + ] + } + }, + "c1qf5bt013": { + "metadata": { + "id": "c1qf5bt013", + "name": "Amazon RDS DB instances have storage autoscaling turned off", + "description": "Amazon RDS storage autoscaling isn't turned on for your DB instance. When there is an increase in the database workload, RDS Storage autoscaling automatically scales the storage capacity with zero downtime.
\n
\n

Alert Criteria


\nRed: DB instances don't have storage autoscaling turned on
\n
\n

Recommended Action


\nTurn on Amazon RDS storage autoscaling with a specified maximum storage threshold
\n
\n

Additional Resources



Amazon RDS storage autoscaling automatically scales storage capacity with zero downtime when the database workload increases. Storage autoscaling monitors the storage usage and automatically scales up the capacity when the usage is close to the provisioned storage capacity. You can specify a maximum limit on the storage that Amazon RDS can allocate to the DB instance. There is no additional cost for storage autoscaling. You pay only for the Amazon RDS resources that are allocated to your DB instance. We recommend that you turn on RDS storage autoscaling.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt013", + "timestamp": "2023-11-27T11:22:33Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Red", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:vchalla-quay-quay-db", + "10", + "mysql", + "2023-11-09T08:20:36.000Z" + ] + } + ] + } + }, + "c1qf5bt011": { + "metadata": { + "id": "c1qf5bt011", + "name": "Amazon RDS DB clusters have one DB instance", + "description": "Add at least another DB instance to the DB cluster, to improve availability and performance.
\n
\n

Alert Criteria


\nYellow: DB clusters have only one DB instance
\n
\n

Recommended Action


\nAdd a reader DB instance to the DB cluster
\n
\n

Additional Resources



In the current configuration, one DB instance is used for both read and write operations. You can add another DB instance to allow read redistribution and a failover option.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Db Instance Class", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt011", + "timestamp": "2023-11-27T12:22:34Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt018": { + "metadata": { + "id": "c1qf5bt018", + "name": "Amazon RDS DB clusters with all reader instances in the same Availability Zone", + "description": "Your DB cluster has all the reader instances in the same Availability Zone. We recommend that you distribute the Reader instances across multiple Availability Zones in your DB cluster.
\n
\nDistribution increases the availability of the database, and improves the response time by reducing network latency between clients and the database.
\n
\n

Alert Criteria


\nRed: DB clusters have the reader instances in the same availability zone
\n
\n

Recommended Action


\nDistribute the reader instances across multiple availability zones
\n
\n

Additional Resources



Availability Zones (AZs) are locations that are distinct from each other to provide isolation in case of outages within each AWS Region. We recommend that you distribute the primary instance and reader instances in your DB cluster across multiple AZs to improve the availability of your DB cluster. You can create a Multi-AZ cluster using the AWS Management Console, AWS CLI, or Amazon RDS API when you create the cluster. You can modify the existing Aurora cluster to a Multi-AZ cluster by adding a new reader instance and specifying a different AZ.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt018", + "timestamp": "2023-11-27T12:22:35Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1dfprch05": { + "metadata": { + "id": "c1dfprch05", + "name": "AWS Lambda On Failure Event Destinations", + "description": "Checks that Lambda functions in your account have On Failure event destination or Dead Letter Queue (DLQ) configured for asynchronous invocations, so that records from failed invocations can be routed to a destination for further investigation or processing.
\n
\nAlert Criteria
\nYellow: Function does not have any On Failure event destination or DLQ configured.
\n
\nRecommended Action
\nPlease set up On Failure event destination or DLQ for your lambda functions to send failed invocations along with other details to one of the available destination AWS services for further debugging or processing.
\n
\nAdditional Resources
\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "The function with version which is flagged.", + "Current day async requests dropped percentage.", + "Current day async requests.", + "Average daily async requests dropped percentage.", + "Average daily async requests.", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfprch05", + "timestamp": "2023-11-27T12:22:35Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1dfprch08": { + "metadata": { + "id": "c1dfprch08", + "name": "ALB Multi-AZ", + "description": "Checks whether your Application Load Balancers (ALB) are configured to use more than one Availability Zone (AZ). An AZ is a distinct location that is insulated from failures in other zones. By configuring your load balancer in multiple AZs in the same Region, you can help improve your workload availability.
\n
\n

Alert Criteria


\nYellow: ALB is in a single AZ
\nGreen: Green: ALB has two or more AZs
\n
\n

Recommended Action


\nEnsure that your load balancer is configured with at least two Availability Zones. For more information, see Availability Zones for your Application Load Balancer
\n
\n

Additional Resources


\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "ALB Name", + "ALB ARN", + "Number of AZs", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfprch08", + "status": "not_available" + } + }, + "c1dfprch01": { + "metadata": { + "id": "c1dfprch01", + "name": "Amazon EFS No Mount Target Redundancy", + "description": "Checks if mount targets exist in multiple Availability Zones for an Amazon EFS file system.
\n
\nAlert Criteria
\nYellow: File system has 1 mount target created in a single Availability Zone.
\nGreen: File system has 2 or more mount targets created in multiple Availability Zones.
\n
\nRecommended Action
\nFor EFS file systems using One Zone storage classes, we recommend you create new file systems that use Standard storage classes by restoring a backup to a new file system. Then create mount targets in multiple Availability Zones. For EFS file systems using Standard storage classes, we recommend you create mount targets in multiple Availability Zones.
\n
\nAdditional Resources
\nFor more information, see Managing mount targets using the Amazon EFS console and Amazon EFS Quotas and Limits.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "EFS File System ID", + "Number of Mount Targets", + "Number of AZs", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfprch01", + "timestamp": "2023-11-27T12:22:37Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt019": { + "metadata": { + "id": "c1qf5bt019", + "name": "Amazon RDS DB instances not using Multi-AZ deployment", + "description": "We recommend that you use Multi-AZ deployment. The Multi-AZ deployments enhance the availability and durability of the DB instance. Click Info for more details about Multi-AZ deployment and pricing.
\n
\n

Alert Criteria


\nYellow: DB instances aren't using Multi-AZ deployment
\n
\n

Recommended Action


\nSet up Multi-AZ for the impacted DB instances
\n
\n

Additional Resources



In an Amazon RDS Multi-AZ deployment, Amazon RDS automatically creates a primary database instance and replicates the data to an instance in a different availability zone. When it detects a failure, Amazon RDS automatically fails over to a standby instance without manual intervention.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt019", + "timestamp": "2023-11-27T11:22:38Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 2, + "resourcesFlagged": 2, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Yellow", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:vchalla-quay-quay-db", + "mysql", + "2023-11-09T08:20:36.000Z" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Yellow", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:standardization-db", + "postgres", + "2023-11-09T01:51:15.000Z" + ] + } + ] + } + }, + "c1dfprch09": { + "metadata": { + "id": "c1dfprch09", + "name": "NLB Multi-AZ", + "description": "Checks whether your Network Load Balancers (NLB) are configured to use more than one Availability Zone (AZ). An AZ is a distinct location that is insulated from failures in other zones. By configuring your load balancer in multiple AZs in the same Region, you can help improve your workload availability.
\n
\n

Alert Criteria


\nYellow: NLB is in a single AZ
\nGreen: NLB has two or more AZs
\n
\n

Recommended Action


\nEnsure that your load balancer are created with at least two Availability Zones.
\n
\n

Additional Resources


\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Number of AZs", + "NLB Arn", + "NLB Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfprch09", + "timestamp": "2023-11-26T12:22:39Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 25, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "eu-west-1", + "3", + "arn:aws:elasticloadbalancing:eu-west-1:415909267177:loadbalancer/net/aea6cc7027af14169aac07964da04c0a/687164688f5abaf8", + "aea6cc7027af14169aac07964da04c0a", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/a05837105d2f7498797636bd808a6c75/f8c0bbde0f8a6ae3", + "a05837105d2f7498797636bd808a6c75", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/a0c5c91e8a56f472fbe84fddb97c5528/b557e9d9955121fe", + "a0c5c91e8a56f472fbe84fddb97c5528", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/a32635703e6a245e7a242881518e12f5/7fdea6701e39aa6a", + "a32635703e6a245e7a242881518e12f5", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/a335e40984cac4104898246aac989e0d/5080197f2b35de79", + "a335e40984cac4104898246aac989e0d", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/a847ef60c48b046fcaa9d032fced6e41/4e8da368e6d7fcea", + "a847ef60c48b046fcaa9d032fced6e41", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/a9f3174213ec04a18b8a3ca8b0ed3697/5d7ad746b9e0b635", + "a9f3174213ec04a18b8a3ca8b0ed3697", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/aa58ca53ef3cf4f3eac30a387b8f7b9b/220db8bfc32c866d", + "aa58ca53ef3cf4f3eac30a387b8f7b9b", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/ad31cd1ec32c9475289cbb07b799791c/359c061a68aa133d", + "ad31cd1ec32c9475289cbb07b799791c", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/af9b7f0ea5c034ad78c9855b8349e75a/c2e5cee9c4ba6fc7", + "af9b7f0ea5c034ad78c9855b8349e75a", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "3", + "arn:aws:elasticloadbalancing:us-east-2:415909267177:loadbalancer/net/afc94faac98ee49298deca1fcb9f0720/3b5c4075681c7f34", + "afc94faac98ee49298deca1fcb9f0720", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/afcollins-2619-ancoll-5b8gn-ext/210eda6039ee885f", + "afcollins-2619-ancoll-5b8gn-ext", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/afcollins-2619-ancoll-5b8gn-int/7dba022c3ef4f56f", + "afcollins-2619-ancoll-5b8gn-int", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/afcollins-2619-ancoll-ptfqt-ext/501c5a4ef77232ff", + "afcollins-2619-ancoll-ptfqt-ext", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/afcollins-2619-ancoll-ptfqt-int/8848eb3d253aec25", + "afcollins-2619-ancoll-ptfqt-int", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/afcollins-2619-ancoll-xrppt-ext/8f84db7e8537e593", + "afcollins-2619-ancoll-xrppt-ext", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/afcollins-2619-ancoll-xrppt-int/85b514fc99ddf778", + "afcollins-2619-ancoll-xrppt-int", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/cloud-bulldozer-ci-6hwqr-ext/eadca3b00af005e2", + "cloud-bulldozer-ci-6hwqr-ext", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/cloud-bulldozer-ci-6hwqr-int/214d4503a8d72b2e", + "cloud-bulldozer-ci-6hwqr-int", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/play-area-cts6f-ext/63b8ee134fa029f8", + "play-area-cts6f-ext", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/play-area-cts6f-int/d667d915541ecbb0", + "play-area-cts6f-int", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/rsevilla87-haproxy-re-dtrbt-ext/c3be4c0aadc73464", + "rsevilla87-haproxy-re-dtrbt-ext", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/rsevilla87-haproxy-re-dtrbt-int/c47e25a1e89e6994", + "rsevilla87-haproxy-re-dtrbt-int", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/smanda-ocp1-tf7qf-ext/13269f0652ae470c", + "smanda-ocp1-tf7qf-ext", + "2023-11-26T16:48:53.250Z" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-west-2", + "4", + "arn:aws:elasticloadbalancing:us-west-2:415909267177:loadbalancer/net/smanda-ocp1-tf7qf-int/97116444f2252b84", + "smanda-ocp1-tf7qf-int", + "2023-11-26T16:48:53.250Z" + ] + } + ] + } + }, + "c1qf5bt001": { + "metadata": { + "id": "c1qf5bt001", + "name": "Amazon RDS resource Automated backups is turned off", + "description": "Automated backups are disabled on your DB resources. Automated backups enable point-in-time recovery of your DB instance.
\n
\n

Alert Criteria


\nRed: RDS resources don't have Automated backups turned on
\n
\n

Recommended Action


\nTurn on automated backups with a retention period of up to 14 days
\n
\n

Additional Resources



Automated backups enable point-in-time recovery of your DB instances. We recommend turning on automated backups. When you turn on automated backups for a DB instance, Amazon RDS automatically performs a full backup of your data daily during your preferred backup window. The backup captures transaction logs when there are updates to your DB insance. You get backup storage up to the storage size of your DB instance at no additional cost.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt001", + "timestamp": "2023-11-27T11:22:39Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "region": "us-west-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Red", + "us-west-2", + "arn:aws:rds:us-west-2:415909267177:db:vchalla-quay-quay-db", + "7", + "mysql", + "2023-11-09T08:20:36.000Z" + ] + } + ] + } + }, + "S45wrEXrLz": { + "metadata": { + "id": "S45wrEXrLz", + "name": "VPN Tunnel Redundancy", + "description": "Checks the number of tunnels that are active for each of your VPNs. A VPN should have two tunnels configured at all times to provide redundancy in case of outage or planned maintenance of the devices at the AWS endpoint. For some hardware, only one tunnel is active at a time (see the Amazon Virtual Private Cloud Network Administrator Guide). If a VPN has no active tunnels, charges for the VPN might still apply.
\n
\n

Alert Criteria


\nYellow: A VPN has one active tunnel (this is normal for some hardware).
\nYellow: A VPN has no active tunnels.
\n
\n

Recommended Action


\nBe sure that two tunnels are configured for your VPN connection, and that both are active if your hardware supports it. If you no longer need a VPN connection, you can delete it to avoid charges. For more information, see Your Customer Gateway or Deleting a VPN connection.
\n
\n

Additional Resources


\nAmazon Virtual Private Cloud Network Administrator Guide
\nAdding a Hardware Virtual Private Gateway to Your VPC", + "category": "fault_tolerance", + "metadata": [ + "Region", + "VPN ID", + "VPC", + "Virtual Private Gateway", + "Customer Gateway", + "Active Tunnels", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "S45wrEXrLz", + "timestamp": "2023-11-25T04:34:18Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "4g3Nt5M1Th": { + "metadata": { + "id": "4g3Nt5M1Th", + "name": "AWS Direct Connect Virtual Interface Redundancy", + "description": "Checks for virtual private gateways with Direct Connect virtual interfaces (VIFs) that are not configured on at least two Direct Connect connections. Connectivity to your virtual private gateway should have multiple virtual interfaces configured across multiple Direct Connect connections and locations to provide redundancy in case a device or location is unavailable.
\n

Note:

Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.

\n

Alert Criteria


\nYellow: A virtual private gateway has less than two virtual interfaces, or the interfaces are not configured to multiple Direct Connect connections.

\n

Recommended Action


\nConfigure at least two virtual interfaces that are configured to two Direct Connect connections to protect against device or location unavailability. See Create a Virtual Interface.

\n

Additional Resources


\nGetting Started with AWS Direct Connect
\nAWS Direct Connect FAQs \n
\nWorking With AWS Direct Connect Virtual Interfaces", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Timestamp", + "Gateway ID", + "Location for VIF", + "Connection ID for VIF" + ] + }, + "reports": { + "checkId": "4g3Nt5M1Th", + "status": "not_available" + } + }, + "c1dfprch10": { + "metadata": { + "id": "c1dfprch10", + "name": "VPC interface endpoint network interfaces in multiple-AZs", + "description": "Checks whether your AWS PrivateLink VPC interface endpoints are configured to use more than one Availability Zone (AZ). An AZ is a distinct location that is insulated from failures in other zones. This supports inexpensive, low-latency network connectivity between AZs in the same AWS Region. By selecting subnets in multiple AZs when creating your interface endpoint, you can help protect your applications from a single point of failure.NOTE: This check currently includes only interface endpoints
\n
\n

Alert Criteria


\nYellow: VPC endpoint it in a single AZ
\nGreen: VPC endpoint is in at least two AZs
\n
\n

Recommended Action


\nEnsure that your VPC interface endpoint is configured with at least two Availability Zones.
\n
\n

Additional Resources


\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "vpc Endpoint Id", + "Is Multi Az", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfprch10", + "timestamp": "2023-11-26T12:22:41Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 9, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-024bf1e8073d4a442", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-04700d2602b590ae0", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-06c848ae26efa0ee3", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-06cff0f88b379cd9b", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-0a028cef42b8f8b61", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-0b738980a743a4d21", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-0bdcf73d0a8529ccf", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-0d29b43efd4d04078", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "tGgFXj8sRanBcMfKsCWpXxv8mWPcyOE4lJvG1NHkbkk", + "isSuppressed": false, + "metadata": [ + "Green", + "us-east-2", + "vpce-0d58f6496431d73f0", + "Yes", + "2023-11-27T08:18:51.780Z" + ] + } + ] + } + }, + "c1qf5bt007": { + "metadata": { + "id": "c1qf5bt007", + "name": "Amazon RDS DB clusters with all instances in the same Availability Zone", + "description": "The DB clusters are currently in a single Availability Zone. Use multiple Availability Zones to improve the availability.
\n
\n

Alert Criteria


\nYellow: DB clusters have all the instances in the same Availability Zone
\n
\n

Recommended Action


\nAdd the DB instances to multiple Availability Zones in your DB cluster
\n
\n

Additional Resources



We recommend that you add the DB instances to multiple Availability Zones in a DB cluster. Adding DB instances to multiple Availability Zones improve the availability of your DB cluster.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt007", + "timestamp": "2023-11-27T12:22:41Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1t3k8mqv1": { + "metadata": { + "id": "c1t3k8mqv1", + "name": "ActiveMQ Availability Zone Redundancy.", + "description": "Checks that Amazon MQ for ActiveMQ brokers are configured for high availability with an active/standby broker in multiple Availability Zones.
\n
\nAlert Criteria
\nGreen: An Amazon MQ for ActiveMQ broker is configured in at least two Availability Zones.
\nYellow: An Amazon MQ for ActiveMQ broker is configured in a single Availability Zone.
\n
\nRecommended Action
\nCreate a new broker with active/standby deployment mode.
\n
\nAdditional Resources
\nFor more information, see Creating an ActiveMQ broker..", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "ActiveMQ Broker ID", + "Broker Engine Type", + "Deployment Mode", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1t3k8mqv1", + "timestamp": "2023-11-27T12:22:43Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Cjxm268ch1": { + "metadata": { + "id": "Cjxm268ch1", + "name": "Auto Scaling Available IPs in Subnets", + "description": "Checks that sufficient available IPs remain among targeted Subnets. Having sufficient IPs available for use would help when Auto Scaling Group reaches its maximum size and needs to launch additional instances.
\n
\nAlert Criteria
\nRed: The maximum number of instances and IP addresses that could be created by an ASG exceed the number of IP addresses remaining in the configured subnets.
\nGreen: There are sufficient IP addresses available for the remaining scale possible in the ASG.
\n
\nRecommended Action
\nIncrease the number of available IP addresses.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource ARN", + "Maximum Instances that can be created", + "Number of Available Instances" + ] + }, + "reports": { + "checkId": "Cjxm268ch1", + "timestamp": "2023-11-25T23:38:52Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1t3k8mqv2": { + "metadata": { + "id": "c1t3k8mqv2", + "name": "RabbitMQ Availability Zone Redundancy.", + "description": "Checks that Amazon MQ for RabbitMQ brokers are configured for high availability with cluster instances in multiple Availability Zones.
\n
\nAlert Criteria
\nGreen: An Amazon MQ for RabbitMQ broker is configured in multiple Availability Zones.
\nYellow: An Amazon MQ for RabbitMQ broker is configured in a single Availability Zone.
\n
\nRecommended Action
\nCreate a new broker with the cluster deployment mode.
\n
\nAdditional Resources
\nFor more information, see Creating a RabbitMQ broker..", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "RabbitMQ Broker ID", + "Broker Engine Type", + "Deployment Mode", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1t3k8mqv2", + "timestamp": "2023-11-27T12:22:45Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt031": { + "metadata": { + "id": "c1qf5bt031", + "name": "Amazon RDS sync_binlog parameter is turned off", + "description": "The synchronization of the binary log to disk isn't enforced before the transaction commits are acknowledged in your DB instance.
\n
\n
\nWe recommend that you set the sync_binlog parameter value to 1.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have synchronous binary logging turned off
\n
\n

Recommended Action


\nSet the sync_binlog parameter to 1
\n
\n

Additional Resources



The sync_binlog parameter controls how MySQL pushes the binary log to disk.\n\n\nWhen the value of this parameter is set to 1, it turns on binary log synchronization to disk before transactions are committed. When the value of this parameter is set to 0, it turns off the binary log synchronization to the disk.\n\n\nTypically, MySQL server depends on the operating system to push the binary log to disk regularly similar to other files. The sync_binlog parameter value set to 0 can enhance the performance. However, during a power failure or an operating system crash, the server loses all the committed transactions that weren't synchronized to the binary logs.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt031", + "timestamp": "2023-11-27T12:22:46Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt030": { + "metadata": { + "id": "c1qf5bt030", + "name": "Amazon RDS innodb_flush_log_at_trx parameter is turned off", + "description": "The value of the innodb_flush_log_at_trx_commit parameter of your DB instance isn't safe value. This parameter controls the persistence of commit operations to disk.
\n
\n
\nWe recommend that you set the innodb_flush_log_at_trx_commit parameter to 1.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have innodb_flush_log_at_trx_commit turned off
\n
\n

Recommended Action


\nSet the innodb_flush_log_at_trx parameter value to 1
\n
\n

Additional Resources



The database transaction is durable when the log buffer is saved to the durable storage. However, saving to the disk impacts performance. Depending on the value set for innodb_flush_log_at_trx_commit parameter, the behavior of how logs are written and saved to the disk can vary.\n\n\n1. When the parameter value is 1, the logs are written and saved to the disk after each committed transaction.\n\n\n2. When the parameter value is 0, the logs are written and saved to the disk once per second.\n\n\n3. When the parameter value is 2, the logs are written after each transaction is committed and saved to the disk once per second. The data moves from the InnoDB memory buffer to the operating system's cache which is also in the memory.\n\n\nNote: When the parameter value is not 1, InnoDB doesn't assure ACID properties. The recent transactions for the last second may be lost when the database crashes.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt030", + "timestamp": "2023-11-27T12:22:46Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "MDBdfsQ401": { + "metadata": { + "id": "MDBdfsQ401", + "name": "Amazon MemoryDB Multi-AZ clusters", + "description": "Checks for MemoryDB clusters that deploy in a single Availability Zone (AZ). This check alerts you if Multi-AZ is inactive in a cluster.
\n
\nDeployments in multiple AZs enhance MemoryDB cluster availability by asynchronously replicating to read-only replicas in a different AZ. When planned cluster maintenance occurs, or a primary node is unavailable, MemoryDB automatically promotes a replica to primary. This failover allows cluster write operations to resume, and doesn't require an administrator to intervene.
\n
\n

Alert Criteria


\nGreen: Multi-AZ is active in the cluster.
\nYellow: Multi-AZ is inactive in the cluster.
\n
\n

Recommended Action

\n
Create at least one replica per shard, in an AZ that is different than the primary.
\n
\nAdditional Information
\nFor more information, see Minimizing downtime in MemoryDB with Multi-AZ.\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Cluster Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "MDBdfsQ401", + "timestamp": "2023-11-27T12:22:47Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt036": { + "metadata": { + "id": "c1qf5bt036", + "name": "Amazon RDS innodb_default_row_format parameter setting is unsafe", + "description": "Your DB instance encounters a known issue: A table created in a MySQL version lower than 8.0.26 with the row_format set to COMPACT or REDUNDANT will be inaccessible and unrecoverable when the index exceeds 767 bytes.
\n
\n
\nWe recommend that you set the innodb_default_row_format parameter value to DYNAMIC.
\n
\n

Alert Criteria


\nRed: DB parameter groups have an unsafe setting for the innodb_default_row_format parameter
\n
\n

Recommended Action


\nSet the innodb_default_row_format parameter to DYNAMIC
\n
\n

Additional Resources



When a table is created with MySQL version lower than 8.0.26 with row_format COMPACT or REDUNDANT, creating indexes with a key prefix shorter than 767 bytes isn't enforced. After the database restarts, these tables can't be accessed or recovered.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt036", + "timestamp": "2023-11-27T12:22:47Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt035": { + "metadata": { + "id": "c1qf5bt035", + "name": "Amazon RDS Read Replicas are open in writable mode", + "description": "Your DB instance has a read replica in writable mode, which allows updates from clients.
\n
\n
\nWe recommend that you set the the read_only parameter to TrueIfReplica so that the read replicas isn't in writable mode.
\n
\n

Alert Criteria


\nYellow: DB parameter groups turn on writable mode for the read replicas
\n
\n

Recommended Action


\nSet the read_only parameter value to TrueIfReplica
\n
\n

Additional Resources



The read_only parameter controls the write permission from the clients to a database instance. The default value for this parameter is TrueIfReplica. For a replica instance, TrueIfReplica sets the read_only value to ON (1) and disables any write activity from the clients. For a master/writer instance, TrueIfReplica sets the value to OFF (0) and enables the write activity from the clients for the instance.\n\n\nWhen the read replica is opened in writable mode, the data stored in this instance may diverge from the primary instance which causes replication errors.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt035", + "timestamp": "2023-11-27T12:22:47Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt034": { + "metadata": { + "id": "c1qf5bt034", + "name": "Amazon RDS max_user_connections parameter is low", + "description": "Your DB instance has a low value for the maximum number of simultaneous connections for each database account.
\n
\n
\nWe recommend setting the max_user_connections parameter to a number greater than 5.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have max_user_connections misconfigured
\n
\n

Recommended Action


\nIncrease the value of the max_user_connections parameter to a number greater than 5
\n
\n

Additional Resources



The max_user_connections setting controls the maximum number of simultaneous connections allowed for a MySQL user account. Reaching this connection limit cause failures in the RDS instance administration operations, such as backup, patching, and parameters changes.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt034", + "timestamp": "2023-11-27T12:22:48Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt023": { + "metadata": { + "id": "c1qf5bt023", + "name": "Amazon RDS log_output parameter is set to table", + "description": "When log_output is set to TABLE, more storage is used than when log_output is set to FILE. We recommend that you set the parameter to FILE, to avoid reaching the storage size limit.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have log_output parameter set to 'table'
\n
\n

Recommended Action


\nSet the log_output parameter value to FILE in your DB parameter groups
\n
\n

Additional Resources



\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt023", + "timestamp": "2023-11-27T12:22:53Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt026": { + "metadata": { + "id": "c1qf5bt026", + "name": "Amazon RDS synchronous_commit parameter is turned off", + "description": "When synchronous_commit parameter is turned off, data can be lost in a database crash. The durability of the database is at risk.
\n
\n
\nWe recommend that you turn on the synchronous_commit parameter.
\n
\n

Alert Criteria


\nRed: DB parameter groups have synchronous_commit parameter turned off
\n
\n

Recommended Action


\nTurn on synchronous_commit parameter in your DB parameter groups
\n
\n

Additional Resources



The synchronous_commit parameter defines the Write-Ahead Logging (WAL) process completion before the database server sends a successful notification to the client. This commit is called as an asynchronous commit because the client acknowledges the commit before WAL saves the transaction in the disk.\n\n\nIf synchronous_commit parameter is turned off, the transactions can be lost, DB instance durability may be compromised, and data may be lost when a database crashes.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt026", + "timestamp": "2023-11-27T12:22:56Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "b73EEdD790": { + "metadata": { + "id": "b73EEdD790", + "name": "Amazon Route 53 Failover Resource Record Sets", + "description": "Checks for Amazon Route 53 failover resource record sets that are misconfigured. When Amazon Route 53 health checks determine that the primary resource is unhealthy, Amazon Route 53 responds to queries with a secondary, backup resource record set. You must create correctly configured primary and secondary resource record sets for failover to work. Hosted zones created by AWS services won\u2019t appear in your check results.\n
\n
\n

Alert Criteria


\nYellow: A primary failover resource record set does not have a corresponding secondary resource record set.
\nYellow: A secondary failover resource record set does not have a corresponding primary resource record set.
\nYellow: Primary and secondary resource record sets that have the same name are associated with the same health check.\n

\n

Recommended Action


\nIf a failover resource set is missing, create the corresponding resource record set; see Creating Failover Resource Record Sets.
\nIf your resource record sets are associated with the same health check, create separate health checks for each one; see Creating, Updating, and Deleting Health Checks.\n
\n
\n

Additional Information


\nAmazon Route 53 Health Checks and DNS Failover", + "category": "fault_tolerance", + "metadata": [ + "Hosted Zone Name", + "Hosted Zone ID", + "Resource Record Set Name", + "Resource Record Set Type", + "Reason" + ] + }, + "reports": { + "checkId": "b73EEdD790", + "timestamp": "2023-11-21T11:22:44Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "L4dfs2Q4C6": { + "metadata": { + "id": "L4dfs2Q4C6", + "name": "AWS Lambda VPC-enabled Functions without Multi-AZ Redundancy", + "description": "Checks for VPC-enabled Lambda functions that are vulnerable to service interruption in a single availability zone. It is recommended for VPC-enabled functions to be connected to multiple availability zones for high availability.
\n

Note:

Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.
\n
\n

Alert Criteria


\nYellow: A VPC-enabled Lambda function connected to subnets in a single Availability Zone.
\n
\n

Recommended Action


\nWhen configuring functions for access to your VPC, choose subnets in multiple Availability Zones to ensure high availability.
\n
\n

Additional Resources


\nConfiguring a Lambda function to access resources in a VPC
\nResilience in AWS Lambda
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Function ARN", + "VPC ID", + "Average Daily Invokes", + "Last Refresh Time" + ] + }, + "reports": { + "checkId": "L4dfs2Q4C6", + "timestamp": "2023-11-27T12:22:58Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "xuy7H1avtl": { + "metadata": { + "id": "xuy7H1avtl", + "name": "Amazon Aurora DB Instance Accessibility", + "description": "Checks for cases where an Amazon Aurora DB cluster has both private and public instances. When your primary instance fails, a replica can be promoted to a primary instance. If that replica is private, users who have only public access would no longer be able to connect to the database after failover. It's best practice for all the DB instances in a cluster to have the same accessibility.

\n

Alert Criteria


\nYellow: The instances in an Aurora DB cluster have different accessibility (a mix of public and private).

\n

Recommended Action


\nModify the

Publicly Accessible

setting of the instances in the DB cluster so that they are all either public or private. For details, see the instructions for MySQL instances at Modifying a DB Instance Running the MySQL Database Engine.

\n

Additional Resources


\nFault Tolerance for an Aurora DB Cluster", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Cluster", + "Public DB Instances", + "Private DB Instances", + "Reason" + ] + }, + "reports": { + "checkId": "xuy7H1avtl", + "timestamp": "2023-11-25T16:44:40Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "RH23stmM01": { + "metadata": { + "id": "RH23stmM01", + "name": "AWS Resilience Hub resilience scores", + "description": "Checks if you have run an assessment for your applications in Resilience Hub. This check alerts you if your resilience scores are below a specific value. Results for this check are automatically refreshed once every day.
\n
\nAlert Criteria
\nGreen: Your application has a resilience score of 70 or greater.
\nYellow: Your application has a resilience score of 40 through 69.
\nYellow: The application hasn't been assessed yet.
\nRed: Your application has a resilience score of less than 40.
\n
\nRecommended Action
\nSign in to the Resilience Hub console and run an assessment for your application. Review\n the recommendations to improve the resilience score.
\n
\nAdditional Information
\nResilience Hub concepts\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region/AZ", + "Application Name", + "Application Resilience Score", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "RH23stmM01", + "timestamp": "2023-11-27T12:23:03Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "RH23stmM02": { + "metadata": { + "id": "RH23stmM02", + "name": "AWS Resilience Hub policy breached", + "description": "Checks Resilience Hub for applications that don't meet the recovery time objective (RTO) and \nrecovery point objective (RPO) that the policy defines. The check alerts you if your application \ndoesn't meet the RTO and RPO objectives you've set for an application in Resilience Hub.
\n
\nAlert Criteria
\nGreen: The application has a policy and meets the RTO and RPO objectives.
\nYellow: The application hasn't been assessed yet.
\nRed: The application has a policy but doesn't meet the RTO and RPO objectives.
\n
\nRecommended Action
\nSign in to the Resilience Hub console and review the recommendations, so that your \napplication meets the RTO and RPO objectives.
\n
\nAdditional Information
\nResilience Hub concepts\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region/AZ", + "Application Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "RH23stmM02", + "timestamp": "2023-11-27T12:23:03Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "RH23stmM03": { + "metadata": { + "id": "RH23stmM03", + "name": "AWS Resilience Hub assessment age", + "description": "Checks how long since you last ran an application assessment. This check alerts you if you haven\u2019t run an application assessment for a specified number of days.
\n
\nAlert Criteria
\nGreen: Your application assessment ran in the last 30 days.
\nYellow: Your application assessment hasn't run in the last 30 days.
\n
\nRecommended Action
\nSign in to the Resilience Hub console and run an assessment for your application.
\n
\nAdditional Resources
\nResilience Hub concepts", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Application Name", + "Days Since the Last Assessment Ran", + "Last Assessment Run Time", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "RH23stmM03", + "timestamp": "2023-11-27T12:23:03Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "wuy7G1zxql": { + "metadata": { + "id": "wuy7G1zxql", + "name": "Amazon EC2 Availability Zone Balance", + "description": "Checks the distribution of Amazon Elastic Compute Cloud (Amazon EC2) instances across Availability Zones in a region. Availability Zones are distinct locations that are designed to be insulated from failures in other Availability Zones and to provide inexpensive, low-latency network connectivity to other Availability Zones in the same region. By launching instances in multiple Availability Zones in the same region, you can help protect your applications from a single point of failure.
\n
\n

Alert Criteria


\nYellow: The region has instances in multiple zones, but the distribution is uneven (the difference between the highest and lowest instance counts in utilized Availability Zones is greater than 20%).
\nRed: The region has instances only in a single Availability Zone.
\n
\n

Recommended Action


\nBalance your Amazon EC2 instances evenly across multiple Availability Zones. You can do this by launching instances manually or by using Auto Scaling to do it automatically. For more information, see Launch Your Instance and Load Balance Your Auto Scaling Group.
\n
\n

Additional Resources


\nAuto Scaling Getting Started Guide
\nAuto Scaling Developer Guide", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Instances in Zone a", + "Instances in Zone b", + "Instances in Zone c", + "Instances in Zone d", + "Instances in Zone e", + "Instances in Zone f", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "wuy7G1zxql", + "timestamp": "2023-11-24T23:30:34Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 2, + "resourcesFlagged": 2, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "region": "eu-west-1", + "resourceId": "_ewtwW7XGBdWU7MSJk1Tw41VAhuu8_gVqCzoBdmtZdQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "0", + "1", + "0", + "0", + "0", + "0", + "Red", + "Single AZ" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "gZXUrz1qaIodvfkdebx9xQxxSLhQa3xsSA4ZCP_7cHk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "50", + "6", + "46", + "41", + "0", + "0", + "Yellow", + "Uneven distribution" + ] + } + ] + } + }, + "8CNsSllI5v": { + "metadata": { + "id": "8CNsSllI5v", + "name": "Auto Scaling Group Resources", + "description": "Checks the availability of resources associated with launch configurations and your Auto Scaling groups. Auto Scaling groups that point to unavailable resources cannot launch new Amazon Elastic Compute Cloud (Amazon EC2) instances. When properly configured, Auto Scaling causes the number of Amazon EC2 instances to increase seamlessly during demand spikes and decrease automatically during demand lulls. Auto Scaling groups and launch configurations that point to unavailable resources do not operate as intended.
\n
\n

Alert Criteria


\nRed: An Auto Scaling group is associated with a deleted load balancer.
\nRed: A launch configuration is associated with a deleted Amazon Machine Image (AMI).
\n
\n

Recommended Action


\nIf the load balancer has been deleted, either create a new load balancer or target group then associate it to the Auto Scaling group, or create a new Auto Scaling group without the load balancer. For information about creating a new Auto Scaling group with a new load balancer, see Set Up an Auto-Scaled and Load-Balanced Application. For information about creating a new Auto Scaling group without a load balancer, see \"Create Auto Scaling Group\" in Getting Started With Auto Scaling Using the Console.
\nIf the AMI has been deleted, create a new launch template or launch template version using a valid AMI and associate it with an Auto Scaling group. See \"Create Launch Configuration\" in Getting Started With Auto Scaling Using the Console.
\n
\n

Additional Resources


\nTroubleshooting Auto Scaling: Amazon EC2 AMIs
\nTroubleshooting Auto Scaling: Load Balancer Configuration
\nAuto Scaling Developer Guide", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Auto Scaling Group Name", + "Launch Configuration Name", + "Launch Type", + "Launch Name", + "Resource Type", + "Resource Name", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "8CNsSllI5v", + "timestamp": "2023-11-23T03:07:24Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "BueAdJ7NrP": { + "metadata": { + "id": "BueAdJ7NrP", + "name": "Amazon S3 Bucket Logging", + "description": "Checks the logging configuration of Amazon Simple Storage Service (Amazon S3) buckets. When server access logging is enabled, detailed access logs are delivered hourly to a bucket that you choose. An access log record contains details about each request, such as the request type, the resources specified in the request, and the time and date the request was processed. By default, bucket logging is not enabled; you should enable logging if you want to perform security audits or learn more about users and usage patterns.

\nWhen logging is initially enabled, the configuration is automatically validated; however, future modifications can result in logging failures. This check examines explicit Amazon S3 bucket permissions, but it does not examine associated bucket policies that might override the bucket permissions.
\n
\n

Alert Criteria


\nYellow: The bucket does not have server access logging enabled.
\nYellow: The target bucket permissions do not include the root account, so Trusted Advisor cannot check it.
\nRed: The target bucket does not exist.
\nRed: The target bucket and the source bucket have different owners.
\nRed: The log deliverer does not have write permissions for the target bucket.
\n
\n

Recommended Action


\nEnable bucket logging for most buckets. See Enabling Logging Using the Console and Enabling Logging Programmatically.
\nIf the target bucket permissions do not include the root account and you want Trusted Advisor to check the logging status, add the root account as a grantee. See Editing Bucket Permissions.
\nIf the target bucket does not exist, select an existing bucket as a target or create a new one and select it. See Managing Bucket Logging.
\nIf the target and source have different owners, change the target bucket to one that has the same owner as the source bucket. See Managing Bucket Logging.
\nIf the log deliverer does not have write permissions for the target (Write not enabled), grant Upload/Delete permissions to the Log Delivery group. See Editing Bucket Permissions.\n
\n
\n

Additional Resources


\nWorking with Buckets
\nServer Access Logging
\nServer Access Log Format
\nDeleting Log Files", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Bucket Name", + "Target Name", + "Target Exists", + "Same Owner", + "Write Enabled", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "BueAdJ7NrP", + "timestamp": "2023-11-24T07:42:35Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 218, + "resourcesFlagged": 218, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "SdSzOb9M9TW0Uj4ewM_SChP9ayKMeB5J9hRtGvz7WG4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "27h8qk4nh4caip52q9u66alh55muubud-image-registry-eu-west-1-gkix", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "QTqiB683QoAztxne9Twlf5XFBW3DmqgylnUSTtcaqRI", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "cloudability-prod", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "1qy4XM9ci7ZwGjS9_9sx2hCHInLmv9hJMyL6j-1LmB4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls8dj8t6seguk00egivtbulmfblpud-image-registry-us-east-2-tdeh", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "311sQlxb001B2J_sUZBSvZko8yVynJsu_ujFtYFE6MY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "chktag-8cb-oidc-u9c2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "EexcYgiHELTCDRQelRMg_dtIGyS0ePgy1uJDieM_AwA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls91qsiqghj0nnph9l7m4tc8qeqjjh-image-registry-us-east-2-fekd", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "IiYkcB3gixbMszG_H6EUkJTXq4dpQrMMTMvMu06mWs8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls8o69530l22lf8pto8vvn7p9lo3r5-image-registry-us-east-2-loao", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "LgnP8PB9ea2YKCjcqVECramijS6950ZWtjc4hrdBBIo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9hp4929lvu3orfskc3up0msfks8g-image-registry-us-east-2-nwjw", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "TM5eDekw50ryWF7nAlqK4i_Qi8wEz1ZRby8swi9EVJ4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls8t2g033igd6mgjeildda9ejn3ufp-image-registry-us-east-2-mvxu", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "ZD5IdhIeD1xUaMFGlPJBssmHgAWklR3wggmtcdSmZ9Y", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9rt40viaro8s0okpu9qhqq02841f-image-registry-us-east-2-vtdj", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "gUPh35dKC9AMLpur28r58g0vHkvvD8SwiQrvJ9oL5kA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls96qkglvfadaooe0rvefanpj1mc1u-image-registry-us-east-2-iqgn", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "sA5LJagyKG1OHDnqhOy5P0GZoc6eWdW27q88IXWGSOQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "chktag-njc-oidc-m8j9", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "xYIDn-DQ5lUXfBmZknzk0s3-ZleWnaBcWCKfu7KO0ig", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9c3h6uok27vttonht7itbg6j0bp4-image-registry-us-east-2-wvqt", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "xx0tY-Cb9b5ZZ2NQgs6T694MzppQZNJpiuhP4eSOZ1E", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "27ls9moffkk6ueg2nf7c56jphqm0j7r2-image-registry-us-east-2-cqpu", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-1", + "resourceId": "OhHLYfBuUELz0Zcx7nhoGwXz_dqS__rI06C4r19_mBI", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "cf-templates-1lim0y8ue8igw-us-west-1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "-4WBHCCO9FpD7H8D6hNtsClxrHyPLk44Iyh_W_zUpG4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "4-8-aws-ovn-qwz4s-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1cXLmSqer4cqxC2nSXalUcb7p19bnupmEZrs4OnNPug", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "cloud-bulldozer-ci-6hwqr-oidc", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1spdAFwgjxLcy2Ib2FC9fCqAwcYpej-0cWPRIprIfNc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2619-ancoll-ptfqt-image-registry-us-west-2-upoikoeft", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "32a1-aS2W3Sv9Np-V2zPXFllQKkzUF_ze6iyVEhwYis", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2619-ancoll-5b8gn-image-registry-us-west-2-ualugvovx", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5V0ZpmN1IzNtK3-W7Hm8GEYqvrbjHJ_jRrRgNzkUU3Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2619-ancoll-xrppt-image-registry-us-west-2-ricewsmdm", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "9VZuCn1ucbR53EWd9AmIA8DSDSt4UQP4Yy9_95ji7eI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "dry-oidc-z0i1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BRo88lRjYmLCW7ODolvPZDuf1X2pt-0WmdCyxH0qG6A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "cloud-bulldozer-ci-6hwqr-image-registry-us-west-2-grohilnqkulf", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "C_bO6_rim-q4qtuBSQLyqP5fAio_wIB92yHwcUlw0dw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "1v8oivnenj18te68g4a4321jhqn44e87", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kJCAJV1hEueEXZ7rbEuMdkK2NOiswmwbFdqGvaKG2cM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "cilium-97cm8-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qdEyOsKiHTYM_rZLlKdPsxtJVMmXw85NLrKoNO2BkcE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2273-c-d-v2-2ph95-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tiQ_riDcyT_PrkXcshqQvi_sr6jKE4wAKKm0dOFjTWU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "afcollins-2273-c-d-v2-jd4fn-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "ca-central-1", + "resourceId": "AfZYfpmk5xl0U0pL9NjC1cBwtmC6IOjtSeLOMTMVwQU", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "hypers", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-central-1", + "resourceId": "2YId7iQt_A0R3Y9WpO_KbWFO-N3EPVqSBDrMFCXX3Xw", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "eucn1-9rf-oidc-h7p7", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-central-1", + "resourceId": "ZQ7HLYX4CSU14Q21gEYj0jlla1Kgj49dCpy2oMSpI6M", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "eucn1-px3-oidc-b8t2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "5am2g24sm9a2iz95421Upu08YOcjpC4eE_q-wSnuixU", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-2a1-oidc-i4o8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "7JBSazGKGrTrysVvzAV1WkjqNAspwznC6S4DsUYjduc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-wgp-oidc-u9p2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "EKnE0-KrlnCU8Io4PPoBIMOZ_rXwPK4VZF1kYwWew-4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-d3h-oidc-a6j3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "GaaOY1QpsO-Xgg5qDGrGbY0zjjEpLvG2zuE8f1h2nJw", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwest-ilk-oidc-c4z6", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "XK96_sgYLINHY70Qj49LFdLoYnrDkxcR0dCNQ9Y0c50", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-m5z-oidc-v3i8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "duEvAcsZo6le_fRYFXydtmWAYcyl5UERIBNSeXH2-6M", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-dw3-oidc-s4u2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "gQWHPQdJYoL1xKGTtrP_sCkx_IlYVqOZSccqUKICROE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwest-ugl-oidc-a0z3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "oyR-1xJhInUe6QfdVre1Bn9FqqnJKgDIDgXj5lJoQe0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwest-2ai-oidc-k9i9", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "wTy2y3UzjTVNTLmKHDcMZfy0FH5OvMEvCy6JrDpXm-U", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "euwst1-n8p-oidc-f8s3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "8rgIOyHi1pPgzTW6IE4tVlw5zPP5aEXnqqhabeGYpSA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "dry-pd98p-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "PmfHD6tANI9ByrEIECpOS6CNA8nA4mX2gKApSyqUHCY", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "kprod-dds-oidc-q6v0", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "b8GO802RO0_VEu7pfEhzuoahli_U9knzYVMqwWo5nAg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "king-m9n-oidc-k5u1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fT06l5XhdHEdkRt2GmWsdpR5daOxmzvtc2SZ2lno-Rs", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krvoor-wxd-oidc-d5g7", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fk_yu7pfjhyOEzbCjI4jUHIDaPpKFaRZlxnNByzByJI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krvoor-jll-oidc-e6y0", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "yGX74PTlku4QfxjQ2SqR0fFQW0gDat50xjNGCHi4a14", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "kruize-2e8-oidc-y5p7", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "2-E85-Dnvs1IcXjK5lc70-rbZ2-UmNffBhUYwEAX5qI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "gavin-stackrox-4-7-aw-l96s7-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5xpQ8utIzsLi-scSQt-I6uwd0yaWN1SX5wPNg1yMSxc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "gavin-stackrox-4-7-aw-wws7x-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "JKodJOvVnps8LHCn_jfeOwOA-LP7MYAL7rkzfVBZWtY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "kprod-mv9-oidc-i6e2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "e7qRfhRD5LYEeDM6DJ17FNPCjC6nlF1Ewzsdlnnc5DQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "kprod-xmj-oidc-n7g0", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "lLBKxE23GF-A0pPzMJaWlx3PUMZ7dL0ybgXkaOkTbtg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "euwest-agf-oidc-w6x8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "wFjpTzzg_bdmPiMOK7pY14XcUqEGdD6VdXFKdwShMoE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "foo-oidc-r4y6", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yzfwY2NcKq_to2lp7MvVDU-GqFOS7hlWr6wisdZ8TWo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "euwest-ijx-oidc-u9e6", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "5Tb_FUVdDOUGiAIupHPEvn-FcTXgmbXrlKrL0MZ_7us", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krz24-dpt-oidc-o7w0", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fIVbz2Wh_7rwNINyi_uqPtHTDnGepoPVWjkVOmck7LM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "mrnd-f9n-oidc-l1s6", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "maWSRlIfaK5mFZmhXeJWMbwMUZM9ZvLmnudjaWk13J8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "mrnd-cxp-oidc-y8l3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "rgInaGNyxSIM-WXnqFeLaZ0pUox3XFuacynoBkZr5ZU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "krvoor-zho-oidc-x3a2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "3202MYc4xQgtFxAjHc2YCLguql9UUKxDKpiN4XYl8GQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-cdb05009-b68f-471e-956f-15fa3892c753", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5nKICyO1eZWuy42df9-TNTBS2HnSNVKjg6Yz5VvpEHI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-cef71340-5aa9-4314-8e21-0eb66ec2d6c1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BnICVOk3wt5zTqnmbA7hgkaKEUtQs_R1J5T5xFUKnCU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-37d894f1-3beb-40e6-8354-0da16233f53e", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ClfmkDmYzUnWed2p0Ox4ebnqwNBFNsS6sWoJ0A4rLU4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1611591204987.storage.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "J85znpwq8bqFQxfhFzZsxDnB139BOX3LjlUf6l7ho5g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-6d87cd0e-4b23-4405-9fc8-c35fadcdd422", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "K_Jcjuy-M-JaM3HQmF944d8RrbgsGl0rgLCNPhcDZ6s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-ceafc9f9-5fb1-4f0f-8e68-c1e4afca0a26", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Q26QC1AbzrEgt4CI7TzjJoJdiQuyunciJQ0g705OWhk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-ecf47847-6d30-4c83-8478-7c3ce5eb2d09", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "S3dwJof9f6guIa78HGNo2dvmX_j2oxtjarDZ3cGsXNA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-c28ca9fe-9484-44ac-8d34-bad3baaf7d66", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "VQuSGC2kt15k3UGXIKbWkYz4hikNzpVnt7YbDRU1VoQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-edb88afe-ce9b-45a4-989c-8a3c4f14a387", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Vv5E-SD5aLOkdp1VDrEo7ruB-jppjFHPHh-PP85nD0E", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-18883db3-7bf9-4d8b-bfc4-70769d8c2894", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "X7WS3UQ9z6KAhUPTwjLH1dtDzxzvr-TGdHAbJCw-LW4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-e9c72d27-b6f8-4f36-9854-47493bc8b7dc", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Zihic1nhewUFv4vaFTrbfxkQG0IJhjrxM2PkepORLIA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-935e9025-fcd3-4f8b-9fc8-dfa650774d77", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "fSAbW5BxRQk-TcGpvpe2aZJOxqX1Xr8p889XJWCos_8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-732ded30-5427-4bdd-81a2-d2cfa6ff4baf", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "h5HR-dg67MwCsJmf5f2jmiwFX_hZpKVk0vDexstDqhs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-a51f5a90-037e-4b3e-a9b7-70fcfc23f7e3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "j45ILUOaOfr54P2JCCg07Nc24y4r0E-2dNy8YzzJGaM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-265ff78d-33fc-405d-b365-caf4d6bfd109", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "mHiBycKqXFRlep5eXSMbywz-OJfz7Z7z9gbxZUY6Udk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-718901e7-e9d6-45a9-a9c5-ea7f95178184", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nglnrUTHnn71qpvyY4UeQqCzmnJKRYPn-IgvakGM7UY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "loop-test-oidc-y9p1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "oH4d62q02hlWujcLSY0-eVc8mCq3jE4jfw50VzX37rw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-66706d9f-e5af-4ab1-a614-e99516995fb5", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "q5s6sAOWMATcXFutm_7jxIlFi8Ke4wTcbcRsuD92dI4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1610617788602.storage.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "uxnKjxqgWEurSsfMqbbFA0QX17Y1TKk8noqHfkHM1Fc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-1000fdbf-3c9a-4de9-bfc4-8cd3c806466a", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ypBsI750kIQGJLJtciA-9CgnWftXxp0RVITIdw6UlLo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "managed-velero-backups-73d2740c-2460-4ea8-adc2-9af3a3b4f09a", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "-zCUu_VYqUPZKwB4eu2LQgGta0Ol3ZrgeAbdCjFU0KY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1613409309642.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "2UygcmbNz9KH98qL5Qqa864PdsOH_3sS5qL672dtvZU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1614780452723.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Aj5qHvWiZILeOoI9RLWppDuUHaiKgY2N1TH5YAc_kNY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612862265304.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "CFQXNwZT8u0l5uALOTjr_yaLayxHEsnn6ezFexIbt6w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615312877275.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "CmWfCfO_xB_EoA2aQNZxy2Z6R5dCzpuVa1CSNPJFbHQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617023377213.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "E6uS01-JKI5k2XmIl6FXJOoJGm8jNOW9Bd4Q-s-EnyU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616602248363.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "EGGkLaMEy2EYsYIW26KQHbTYzQ2LuBkCSDj_-4a8bEI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616681025069.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FKhXHfCtB97ZT1cphhBxwGjXURpu4q_9cTn19Dt7ipo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617726413639.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "LBdhnQ5tj-KZm5iiqfg0-j7kSjFU72ZpT76Ta9WYZ2k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1614940983222.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NgL76V5SitGnfbgDpXH99GZHkZzfqYH7pC7pPOwOB4U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612165008685.storagev47.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NuvhjWa9PTr-YfY0mqvScctgHarR3F6DTDBj5fy_a5s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612795851782.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QBwWquRBwguHEeJbMJc64YZ-4vh08AS7Hpd2b3LHFuI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1614846281589.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QMXu4j0h7WYK2c8bBZvOL0eqq8423mJIDUB2DWB8BzM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1613403917149.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "RZr2FaYp6ukFcEMj43NwIbdmEh83uZQM_xynMc71Nis", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616659869027.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "hkIYNOr_z4rRx6-vQFWrFlFXj_Sy8E89YzCwAw-oF_I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617374122085.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "j2OwAdxnQd0h2ajmwaF05m43ZMy0BKkYOcCCnr6H8f0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617005003708.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nLrLbsvk681H6TyNAPDQVjbAFnd3j0Hcqk5TgIe6KUU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1612266940462.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nnS5VDcbceSPyuFMYXmUmwugt3UMuQ_vVs6g5qlhRGU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615275000737.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "pzD4DwZvtS0bCoOzZzYHjOpbhpMZDiTeVQP5seHWP7M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617287240483.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "q4ze-c1N6_bledhpmHYTvEfWDZZElqDoelch6nh5KGE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1616410669912.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sO9fQrPdH3sghdYnR8j5jlw0b_LDTDMwQGY021-_liQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615386793629.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "spin_B5LnXT-m8d1cz-RUY4H3qCeD0DyvjIT3dUftbU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617284999484.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "uBFLYfO2DaZSTBqzw6PaQl95cS0WLlawLekw39C9Zw4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1617868448423.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xpaHviha82SD8Hr7YHm2QhMRcpKXKW-AtvzAbO6e54Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1615449577728.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "znPrgHBW_ZvtxNYAwIAO2Jna_9IdnMdZzNzdlN9feqU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1613708362577.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "1Q9OgWHw_i5r3zknMxvRzPm_48Q3nqJBl2eH_pCxgFw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631614706735.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "3PRt9vU8OnXCHPc1mD37-rQIljwnwRmH3xVCD_zQlfQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631542777748.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "4pGBravvURyPVNwQE24NgZAz__bk-P8jdWPbHcTBQLg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1624966471907.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5oulgWdSO0MMV77PE2CiuDtHiWCB9jVT_6LN4U89-8g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1629094543280.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "8MujpxAPcpiUtIjrBBnSOvMauvDKjdovTCDhgvMPzeA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1658976500857.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ED42muyziE4rzKQgxLBa8dE1FoeD6NCrTaReXO_x2oM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631096576858.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GEH4Yx6Ow4Sn0U04mW-ym9Nm2fPyaYBOKZYl-dVJyX4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625055479118.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "KzMCL2I5lan22gkUG8APmlnpayb25ErOV9enRQp6qKs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631277274924.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "L3Y-DnDaHcdM5vnXNZR4PCeBagWv_zVkEILqSr0sfGo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625649692373.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Ma6xWL56F15lDA8-bLCC59shM1q4D6T9sLPanX_lVBg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1646969602043.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "PgtpFByhhstMf1omgzgr-ZMNxuCCFVPYpJntRe9MPLA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1627867596844.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "SWS0cu9m5bAM74huwj5HFVSEJj3L3X5c67c9EiezKTE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625494381580.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Vd5xuP-RWf9Z-nvc7293_3Bu90Ke_P1uckw6LYkZIrE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631615861929.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "WV_Gh18iz0AgqwtOFL_G5zIk0NzgvrObZY6ekStiBjk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1621333000728.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ZmMhECGBFoC2lbleeQE31GY-bJGDPpJVLqX8HvayNRI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1626083843458.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ctbWA_qQrT8OdO-8-pAMzXGDbfeS3A8yIGbMqj0HcX4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1624951725463.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "gtWlDrYbHONjaZ4NltYPJL4HI_qXIBAEV8N40-qLdZw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1625154354601.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "k0n6zivdWi1fkSdW3M_lGEAvvHvmkYGuOFq16CUf8CU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631869813152.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kL6MGd8G2703eXqG9hX8Da8ylZNAMMxRDg-Fw5ivGT8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1654498144641.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "laIDzpOYu0uPwI0VVoOfglgR4UGEwcmhmrbYdTxC5-s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1621339002978.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "luPrZVVB0IY5-oUdB-vIl_lYqIKo2JB1EQGPSITqQjg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1674525013364.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "n8D5Ff5zcRhcBnc6HcBWWRMn1wKAecZ8P3uFKR533mM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1644465822735.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nwyx3K_BafUl2GgolYcoLaQR7ZW5y4DXoAgx_Oep_08", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1674683071318.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "t0PxV4EKldlGuAf-5glova6aLA1TTI83iRQk9hiIXvg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1621937562435.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xPRHdUMwiXuEjwa-KPWvc7oA3zL1D9NUatM-cs-Iq5U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1631758557440.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "0FdOJl-Ebceve9JcqgBRPre4U4uspgA0wnAILCOEsEc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682310610050.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "6dQFW1p42GBMJF5uvTS7mdLaU0CMiARX1-RaGldzevE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682308445878.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "89uoflan-Kl3F8PT9tEHsADHKlAnGe1Tx_QqHF3Vv7o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682313779566.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "AiVG2sHjrbZxrBLnndAoqKbFPyFr9gV3zUeKkMAjgd0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682059141954.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Dt474fMeKrQuRJsJnGIm7KCH-QoNw69MnPjJLoysOYw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682313575081.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ERVl1YJNFs7g0jxgBsoAxBcrY603Vh_-jiXga4F2Wdg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682085309431.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FCl2TmUr41Y6hx8iPVJWmdwwwb68zdpUkV7zedlN1qg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682255249292.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "RrH6e1KIDGe3nlDEOqiLX4S-FJn9BRp2UutHDBXDiUg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1678139206610.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "T6XqB7BpibJd8EzzJh5eSZsjVj3UA3Xq2zf_gBlYJvk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682260756702.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "U8b-HN5ah3s3VDr7kWh6d_IxLOIuDlcn31-OzulzXCQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1678128411285.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ViwVJy1wRxj3M9sX3vetLSgQfe0fSkqAk6EoCzctI0U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1680510016987.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "VxlKsChLCL4aD9WK7sJFvXHelQeOZP9vyIynW5XqJPc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1681320205200.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "_e9ZMHFo6omjw2EXENKP5FjacaYDSjVYtgFeTzyYwBs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1681975792013.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "arF9dQJaEjTNDhDUMp5Z68f5mvZnSu5RopZjwJHO-9s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1677625407859.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "cKOb3YrTi-8luws1VCFpu0CdYdYvrjqo5yDVo3XecXs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682247283139.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "dSXaZGhA87d32I4pbm_rkIJN1HMa733qLqhfz7TIoFw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1679451800362.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "dbforczZblhZjPH0ARZPvKy4LpIv52_H5P4AAYcs2pc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682060000995.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "fJtqC4XOoX-AULDLa7nVSz1uha5qUxkOslobFYx3u9Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682065703069.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "fRmzYqU79zRyWflOk2-g6d-4bdhRYjKSFHyZK3BAw9M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682042601747.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "i7KrECC0B_Gq7D5Sue5V2Gzki9WTVuMJXzIPJv2nNfM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682238312583.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "jvtq8mc1x7y8cYosdga0aJFCOnWmuozGCh3KjKEMTcg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682061576309.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "lhNiTh53g9iD3CqZmG05c-fOgGjI0FGE2GBHBowPm68", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682211520552.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "r-sWMPBOwxawsmy2YSE8F3YxcIK6m1wWiLE-Z9W_GA8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682238816619.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "suOVIlL_X6o6VaYng_UfjlZipAjv7YMmr0OZT6Oln6g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682294428826.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "tqnpLe896O2zC4aozWRdJpw88sshNmY-oi80wHR4veY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1679067630151.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "2oUlhJD0EK39qaLsb-rPzTw68Wm4nqxti9jGTUvOAt4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-03b-oidc-c4v1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "6E5kEvHQ60cvT1e9Gz73o1a8iWnF9vNmw006GMGt-9A", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-s2p-oidc-s1o5", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Ameal5DWksSwPoBuYL77LpX9rlenGbqgYgwbigZlGLU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-749-oidc-g2a8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "IcmU1Z2XB9ydQP7_GjF_GgTUpyHGxl5MUvCKpq54K6E", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-qxr-oidc-t9g8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "J33kFVlAJLo7JjhfS6TgC7jv0063hN0OgJ4g3AhkVes", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-etz-oidc-w1h0", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "MofJG-7EvUO3lHPhOCBDhJfqxwo1oNbZHsc5W78NW78", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-3ed-oidc-b9f6", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "SgeQDcWFsU3pl-jWqYCPjmzGROC3XoORB30R7ZUbZ2k", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-hcp-oidc-x1w5", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "aq4WL8lpwkGvE001U_KDzp_RvQ-MSZvsieB5Aqt994k", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perfsc-lsm-oidc-m0w4", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "gjN5OQi_J0Rfn8NhXoiPi0C4_6513G7aogsAjA5Yy38", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-0d7-oidc-j2i1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "jZV6OhNn_eMEH5OvuG_dCvmuD8aHo4oi1_sevAUJ-CM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "perf-35u-oidc-x2k1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "6exlVFNfmLI3uZuC4MfKlt8qKs3pTdzRFW3sarZnYss", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1684725598844.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7yukdvHGkW2KXhF10LOoOZCOQ87zj1s5K1e6BcmMXGA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1694313646643.play-area.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "8izoY-qkVipIAdgKkWHCZ6fGEoEBR9sEcRTLJxp9Qnc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-airflow-logs", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "IlDPfMVIwyFsSXh6nCPMIhKtb7tH3HJ6HSVbnu0JQls", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682328397165.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "MBCRfcKIabbc6WUHTgUTFsUo7VqJLiQJuzx926FEYlU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1683121094696.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "S--LNpXKbhA963Cm2kE_jy2GFrHyjLwCTwfq7XM9thM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perf-412-5429-aws-rhperfscale-org", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "TGFW5kFem68JZJ76TPuaB5gbDRgojvXY_lMvrNfm-V8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682342385627.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "YixAN3m68hyC8MGemlFQ0Svm8ATpMXdblbSjDgJn5Q4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682380793954.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Zof0IrsFW5ev9BrCWRdtlSrRdVfqhdnHWbF9YilRLFQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682318030429.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "a1HDONpk64LFIdrqeUq5WAY0UM6u1EKYNYi-olGIXqw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-es-prod-backup", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "jwUYh4sxFBHUWbpnwYNaSJHLU-C_qrnk2otRsZ-a2GQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1684738204411.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "n6qVO6mlyfW7FpqdsulRAToppaOPvDIHqt9x9lhtwsI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1694318489008.play-area.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nAZ2_vIPE0JVUqjSnbF4tGMNQIvbEOjie1GDRX3IP4g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682340114273.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qy1rKbYNOBiVg1B8IArKIRaRH6YdiGS-dfZCBGNKXYQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "nb.1682335989254.perfscale.devcluster.openshift.com", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "wyhegEYTyIg452-dQlRlz3nsJ5TwQUMci2BujRmReGA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-es-dev-backup", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "CHHd6DvnP21V0tDzkQIkuAAXycCjLuri_Z_jP6OLaYs", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "redhat-cost-management-bucket-cf7f4bb943359dc9", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "0SZxsZqV_w-96qnvdXct6_88HJ16ZxpFoCtLBnSCdyU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tefrm5-0sk-oidc-t8g9", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "3MfBAvzxBtzzvRsn1UkSxyuE7yZdeV33RU06GykuhxI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-j4g-oidc-s6u5", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "6n_A14klAiltNYE6CTwmOhnomJDUx3yoJw2MJATXapw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-ls8-oidc-g4b0", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Bvpm67E6_ChIcJFHVDQv5u9ZVCrxITg_O7j1OCgZphk", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-war-oidc-q6m7", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "HpQ0mHeikcmzykHJo6DELXPKNitHPXL3_MFxI7fiYPo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "ros24-nx8-oidc-b9u5", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "K_QW94TZ2dbaBsUiLPX96xzVgMC1qXHhovxFQcd0ql0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "ros24-mgv-oidc-p4f4", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "SdZyG1IlucAwhv6jzf_iJz4YwP8XhCTXr_n-cKtfmOI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "upgr-l9k-oidc-v1d8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "eFcFLSst8jTVhxrqTdk6b2vSB2TrSjCR6s4IcRYxgXQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "redhat-cloud-governance-perf-scale", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "fW6M2DfvCogAr-N2V-Jh7A0aDAVZ8OJrImhcmygwMgw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "ros24-zcy-oidc-m5j2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "i-1zgkWNzp-R1O0fxhDnDHyctOtZJlsJzmVK59KoCVQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-rgy-oidc-x1l4", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "m-s1LZKTnv5S-PtYYffcFx5zNQs_MIIqmk32Ap9KzPI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tefrm5-z9v-oidc-p4t3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "oHc4Xq-EUB5FcscMS_957vNyIVkd2ZplqE-uQl3cBfk", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "rbur-yr9-oidc-n1s2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "oZCjpIDxX80SoqImclBDiz1Ae6p30YQMHe0dynXKp1o", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tefrm5-whv-oidc-p4u2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "r_rPhfsYZcaR9qL3t77Wdl7AQXrInT8QxitG1KkTUuc", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "tags-8ka-oidc-z6j1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "3aiCzFV02sYmum4509XYgjkom5xHo0JbPhMVLObrrtY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-thanos", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "9CiWaSZLSyrZMS2XMlCHVUUFuGbZQTs3Jtx2KauS81c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "perfscale-ocp-qe-prod-backup", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "CzvCFImPpFrcc9sIUK_Wnz55jSdezZDB23kfMMzPXFU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rydrew-6-1-ocp-k2hdj-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "JI619SNmzhC-6GtSmk8W5iQ5rmzSHAWvWDSjryb_PI8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "play-area-cts6f-image-registry-us-west-2-xchglmivyahhfoqhewqgw", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "QS73lSm51VUx9StCclozp9T4aTYIcMh0A-mF17p_zJ0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rook-ci-cilium-t8w5l-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "TC6yfnE7m5x1SqDVrshFUaHOddfd6xDBZaSjIK2-vuI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "sai-hypershift", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "YwmcnnMZKoMNKuurOe0v8uf2UAFtyasErgGsm9Hn1X8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "smanda-ocp1-tf7qf-image-registry-us-west-2-udvluotiodolwuvcajf", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "_jMU5AdJGHyR6GuUrwjNfYaCYf_SPubH_9U7ZGxKgHA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rydrew-6-1-ocp-vxbqq-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "cKgvuHJylAZolWzVvAknz8UQl4UDPDxkqz4FU0r6DMM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rsevilla87-haproxy-re-dtrbt-image-registry-us-west-2-ciumwessx", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "lIsR6NlieTlQpVcYE2v9D1eAi5Th6Nm7v8tSjHkeRK8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "rook-cilium-rjjxf-bootstrap", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "7QAGPepxEeVNnFBVI0B7pFw2M-seSpT1tTNQ0-HMb0A", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "uswest-dek-oidc-n4d9", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "1amhu1Sf_ENoFsbvqAsSdfBn7Z6i6XjwSWdpjKarDfQ", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-j5p-oidc-q2h3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "8ubodDylu9IsLXP8aefQKZJCrD-VNWoLI_g541WN63Q", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-g0z-oidc-n5x8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "CaG8oEn-HKy2QGNYzSGKeqcWJ5SN_YH0nbLGEKLZkyI", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "uswest-lsf-oidc-l1k2", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "snrr23Yco-DTLVyA3rphzefZxQZg1u4JqNcDlxI0m9U", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-mpr-oidc-o2b4", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-1", + "resourceId": "ulIZsA7UPIruQuk3CNAEpJy0FVRFtjWJyDiX3TuySS4", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "useast-g00-oidc-f4o3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "3Y4sBz7beMIPiRgsqFr5czu5-gl486DuTPj8Lx8S8ds", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "vkommadi-oidc1", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "FVRjKDK-hwYfbFSthR1UI_f21SsZDRCaDeXnqoSPTQM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "useast-vyv-oidc-m5u5", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "SE7UOJWOCFv0ku1CruGJc4pTeKwuksq0xSz-MKq6EmE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "useast-boe-oidc-w2c7", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-1", + "resourceId": "32sYA6JyG5nuUA6z0jeRijBAqZN9sTUbWCHVdB49UUU", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "uswest-n8p-oidc-g2a3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7-qACustL9RcfYOenc3GT_tFi-oe1IDyB1wUNWJe5MI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-yq6-oidc-m3d6", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7ZR3BL3Yuy8MsYuSxVeATR3ejvb2iz73QsuDkYjVJrQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vzepedam-mc-aws-rhperfscale-org", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "IT7tgv7SZ_Aw1Y4bMPynMJ5Bu08Gz4KOK8UHbochTao", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-2up-oidc-y1i4", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "N8348VyJLu-vKV6Df3QTNrMS6GGXBQMGyK4xxUUZsbs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-pob-oidc-r0h8", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "bhO5yL6T0SZreoUnOHHJDb-ohAGchW7OLKgBfkWLrNE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-rlo-oidc-s6n3", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "j2xIC5b_QE34hwzhI9dfzPsqzsPmkJC38b3M1TtB2nw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-3jm-oidc-k3w6", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "kARvXFuu2PrVBVIJbpmAOPYcB3wJo4BT-BEntKFXX8s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-qq1-oidc-j8i0", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yMWCgIkk0snQg2XT28_8nu8osRqlAzE3SFpO2Sk4UoI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "uswest-x0r-oidc-j5j7", + null, + null, + null, + null, + "Yellow", + "Logging not enabled" + ] + } + ] + } + }, + "Hs4Ma3G270": { + "metadata": { + "id": "Hs4Ma3G270", + "name": "EC2 Auto Scaling groups should use EC2 launch templates", + "description": "Checks if an Amazon EC2 Auto Scaling group is created from an EC2 launch template. This check fails if an Amazon EC2 Auto Scaling group is not created with a launch template or if a launch template is not specified in a mixed instances policy.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: AutoScaling.9
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G270", + "status": "not_available" + } + }, + "iqdCTZKCUp": { + "metadata": { + "id": "iqdCTZKCUp", + "name": "Load Balancer Optimization", + "description": "Checks your load balancer configuration. To help increase the level of fault tolerance in Amazon Elastic Compute Cloud (EC2) when using Elastic Load Balancing, we recommend running an equal number of instances across multiple Availability Zones in a region. A load balancer that is configured accrues charges, so this is a cost-optimization check as well.
\n
\n

Alert Criteria


\nYellow: A load balancer is enabled for a single Availability Zone.
\nYellow: A load balancer is enabled for an Availability Zone that has no active instances.
\nYellow: The Amazon EC2 instances that are registered with a load balancer are unevenly distributed across Availability Zones. (The difference between the highest and lowest instance counts in utilized Availability Zones is more than 1, and the difference is more than 20% of the highest count.)
\n
\n

Recommended Action


\nEnsure that your load balancer points to active and healthy instances in at least two Availability Zones. For more information, see Add Availability Zone.
\nIf your load balancer is configured for an Availability Zone with no healthy instances, or if there is an imbalance of instances across the Availability Zones, determine if all the Availability Zones are necessary. Omit any unnecessary Availability Zones and ensure there is a balanced distribution of instances across the remaining Availability Zones. For more information, see Remove Availability Zone.
\n
\n

Additional Resources


\nAvailability Zones and Regions
\nManaging Load Balancers
\nBest Practices in Evaluating Elastic Load Balancing", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Load Balancer Name", + "# of Zones", + "Instances in Zone a", + "Instances in Zone b", + "Instances in Zone c", + "Instances in Zone d", + "Instances in Zone e", + "Instances in Zone f", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "iqdCTZKCUp", + "timestamp": "2023-11-23T02:30:04Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 11, + "resourcesFlagged": 9, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "6BFrYIRNJ5BQ7ONbYVh5TWXBWL59ZUNb8c2xNyaalZc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a3264560fd1c141809263bc702080f05", + "3", + "1", + "1", + "1", + null, + null, + null, + "Green", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7QAmlKuahQGeS41cCZcyffh7IbDYzdbCfiFa--6kgP0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a6d814b9b5ac44ad29b2af2a76f96d4d", + "0", + null, + null, + null, + null, + null, + null, + "Yellow", + "No active instances" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "DviuBWf6nHD9z__wi56GftO1HWqW7q7CWd0YzC9_Y6I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a644ed01d193e4549a874e7e5a0eabe7", + "3", + "2", + "2", + "2", + null, + null, + null, + "Green", + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "G_TogNnpVFpg_Ps-AoL_V1_89mGCkfZhslKLZwcBKpU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a23e595fab3334f50994f255529fb7d0", + "0", + null, + null, + null, + null, + null, + null, + "Yellow", + "No active instances" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GxmrFK2fj9WZQDEfmKftetIOq5b_j_x7tkSZW8JgRNY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "ab018e0f022534c0e9e21ffcd14f5a0b", + "2", + "0", + "130", + null, + "128", + null, + null, + "Yellow", + "Uneven distribution" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Kv4pKUKswleOvNWnCR3J2UA-TQdtX8vBSVqLiRBns_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a27abbe72757b46d0b11857a6e9887a3", + "0", + null, + null, + null, + null, + null, + null, + "Yellow", + "No active instances" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "UEaCC9GFIbjASL2Q--3EivpdlG2rD_lGPXDJwfkF_YQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "aec8c7ebf2eb149909978c8179bb82ca", + "0", + null, + null, + null, + null, + null, + null, + "Yellow", + "No active instances" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "anCQFp6vlD1h7GQ5WjIaAK7Hfp121RKp7DpIikdeoPA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a559ef1ae4b234f99985aae08493ea30", + "0", + null, + null, + null, + null, + null, + null, + "Yellow", + "No active instances" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sk_NYnJc3xTh-6tbVbCan_kiVoerzl9uddlV372LauE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "af74f1f143f534387bd5a9ef8d0e3650", + "0", + null, + null, + null, + null, + null, + null, + "Yellow", + "No active instances" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yPbtNYfa4aLnpKnYY3By3GSTq3xdVf63q-IPUDXo2lg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a4c60e1ef3747463bbfc7c3cca8762c2", + "0", + null, + null, + null, + null, + null, + null, + "Yellow", + "No active instances" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "zn2nF4BBoIl_Hz-3UEGC1dBmKMKXP6e6hfKgFmzGYAM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a0b8fbc08a4e642fda5006d4fa1de012", + "4", + "32", + "32", + "31", + "30", + null, + null, + "Yellow", + "Uneven distribution" + ] + } + ] + } + }, + "Hs4Ma3G280": { + "metadata": { + "id": "Hs4Ma3G280", + "name": "Application, Network and Gateway Load Balancers should span multiple Availability Zones", + "description": "Checks if an Elastic Load Balancer V2 (Application, Network, or Gateway Load Balancer) has registered instances from multiple Availability Zones. The check fails if an Elastic Load Balancer V2 has instances registered in less than 2 Availability Zones.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: ELB.13
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G280", + "status": "not_available" + } + }, + "Hs4Ma3G281": { + "metadata": { + "id": "Hs4Ma3G281", + "name": "OpenSearch domains should have at least three data nodes.", + "description": "Checks if Amazon OpenSearch Service domains are configured with at least three data nodes and \"zoneAwarenessEnabled\" is true.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: Opensearch.6
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G281", + "status": "not_available" + } + }, + "Hs4Ma3G279": { + "metadata": { + "id": "Hs4Ma3G279", + "name": "Amazon EC2 Auto Scaling group should cover multiple Availability Zones", + "description": "Checks if an Auto Scaling group spans multiple Availability Zones. The check fails if an Auto Scaling group does not span multiple availability zones.
\n
\nSource
\nAWS Security Hub
\nSecurity Hub Control Id: AutoScaling.2
\n
\nAlert Criteria
\nYellow: Medium or Low Security Hub control failed.
\n
\nRecommended Action
\nFollow the Security Hub documentation to fix the issue.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Hs4Ma3G279", + "status": "not_available" + } + }, + "H7IgTzjTYb": { + "metadata": { + "id": "H7IgTzjTYb", + "name": "Amazon EBS Snapshots", + "description": "Checks the age of the snapshots for your Amazon Elastic Block Store (Amazon EBS) volumes (available or in-use). Even though Amazon EBS volumes are replicated, failures can occur. Snapshots are persisted to Amazon Simple Storage Service (Amazon S3) for durable storage and point-in-time recovery.
\n
\n

Alert Criteria


\nYellow: The most recent volume snapshot is between 7 and 30 days old.
\nRed: The most recent volume snapshot is more than 30 days old.
\nRed: The volume does not have a snapshot.
\n
\n

Recommended Action


\nCreate weekly or monthly snapshots of your volumes. For more information, see Creating an Amazon EBS Snapshot.
\n
\n

Additional Resources


\nAmazon Elastic Block Store (Amazon EBS)", + "category": "fault_tolerance", + "metadata": [ + "Region", + "Volume ID", + "Volume Name", + "Snapshot ID", + "Snapshot Name", + "Snapshot Age", + "Volume Attachment", + "Status", + "Reason" + ] + }, + "reports": { + "checkId": "H7IgTzjTYb", + "timestamp": "2023-11-24T23:26:22Z", + "status": "error", + "resourcesSummary": { + "resourcesProcessed": 122, + "resourcesFlagged": 122, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "error", + "region": "us-west-2", + "resourceId": "5S2daKdZgOHBPOceVlzBRSwNZ71-g2pk-BGhvOW43JE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-090071972a9194894", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2c-d4ssn", + null, + null, + null, + "/dev/xvda:i-0da5fdb2044c9c76b", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "5vR37Spyws4HQIdmrMkq4c0dy62ocuRtCUm4gp8l2Vw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-076d93bbb0544f2ef", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-9v4mg", + null, + null, + null, + "/dev/xvda:i-001f82fea70218998", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "7zbZqmEreGZDDQ50VXu7z-RwnRYaEsXvdl2tNYKzglw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-016570e27a1b1ec68", + "afcollins-2619-ancoll-xrppt-worker-us-west-2d-vpxsb", + null, + null, + null, + "/dev/xvda:i-054926dbb12be8c35", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "829YhWrOJ4uZ9wodPHDMN76-ymO76AXvGvs0IqEkxHs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-02ae789596555869c", + "ci-op-gx6iqsmg-6a767-t4qmg-master-0-vol", + null, + null, + null, + "/dev/xvda:i-0c509196d9b58a52f", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Ai-iPhcnxhao8aQFl_-ekM6ybVKtdK2g74comdQSzT8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-04e278c2c51680a3e", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2d-gzfj7", + null, + null, + null, + "/dev/xvda:i-05793d79483cb446d", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "F11ajv_5-IA51IBj0CFdk1u5QRHTfEwokxM3pzNDb94", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0db992b1e14127636", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2d-zhx9f", + null, + null, + null, + "/dev/xvda:i-0107e8e55adc2286f", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "H7yQ3kk1tYoYTKehBPAnH0Kq8MXarSkf0lZP091fp-A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-08dc047e9fe0040fb", + "play-area-cts6f-master-2-vol", + null, + null, + null, + "/dev/xvda:i-06c813b6e447567ab", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "K7DvbpeDWrri0PEGt5QH509iEGSqg9ZZEMT0ZlIgs2U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-09643b9afc7775ab9", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-zpcdw", + null, + null, + null, + "/dev/xvda:i-0be1eeac78726c996", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "MT48CO-ODboE8dW0xgMPiCcWCOB_NVobTCBq6Zo8zeg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0ac941f3354ab6269", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-xwxbd", + null, + null, + null, + "/dev/xvda:i-0fefc3c1345c98cb5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "NjZI-WpM9Nv7zVad-G0CJJTHdMzoL_mbPQdN9vhckmw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-03c9aac8e8c25182c", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-pw9mq", + null, + null, + null, + "/dev/xvda:i-0c750e18195edfa96", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "QuhdOCq52RbLOfNMWcAnX9DMe6fQYwREYeSlAbbUY3Y", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-03f583800d26d4fd3", + "afcollins-2619-ancoll-5b8gn-master-2-vol", + null, + null, + null, + "/dev/xvda:i-02a79d2f52ab58d37", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "S1Zh8JsgeTbjbP1efSs0AffDYplrgVDzw8wJEACzsnI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b0259e21f7134df8", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-nrr6x", + null, + null, + null, + "/dev/xvda:i-0de16ce05b59195b6", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "UPadKXMIKfIgeu9SuJutcXN9No7Gd3yerb663jDyXII", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0a4668889474c33b6", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-4ct69", + null, + null, + null, + "/dev/xvda:i-05adb8efecc0d2b59", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Xv1l7OJCBYYiwXPDcSKb1J-dz6znxqvAa6bmGB780Og", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06a8581a6ccae3f92", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2d-4qn76", + null, + null, + null, + "/dev/xvda:i-06b73d3c955f88254", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "bYi-Th2OcGE0ECuCzhT8FDHDftynFoQN7uZGD-u5EP4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e4fec9bcf869041c", + "cloud-bulldozer-ci-6hwqr-master-2-vol", + null, + null, + null, + "/dev/xvda:i-0b1ffad1faf149443", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "eu3Eazd_B8L09QwUI0NEPnaDxxf1FqkRHkqHrvAJBAU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-01e2e48c90392f5a0", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-pdw6x", + null, + null, + null, + "/dev/xvda:i-04c13c8f4e49cd70c", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "hmdAgngtRjwjrD1iArhs09OYarAec_4QpSjQm8HlQcs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-053df2f00ffe7ed43", + "afcollins-2619-ancoll-xrppt-master-2-vol", + null, + null, + null, + "/dev/xvda:i-0055181de9ee227f9", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "klyTT1iT0X_md8NF3z6-GA6p_Ei3Uvu3EKmib_3cfRw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d7b8465d4bb8ff33", + "play-area-cts6f-dynamic-pvc-3a6d85d8-f43f-416e-b087-d0d7c2489d90", + null, + null, + null, + "/dev/xvdba:i-0a51878faf529e575", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "mlH0oSxZxKaaN7zOnIYpwxgpHfwKleGZN2MuFub41s8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0ca7c92303acbb086", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2d-hc9r9", + null, + null, + null, + "/dev/xvda:i-03c2245b6c3db46ca", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "q1XplUJINU7aQ3HHEAuvg4ZmS1q8tmOH6_WIBe3oJq0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-061443d9da56a542a", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-tvznt", + null, + null, + null, + "/dev/xvda:i-0f271904f2057a3f9", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "q9qiJOdFu52AbDZK2MSS--9EP6B8E3N8zFrhnCKCcxo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0000670ee11f96963", + "play-area-cts6f-worker-us-west-2c-dwgjx", + null, + null, + null, + "/dev/xvda:i-0a51878faf529e575", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "rEzUMVXaQtcQ9HWyTqNfMtGAJgYiB1M_UFz9dmi0PgM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-09cb9bc1171828182", + "afcollins-2619-ancoll-xrppt-worker-us-west-2c-x4d4t", + null, + null, + null, + "/dev/xvda:i-06538879428e3c4e7", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "sax3P8Zrs1SS95XrAfy7Rcm-3cDem5oVrxFS3enhSQA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0af066119e2cda46f", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2d-m7wtm", + null, + null, + null, + "/dev/xvda:i-08f185f3c19f2a41d", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "xSMpMuLrbIGmvXC5zabKXhg8aHqb4jgNXt7qV3RH_90", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-007e22b99e992f685", + "afcollins-2619-ancoll-ptfqt-master-2-vol", + null, + null, + null, + "/dev/xvda:i-0dbd5a85a1e5ce1db", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "zDda0QT3p99dx79RKxvkO2KtFaXrO-pL1nnbK6gig2M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-037b8788467166357", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2d-lknf9", + null, + null, + null, + "/dev/xvda:i-0355d566662543eaa", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "-uYiIQRf3RJJfn42ABDMY6yHBcRRpekktoCGBTZW-gU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0aa3268d11076ecb3", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-2zbzs", + null, + null, + null, + "/dev/xvda:i-008551c29fa43ad71", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "1rxBlwJRtnyAdnsN6rtbbVY4lgSQApvBMiVsUp84CZA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0cabe93a2013c2678", + "ci-op-gx6iqsmg-6a767-t4qmg-master-2-vol", + null, + null, + null, + "/dev/xvda:i-0fdb42183cfd56ab9", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "3KCsHHRSBUxirv4DNqeeKCKydzgpKipT2Lu8_RAPszA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0ad2627dcd97af4c2", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2c-nkhsw", + null, + null, + null, + "/dev/xvda:i-0ce2277e304844920", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "4OkBbf8iOsFi6zHCvvRp2l7ldo_hIEuYxZpqBDOGnt0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0fd013cbcd1905fe3", + "vol-us-west-2-05fe3", + null, + null, + null, + "/dev/sda1:i-04e0c83dc72ff6106", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "4sRmZNop5yevOgduhhXL9eONe9DLWIy13A7eIRDkhKU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0608d00cdb57f8210", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2c-ssfwd", + null, + null, + null, + "/dev/xvda:i-0e521428f675f7fbe", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "5W2BFXIpCuLAXRTkjnoXLzr6qMnczhdeG9A8QNLqEmc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e5d1a5d40cdd8e05", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-22h5h", + null, + null, + null, + "/dev/xvda:i-001ecd96c26b0378d", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9KrstQYw-JfoWZy05QQN0-7GLicwM5EXzFG8Yenyj5c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b528d08df5844af6", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2c-pjffb", + null, + null, + null, + "/dev/xvda:i-030e2ab3828f86757", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9eaPUacIdSdgSRqGOPDBpfB5iWUf7D9x6OvEGtzpgzk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0572ebd3835684ba7", + "rsevilla87-haproxy-re-dtrbt-master-2-vol", + null, + null, + null, + "/dev/xvda:i-067b0abda89b85283", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9xXbeOeyAA8AYB_bvk0OmXmPBs5yL7mtnOIvulGafF0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0eb7161c4de2c1627", + "vol-us-west-2-c1627", + null, + null, + null, + "/dev/sda1:i-08794eca3ffa38335", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "CKIV6bM2GV_DfHI9Oi8W77TisAjc4s8aVRvAgmP-klE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0cd99cdccb965ab97", + "cloud-bulldozer-ci-6hwqr-master-0-vol", + null, + null, + null, + "/dev/xvda:i-0b44140618934ae0f", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "OFJ1CpnFi1L5Vz0S4QWPD3xKsfIH3BzdNOSLF8ciL_c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0be24b099b8cc8d0a", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-7kn2j", + null, + null, + null, + "/dev/xvda:i-070e3e8880284f6d9", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "PsseBWj6Wd3fUMj9Uqgety-Z25jqJ9U1UP3Cnrcnvnk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-079283493869777ed", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-zsm5l", + null, + null, + null, + "/dev/xvda:i-0277909d4845da2fe", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "S64csRZrzzkx9Eqjbk97YXg3fG4Gq1d_q74ngi33FMw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c8c560084e9bec6b", + "cloud-bulldozer-ci-agent-1", + null, + null, + null, + "/dev/sda1:i-0ec26314bbe48be6f", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "T7T0fUgOMNAus4dJvxh6McKyDVZn-jlrdzyYC90B4es", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06dccc42963252006", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-47qx5", + null, + null, + null, + "/dev/xvda:i-07a0aaae3e1079e6b", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Vd1WHuhR7Abd88S2yF2amM17gRQS6BCFxHPsJyzFB34", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-01e045d6ea1d91c61", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-kw59z", + null, + null, + null, + "/dev/xvda:i-0add7358dc6e495e4", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "aDR3qTgsxwAcB-v3ZFAlHPJ7T_laoQvr7135RDJ093k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-086a01c75f1b75ce2", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-cqlhg", + null, + null, + null, + "/dev/xvda:i-0468578f2d73c4ba5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "beAoHDeH_-BbgsCLfF0sCRNv64JX6Wt8EZlro2RNnHE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-024d4ecfc117948fb", + "vol-us-west-2-948fb", + null, + null, + null, + "/dev/sdb:i-07b4cc7cb2d666bf5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "frpdjtIXD4uesf1iuvLymPgD09RVoA9vXdw4UgWirhs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-02932671668b0727c", + "smanda-ocp1-tf7qf-worker-us-west-2c-zt7g6", + null, + null, + null, + "/dev/xvda:i-0ac27522ff69974bd", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "hq8u4v8krZbI2gfOa4MFl2BRAMEBKHNNB9-glAn3tD8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-01203c15cfe899753", + "vol-us-west-2-99753", + null, + null, + null, + "/dev/sda1:i-07b4cc7cb2d666bf5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "kyhVJHNiRHk5sDcKSMRSxQNQPbgCVFFCp1RsChxVrZw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c64c2bba709f3a16", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2c-wzntj", + null, + null, + null, + "/dev/xvda:i-0ef5a15f5d9e918f6", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "mo4YYQQik1CjxrQylOd1-o8WSmn-7IdXt_tbx6aJY8Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e6326769b0c81f36", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-57rkm", + null, + null, + null, + "/dev/xvda:i-08cab8f40d67ff7a1", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "pW9ROBkSFu2kUNmNTvz9k45H5C-f-DkycVJzt_tF9PU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d027a1644d14cb48", + "smanda-ocp1-tf7qf-master-2-vol", + null, + null, + null, + "/dev/xvda:i-0c30af95c49ea4fe7", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "pWIKoprovH9F0Q2cveXpY1Wy6EaHN0HHbjYLfTXMLbM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-074b55b608df560ab", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-bzlqz", + null, + null, + null, + "/dev/xvda:i-0a13d1fd0f1c888b6", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "pZQOpnTsiqMEN_6ho2vOqNLoi7A0ZE0J9NWX0dJOs9I", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0500d9ded7edbb2c3", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-hqvbt", + null, + null, + null, + "/dev/xvda:i-0f7bd75fb9abcde58", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "uIdyscy7qWYxzAwVQ_hEL-Gnrofva465wAQPADVT9XQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0060aed3b00603df7", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2c-c6ffr", + null, + null, + null, + "/dev/xvda:i-0096edb3b76637a45", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "-cQvcz6JIrd2-TMyowXo9fyZrfMMmlf-7Csbb7HEC4s", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00b6cb1dafa5c1d1e", + "play-area-cts6f-worker-us-west-2a-tchxs", + null, + null, + null, + "/dev/xvda:i-043f6bfbec490a5b1", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "0WO_LrpT0myMJKNIarx5ECXy2Ugok5ncOrZx_j1sNjM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b6950ceb7f9cd51e", + "afcollins-2619-ancoll-xrppt-worker-us-west-2a-g7w7c", + null, + null, + null, + "/dev/xvda:i-0ace4e78a80e4f4c3", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "7FDwAlRSyWF7KN3m6ARbzTZ2PNiKab0Z40yiALAJ7ZU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-07cf39411ab4c8dd0", + "play-area-cts6f-master-0-vol", + null, + null, + null, + "/dev/xvda:i-088e4566751497597", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "8rf-eyv3osath8eIPqgR1l_YbhBcNhxXkepQ3uMlfa0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00fb9db94b58bf2c7", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-a9d6e28b-1f8e-406d-b117-4cccd83dde4f", + null, + null, + null, + "/dev/xvdab:i-0b50d180d13e310a5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9bmE-NMNOoG3eDHvfogHXGxGxzjoIRMaizkHcIyPefE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0f7b237c181d001e8", + "play-area-cts6f-dynamic-pvc-512c9d8c-8218-47a2-a403-8c17a8568766", + null, + null, + null, + "/dev/xvdbb:i-043f6bfbec490a5b1", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9lPsMS7NVAA1aHlHKxqM0aIqzueI8P_PapMacAS-_dw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-04b9a5a18bd4f155d", + "afcollins-2619-ancoll-xrppt-worker-us-west-2a-dlfs9", + null, + null, + null, + "/dev/xvda:i-0a34261c544cc7563", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "A7ccLGYKzquH97KlZ9BQ7Dg1ZR7tOF75-pGXjuTON7M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c49f0ad4fbcd296b", + "afcollins-2619-ancoll-5b8gn-master-0-vol", + null, + null, + null, + "/dev/xvda:i-0ae82550529135325", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "HI41A8TaeY25LGFmgPSBBOViJ7DI0Z-EIdM41RDtLZY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0dc446e96eb81c4f6", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2a-kk8c7", + null, + null, + null, + "/dev/xvda:i-04220677ee5a92e03", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "KQnzF9BXbbLCFjCjvuh0_loVcVzExDiPREdvyjEb7k0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b5aa26ab23c5f031", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-6178ee71-3af2-4e36-8ef1-e2ee47553df5", + null, + null, + null, + "/dev/xvdaa:i-0dc60c61ba82aac5c", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "MwV33ZGlHDtuklk6NIEVjjpo5M7Dyj7y_iWY6kMT9Fw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0f1113d45c05df176", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2a-mcb24", + null, + null, + null, + "/dev/xvda:i-0760555e1e958f0eb", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "NSgj1oEsNIx5ZqD-Z9foY8AscgnFZGa-ZPR6h2dEuHw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06ce30bd4439b8f5d", + "infra-us-west-2a-j9zkx", + null, + null, + null, + "/dev/xvda:i-0b50d180d13e310a5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "NajGSv0zsy3ilBTQ-_QEffFM1fYcGXFzn2kkGcBb-z0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-09587a08cb3a8611e", + "vol-us-west-2-8611e", + null, + null, + null, + "/dev/sda1:i-0d1ebf47f5f160926", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "OWZ16dOfUfd6wUjKA25IzqsucBRYvIbYh1mJNk3wR20", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c2c82c11d9960816", + "rsevilla-60816", + null, + null, + null, + "/dev/sda1:i-07ab3be6262d3490c", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "PvV7OjuI9c2Xl35ggozycL0M9pdp1XEGadZEBTE1mGc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b687508e51625f57", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-8a87215f-41e5-4cf4-8544-defa6a1bb924", + null, + null, + null, + "/dev/xvdaa:i-0d5a13bd4b921bcc2", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Uh9jxsrnlGsllqfYSg-i1uLaRiwwv8SjDLCwAVQ89w8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-056a86a2d14bf9193", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2a-ntpqv", + null, + null, + null, + "/dev/xvda:i-0764edbe413d63e6a", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "XOjIUvlKPkG5oV8BlNNVPL1ec5qzew6XMg2JUXJ4CJc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06a6c181ef8eee1c3", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2a-fj4pj", + null, + null, + null, + "/dev/xvda:i-0d29f36f8e4b9b16e", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "YxUSK5RJEElUJfmSAtzGSlIxbkD1yWmtpYPaDFOwRoc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00e923a4772a2b8ca", + "afcollins-2619-ancoll-ptfqt-master-0-vol", + null, + null, + null, + "/dev/xvda:i-009973cd9b7f95bd8", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "az73z-8H9Qw25EUZOI0MjK1TcoKiRGiDgcb1vWg6W-4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d40345b5e4bb6f47", + "infra-us-west-2a-vh8kr", + null, + null, + null, + "/dev/xvda:i-0dc60c61ba82aac5c", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "bTQGDA3JHZ2xTs0aS2bkAwY95ckqijEtEwwvto2o1Kk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0648fdd816d6c8e94", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-abf7861e-a64b-462e-936b-e2c29cd8ec50", + null, + null, + null, + "/dev/xvdaa:i-0b50d180d13e310a5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "fskR6sfhbhWjwm3I1tfaWofSd3rYcBNai9Yr6HvSMdA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d46f5e7ae92609bc", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-6f184736-906a-4a56-9762-fd5da8bc1fca", + null, + null, + null, + "/dev/xvdab:i-0d5a13bd4b921bcc2", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "guH_M0p_R-oP3s5XKkz4vj3xJkzfwapbZIenmuaBId0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-073bea110d1c2c8f7", + "play-area-cts6f-dynamic-pvc-76827a1a-8799-4ff9-a2f6-87c6acce9dda", + null, + null, + null, + "/dev/xvdba:i-043f6bfbec490a5b1", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "koZxPhsA4lN394jBDQDpaQJpZkALWOfULy5-W6Q-w3U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0943c948bbfd25923", + "afcollins-2619-ancoll-xrppt-master-0-vol", + null, + null, + null, + "/dev/xvda:i-04bb3dc37b12acf8a", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "qs5mC1LN4npDQhwyqJjek9xiMH735genu0gfrkfyfv8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-08f34e1db4d4306ae", + "smanda-ocp1-tf7qf-master-0-vol", + null, + null, + null, + "/dev/xvda:i-01f2c99a4f13fe966", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "v_G9g0kFIUXlE6YSD1Db7SyFGfg4_tf2_uagWrQ2DSI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-097d73a28c6f468fa", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-366c473d-e77b-44aa-b520-7f39eef8b29e", + null, + null, + null, + "/dev/xvdab:i-0dc60c61ba82aac5c", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "xeo_XTV0JMHQX-wnE1Evjz7R7Nlfj8Ew2-BijrIJy04", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-09fa9b223e5601a6d", + "infra-us-west-2a-xjs9k", + null, + null, + null, + "/dev/xvda:i-0d5a13bd4b921bcc2", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "27Av-DUJE5BVCM0MH9VvwEhKCKReumxXz8FUw6Ec6co", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-096ce01ef3f54e6e6", + "rsevilla87-haproxy-re-dtrbt-master-0-vol", + null, + null, + null, + "/dev/xvda:i-0822bc68df48c4f58", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "3NGEPsNmGq-H7xKVYFKvXG_gyyiJhUVHBqpzBvaaOIM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-026812ed0ed1d1c24", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2a-2k9m2", + null, + null, + null, + "/dev/xvda:i-0e79f7719dbf72748", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "5QUxZlmv_oedKcaN3W9JDW8FWQI_NUutn5oJfZHz_n0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0aa48d5c07f06fff7", + "afcollins-2619-ancoll-xrppt-worker-us-west-2b-7xd4k", + null, + null, + null, + "/dev/xvda:i-077f431bd99558204", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "6pvWYtSpTEHsk23PEPtKdkjEBKxaF4l3lA2jz_xdkPs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-082e712887e26afb2", + "infra-us-west-2a-nk5kr", + null, + null, + null, + "/dev/xvda:i-0c6a9c8fb97ba9c4e", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "71h3jfiJtO0xBMvgjxseefGDrpdMU2rJOa_yQ50PUfo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-058a8f963ef0e08d9", + "smanda-ocp1-tf7qf-worker-us-west-2a-xnbn2", + null, + null, + null, + "/dev/xvda:i-0d92f53210e40455c", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "78fdm3t1PQ9Fhn3_aWTWqBjoaIWJy8anMXASlGs4_ug", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c3611f19ba128c1f", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2a-fqzxv", + null, + null, + null, + "/dev/xvda:i-030613bcf3811d8c1", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "7AHu1WDIdnKozixIHfd3YBYW6esncmA-53j6er-HABE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d085ad157fae5f7c", + "afcollins-2619-ancoll-xrppt-worker-us-west-2b-9mxlp", + null, + null, + null, + "/dev/xvda:i-08667e70b79792e8e", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "7GHCbtLZ3m5aSidiY1bKH0zv3Ylm08Nu6K5lHeEZyoA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-03766a4841c8fc2ec", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2a-8cvwx", + null, + null, + null, + "/dev/xvda:i-01a1533bb97763b28", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "9fLpK1KykUzKyrFhwfKUw_jnOgO5JuXkgbvnj7rWbM8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0fdeccc16e3a1acc2", + "play-area-cts6f-master-1-vol", + null, + null, + null, + "/dev/xvda:i-0f7ef6baabc3e58e6", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Eh3WU8ukqC0OK7fjOSgd6bKxglTyE4dmcS-L_Un3g70", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0fdb7639900237752", + "cloud-bulldozer-ci-6hwqr-master-1-vol", + null, + null, + null, + "/dev/xvda:i-0b4c1d3e93cd4ac7b", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "EqSVnB9X7vtwpJqiirWkk0Bi8xGV7Fu1gg9s1DPNisE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-07f208b7d6944f8c6", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2a-w8vxp", + null, + null, + null, + "/dev/xvda:i-0fbdb7dfd79aeeda7", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Gou8JeMgdgR0xkLqoHRLtSaf1KzLOi751vq5Mhb79GA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0520303c51c3d58c2", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2a-qcbf9", + null, + null, + null, + "/dev/xvda:i-0e915735a64713bc9", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "JW6YaWU79q0-liUPiBIWFyNIlrBdSZaWUVwMdp9nkdc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c3bcf09e093e7ab8", + null, + null, + null, + null, + "/dev/sda1:i-0ddfcc90befbb6b21", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "LSANowx1tzS1XvP65M9e0BmOmuYZC90vNqCFviD8y0o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e67f155d0a012004", + "rsevilla87-haproxy-re-dtrbt-dynamic-pvc-b96fedfb-5ea1-4f6b-ac1b-44376e7b181b", + null, + null, + null, + "/dev/xvdaa:i-0c6a9c8fb97ba9c4e", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "PAJYOJnF-Ny2TpHXyKwYXFvP8bEJS67SpiGKACrgFV0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b6710f83bbdf8e33", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-8e80ad34-582c-47de-ac1a-a1df32c998a9", + null, + null, + null, + "/dev/xvdaa:i-0ef8c76fb5a5ff083", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "SGn5NIYEya0Qc8TCQcx2hyruUmg-Mku6rCGEfqGPYso", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e1364cf8965adbf9", + "play-area-cts6f-worker-us-west-2b-24vt5", + null, + null, + null, + "/dev/xvda:i-0ccd422f70b547204", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "T-Y4JCC_sUoaFbX2y_iOraYM_ZXTyBVD1hTfVaPGl7M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-09de2734747127f9d", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2a-d2cx8", + null, + null, + null, + "/dev/xvda:i-0fd47f4dcfe853d30", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "W5HRso_MQPOoNigtcU-ZOMZLAc9PmYCQTES_14m1oiU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-03a894bf20351de9d", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2a-sd4l4", + null, + null, + null, + "/dev/xvda:i-0b68fe2fce89221cb", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "__3SuRfR-zzCThTZ4MvMHrig5eOSGFQHoWILR8lhkv0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c84d25f46bb0ab09", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2a-g7chw", + null, + null, + null, + "/dev/xvda:i-09f6066979cab45b7", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "azxtYNmL9LbsK_wl95iWoqSX1XjCKA5K8B9JYhPEdNM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06743f3af54589a45", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-cbde8b70-e64d-4667-a9a6-e616d429c29b", + null, + null, + null, + "/dev/xvdab:i-0ef8c76fb5a5ff083", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "b6WV9i1awDVXlAKWsFjoKSM7qPOlt8A5LTofHZAatwY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00e58b3389fa58d87", + "afcollins-2619-ancoll-xrppt-master-1-vol", + null, + null, + null, + "/dev/xvda:i-0dc8d81974c54a300", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "jDEu_xFUDqLZywXIO3iLnEEwBGw6yTlU5HhebDsJBIc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0ced5b631ea02d446", + "rsevilla87-haproxy-re-dtrbt-dynamic-pvc-624a4d06-f045-455e-b7ec-793a50034b5d", + null, + null, + null, + "/dev/xvdab:i-0c6a9c8fb97ba9c4e", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "jWoLTUEc5lNJsb4FGHYaVC3B8gt2KJO3v_35Le23bgk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-059317a813494f5f1", + "infra-us-west-2b-7wwlk", + null, + null, + null, + "/dev/xvda:i-0ef8c76fb5a5ff083", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "kDaISVXzede1huTo1ULWXDDSmPe8FenrXMDjMUMPLOA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d63c715bcda73b78", + "ci-op-gx6iqsmg-6a767-t4qmg-master-1-vol", + null, + null, + null, + "/dev/xvda:i-09734b05acffdee58", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "wmTnKgqZThJhFNGmg0FeKccffwE8lczVkoiBfGAdIwk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-035ae130271fec697", + "ci-op-gx6iqsmg-6a767-t4qmg-worker-us-west-2a-d7gvp", + null, + null, + null, + "/dev/xvda:i-068a3804aa59f0704", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "eu-west-1", + "resourceId": "kW5BRpvJLf_5jfT-Brj4UeTHsVctKA1Ey44TaJrlOQk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "vol-0cd328a6a03781f4b", + null, + null, + null, + null, + "/dev/xvda:i-072a400ea55c4d134", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "8N6ONN3JikN0YuGhTgbi9AqrfTDb-_56eam5tV2vHpQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-03366204e122af53e", + "afcollins-2619-ancoll-ptfqt-master-1-vol", + null, + null, + null, + "/dev/xvda:i-0b3cdf3e2acf89f9a", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "CBVJ4kvyQ1NooFwHlBm2-tbss_d73G_W3QTfp2SI9bs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0cb6168c423727ba4", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2b-dt69r", + null, + null, + null, + "/dev/xvda:i-0fb1ae171e1eb5c26", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "EUkBYdLbkOHSNuuoTs-rBp7qxfIPGWo-_03_PmnJa4U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-003891809dc30e8fa", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-ce10272d-91e6-47d8-a3ed-01ae783523b9", + null, + null, + null, + "/dev/xvdaa:i-0b8be6894f1ad9063", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "FnI9nLe20pgFrlzdeGcXleLFuruknU3oBtN1b3RLFUw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e473b3f9a4d5b497", + "infra-us-west-2b-lff82", + null, + null, + null, + "/dev/xvda:i-0dc2b778154d3d166", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "LXSKlf1srJzkulJaTEcjXndJsTKAF9VoO01hkbJDXwI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d1c3ca391888609a", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2b-wjlg4", + null, + null, + null, + "/dev/xvda:i-0fbaa3c80bf43cf54", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "OQHqDmVK66Gqy6woEFE4aUBH2VSLN5u__3M_as3TgO4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-08e82090f21b9c817", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2b-dm5hv", + null, + null, + null, + "/dev/xvda:i-00352aea432ca8b7a", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "PPy1AC0hnr_rU1jtMjeDHKxNDG89VRBVTnQkUNjPFcM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00a466c70ba434cb1", + "infra-us-west-2b-m6cn7", + null, + null, + null, + "/dev/xvda:i-0b8be6894f1ad9063", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "Rs6hJ5e7I73bmmy9E2L7ncXtHllM7VMkNmWfc-EiSF8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-02c1af4bf8192019f", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2b-pgxw6", + null, + null, + null, + "/dev/xvda:i-07ae54466bc5daf81", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "SGW6CrT2DTlNdLzjpF_U8zFE8fcRIBYPbUO2WR1Rl8w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-074a7564dfb9b1315", + "rsevilla87-haproxy-re-dtrbt-dynamic-pvc-d01a1617-b85f-4974-82ca-ca3f5bc418c7", + null, + null, + null, + "/dev/xvdab:i-0dc2b778154d3d166", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "SbCfaIWHESV0QvPtEMqZifW15zFj4lNwTuLrTqSTmzw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e07e95f12786b170", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-314324eb-b8ee-468f-a44a-81f8252fae75", + null, + null, + null, + "/dev/xvdaa:i-053a8ac0c017e5283", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "UDcLEOlgW4j9K_KxZfAd1U9LY71umWGGHtRV8gK88NU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-077fa51345512c417", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-ade13cf3-a915-4a26-865c-517fd2fc2e88", + null, + null, + null, + "/dev/xvdab:i-0b8be6894f1ad9063", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "XcIsiAgdNuBKip0fpohdUhX6ocZ0M2HU3OTPEtWfnyg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00a07c47070adb577", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2b-cx9dz", + null, + null, + null, + "/dev/xvda:i-0eef509d7958e55d5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "a5SH3aOKHdSZ9TktO7iigWnYcLiabj-FaMaglCq5W_k", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-030386f9c8d98d23c", + "afcollins-2619-ancoll-5b8gn-master-1-vol", + null, + null, + null, + "/dev/xvda:i-0fa2daf4b27d66ee3", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "bSqvnYjFkcA2S9Z2JmDYX5Lhw5kfO7SWPPpllUqlzcE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-05384956a64e254e4", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2b-m7cwg", + null, + null, + null, + "/dev/xvda:i-0e4903d6691e98cf5", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "jtSlGqepSDZSn5jBBri_U1AIUDDLtw0707lRMlkWlg4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0fd5fc64164054be6", + "smanda-ocp1-tf7qf-worker-us-west-2b-2xrjq", + null, + null, + null, + "/dev/xvda:i-0b4135548ca9a7e15", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "l12NkU6ZLcQULV6ip_6cLiQe3cGko6QiPezDKmfvaLE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0f379979a6e188b98", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-f094f2a8-841e-41a0-92e3-a2a97b42a32f", + null, + null, + null, + "/dev/xvdab:i-053a8ac0c017e5283", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "vd4zVmZKDQ7tCkJZQaI-fMg5ZEpjO4FWv3gGOSYHPTE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c8f3aded06141aab", + "infra-us-west-2b-r5dn4", + null, + null, + null, + "/dev/xvda:i-053a8ac0c017e5283", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "vg7193Y1R0OuhO6BowjFrlvRVie9cC6RwxbS3DTpQpI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0a34bf7e8c59f518a", + "rsevilla87-haproxy-re-dtrbt-worker-us-west-2b-wntb8", + null, + null, + null, + "/dev/xvda:i-0d7a70d3692c05e45", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "yoO9_EG53ixyhcMCRf3QVhKDcJIG0SwuHhVnWAX5Lww", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e43afce0fa656f68", + "rsevilla87-haproxy-re-dtrbt-master-1-vol", + null, + null, + null, + "/dev/xvda:i-02d63f8c9344ad458", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "yqyinQALgMqCKuah2w9CWv-ETI6akqvBROkLDAIBe1w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-04f98a8a2613f1382", + "smanda-ocp1-tf7qf-master-1-vol", + null, + null, + null, + "/dev/xvda:i-0eab77429a728389b", + "Red", + "No snapshot" + ] + }, + { + "status": "error", + "region": "us-west-2", + "resourceId": "zmC2mNfPJh15ecGFiF1T8LQUKvaWdtyhpCDKK2HxQeM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-08d4041b42a73b0ff", + "rsevilla87-haproxy-re-dtrbt-dynamic-pvc-65d24633-803e-476a-8f81-0a8e11543f54", + null, + null, + null, + "/dev/xvdaa:i-0dc2b778154d3d166", + "Red", + "No snapshot" + ] + } + ] + } + }, + "c18d2gz182": { + "metadata": { + "id": "c18d2gz182", + "name": "AWS Lambda Functions without a dead-letter queue configured", + "description": "Checks if an AWS Lambda function is configured with a dead-letter queue.
\n
\nA dead-letter queue is a feature of AWS Lambda that allows you to capture and analyze failed events, providing a way to handle those events accordingly. Your code might raise an exception, time out, or run out of memory, resulting in failed asynchronous executions of your Lambda function. A dead-letter queue stores messages from failed invocations, providing a way to handle the messages and troubleshoot the failures.
\nYou can specify the DLQ resource you want to check, using the \"dlqArns\" parameter in your AWS Config rules.
\n
\nRefer here for more information about AWS Lambda Dead-Letter Queue.
\n
\nSource
\nAWS Config Managed Rule: lambda-dlq-check
\n
\nAlert Criteria
\nYellow: AWS Lambda Functions has no dead-letter queue configured.
\n
\nRecommended Action
\nMake sure that your AWS Lambda functions have a dead-letter queue configured to control message handling for all failed asynchronous invocations.
\n
\nFor more information, see Dead-letter queues.
\n
\nAdditional Resources
\nRobust Serverless Application Design with AWS Lambda Dead Letter Queues", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz182", + "status": "not_available" + } + }, + "c18d2gz183": { + "metadata": { + "id": "c18d2gz183", + "name": "Amazon OpenSearch Service domains with less than three data nodes", + "description": "Checks if Amazon OpenSearch Service domains are configured with at least three data nodes and ZoneAwarenessEnabled is true. With ZoneAwarenessEnabled enabled, Amazon OpenSearch ensures that each primary shard and its corresponding replica are allocated in different Availability Zones.
\n
\nFor more information, see Configuring a multi-AZ domain in Amazon OpenSearch Service.
\n
\nSource
\nAWS Config Managed Rule: opensearch-data-node-fault-tolerance
\n
\nAlert Criteria
\nYellow: Amazon OpenSearch Service domains are configured with less than three data nodes.
\n
\nRecommended Action
\nMake sure that Amazon OpenSearch Service domains are configured with a minimum of three data nodes. Configure a multi-AZ domain to enhance the availability of the Amazon OpenSearch Service cluster by allocating nodes and replicating data across three Availability Zones (AZs) within the same Region. This prevents data loss and minimizes downtime in the event of node or data center (AZ) failure.
\n
\nFor more information, see Increase availability for Amazon OpenSearch Service by deploying in three Availability Zones.
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz183", + "status": "not_available" + } + }, + "c18d2gz178": { + "metadata": { + "id": "c18d2gz178", + "name": "Amazon ElastiCache Redis clusters Automatic Backup", + "description": "Checks if the Amazon ElastiCache Redis clusters have automatic backup turned on. When automatic backups are enabled, ElastiCache creates a backup of the cluster on a daily basis.
\n
\nFor more information, see Backup and restore for ElastiCache for Redis.
\n
\nSource
\nAWS Config Managed Rule: elasticache-redis-cluster-automatic-backup-check
\n
\nAlert Criteria
\nRed: Amazon ElastiCache Redis clusters do not have automatic backup turned on.
\n
\nRecommended Action
\nEnsure Amazon ElastiCache Redis clusters have automatic backup turned on. Automatic backups can help guard against data loss. In the event of a failure, you can create a new cluster, restoring your data from the most recent backup.
\n
\nFor more information, see Scheduling automatic backups.
\n
\nAdditional Resources
\nRestoring from a backup with optional cluster resizing", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz178", + "status": "not_available" + } + }, + "c18d2gz161": { + "metadata": { + "id": "c18d2gz161", + "name": "RDS DB Cluster has no Multi-AZ replication enabled", + "description": "Checks if your Amazon RDS DB clusters have Multi-AZ replication enabled.
\n
\nA Multi-AZ DB cluster has a writer DB instance and two reader DB instances in three separate Availability Zones. Multi-AZ DB clusters provide high availability, increased capacity for read workloads, and lower latency when compared to Multi-AZ deployments.
\n
\nFor more information, see Creating a Multi-AZ DB cluster
\n
\nSource
\nAWS Config Managed Rule: rds-cluster-multi-az-enabled
\n
\nAlert Criteria
\nYellow: Your RDS DB cluster does not have Multi-AZ replication confgiured.
\n
\nRecommended Action
\nurn on Multi-AZ DB cluster deployment when you create an RDS DB cluster.
\n
\nFor more information, see Creating a Multi-AZ DB cluster.
\n
\nAdditional Resources
\nMulti-AZ DB cluster deployments", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz161", + "status": "not_available" + } + }, + "c18d2gz169": { + "metadata": { + "id": "c18d2gz169", + "name": "Application, Network and Gateway Load Balancers Not Spanning Multiple Availability Zones", + "description": "Checks If your load balancers (Application, Network, and Gateway Load Balancer) are configured with subnets across multiple Availability Zones.
\n
\n
\n
\nFor more information, see Availability Zones for your Application Load Balancer, Availability Zones - Network Load Balancer and Create a Gateway Load Balancer.
\n
\nSource
\nAWS Config Managed Rule: elbv2-multiple-az
\n
\nAlert Criteria
\nYellow: Application, Network, or Gateway Load Balancers configured with subnets in less than two Availability Zones.
\n
\nRecommended Action
\nConfigure your Application, Network, and Gateway Load Balancers with subnets across multiple Availability Zones.
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz169", + "status": "not_available" + } + }, + "c18d2gz156": { + "metadata": { + "id": "c18d2gz156", + "name": "RDS Multi-AZ Standby Instance Not Enabled", + "description": "Checks if your Amazon RDS DB instances have a Multi-AZ standby replica configured.
\n
\nAmazon RDS Multi-AZ provides high availability and durabiliy for database instances by replicating data to a standby replica in a different Availability Zone. This provides automatic failover, improve performance, and enhances data durability. In a Multi-AZ DB instance deployment, Amazon RDS automatically provisions and maintains a synchronous standby replica in a different Availability Zone. The primary DB instance is synchronously replicated across Availability Zones to a standby replica to provide data redundancy and minimize latency spikes during system backups. Running a DB instance with high availability enhances availability during planned system maintenance. It can also help protect your databases against DB instance failure and Availability Zone disruption.
\n
\nFor more information, see Multi-AZ DB instance deployments.
\n
\nSource
\nAWS Config Managed Rule: rds-multi-az-support
\n
\nAlert Criteria
\nYellow: An RDS DB Iistance does not have a Multi-AZ replica configured.
\n
\nRecommended Action
\nTurn on Multi-AZ deployment when you create an RDS DB instance.
\n
\nAdditional Resources
\nMulti-AZ DB instance deployments", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz156", + "status": "not_available" + } + }, + "c18d2gz154": { + "metadata": { + "id": "c18d2gz154", + "name": "Classic Load Balancer has no multiple AZs configured", + "description": "Checks if Classic Load Balancer spans multiple Availability Zones (AZs).
\n
\nFor more informaion, see What is a Classic Load Balancer?
\n
\nSource
\nAWS Config Managed Rule: clb-multiple-az
\n
\nAlert Criteria
\nYellow: Classic Load Balancer does not have Multi-AZ configured.
\n
\nRecommended Action
\nMake sure that your Class Load Balancers have multiple Availability Zones configured. Span your load balancer across multiple AZs to make sure that you have high availability of your application.
\n
\nFor more information, see Tutorial: Create a Classic Load Balancer.
\n
\nAdditional Resources
\nAdd or remove Availability Zones for your load balancer in EC2-Classic\n
\nTutorial: Create a Classic Load Balancer", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz154", + "status": "not_available" + } + }, + "c18d2gz159": { + "metadata": { + "id": "c18d2gz159", + "name": "Amazon RDS not in AWS Backup plan", + "description": "Checks if your Amazon RDS DB instances are included in a backup plan in AWS Backup.
\n
\nAWS Backup is a fully managed backup service that makes it easy to centralize and automate backing up data across AWS services.
\n
\nIncluding your RDS DB Iistance in a backup plan is important for regulatory compliance obligations, disaster recovery, business policies for data protection, and business continuity goals.
\n
\nRefer here for more information about AWS Backup.
\n
\nSource
\nAWS Config Managed Rule: rds-in-backup-plan
\n
\nAlert Criteria
\nYellow: An RDS DB instance is not included in a backup plan with AWS Backup.
\n
\nRecommended Action
\nInclude your RDS DB instances in a backup plan with AWS Backup.
\n
\nUsing a AWS Backup plan , you can automate backups on a schedule, to meet regulatory compliance obligations, disaster recovery, and business continuity goals.
\n
\nRefer here for information on how configure Amazon RDS in AWS Backup plan
\n
\nAdditional Resources
\nAssigning resources to a backup plan", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz159", + "status": "not_available" + } + }, + "ECHdfsQ402": { + "metadata": { + "id": "ECHdfsQ402", + "name": "Amazon ElastiCache Multi-AZ clusters", + "description": "Checks for ElastiCache clusters that deploy in a single Availability Zone (AZ). This check alerts you if Multi-AZ is inactive in a cluster.
\n
\nDeployments in multiple AZs enhance ElastiCache cluster availability by asynchronously replicating to read-only replicas in a different AZ. When planned cluster maintenance occurs, or a primary node is unavailable, ElastiCache automatically promotes a replica to primary. This failover allows cluster write operations to resume, and doesn't require an administrator to intervene.
\n
\n

Alert Criteria


\nGreen: Multi-AZ is active in the cluster.
\nYellow: Multi-AZ is inactive in the cluster.
\n
\n

Recommended Action

\n
Create at least one replica per shard, in an AZ that is different than the primary.
\n
\nAdditional Information
\nFor more information, see Minimizing downtime in ElastiCache with Multi-AZ.", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Cluster Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "ECHdfsQ402", + "timestamp": "2023-11-26T12:24:17Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "arn:aws:elasticache:us-west-2:415909267177:replicationgroup:vchalla-quay-build-redis-rep-group", + "isSuppressed": false, + "metadata": [ + "Yellow", + "us-west-2", + "vchalla-quay-build-redis-rep-group", + "2023-11-27T05:47:41.000000Z" + ] + } + ] + } + }, + "c18d2gz158": { + "metadata": { + "id": "c18d2gz158", + "name": "Amazon RDS DB Instance Enhanced monitoring not enabled", + "description": "Checks if your RDS DB instances have Enhanced Monitoring enabled.
\n
\nAmazon RDS enhanced monitoring provides metrics in real time for the operating system (OS) that your DB instance runs on. All system metrics and process information for your RDS DB instances can be view on the RDS console. And, you can customize the dashboard. With Enhanced Monitoring, you have visibility of your RDS instance operation status in near real time, allowing you to respond to operational issues faster.
\nYou can specify your desired monitoring interval using the \"monitoringInterval\" parameters of your AWS Config rules.
\n
\nFor more information, see Overview of Enhanced Monitoring and OS metrics in Enhanced Monitoring.
\n
\nSource
\nAWS Config Managed Rule: rds-enhanced-monitoring-enabled
\n
\nAlert Criteria
\nYellow: Your RDS DB instances don't have Enhanced Monitoring enabled, or are not configured with the desired interval.
\n
\nRecommended Action
\nEnable Enhanced Monitoring for your RDS DB instances to improve the visibility of your RDS instance operation status.
\n
\nFor more information, see Monitoring OS metrics with Enhanced Monitoring.
\n
\nAdditional Resources
\nOS metrics in Enhanced Monitoring", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz158", + "status": "not_available" + } + }, + "c18d2gz144": { + "metadata": { + "id": "c18d2gz144", + "name": "Amazon EC2 Detailed Monitoring Not Enabled", + "description": "Checks if detailed monitoring is enabled for your Amazon EC2 instances.
\n
\nAmazon EC2 detailed monitoring provides more frequent metrics, published at one-minute intervals, instead of the five-minute intervals used in Amazon EC2 basic monitoring. Enabling detailed monitoring for Amazon EC2 helps you better manage your Amazon EC2 resources, so that you can find trends and take action faster.
\n
\nFor more information, see Basic monitoring and detailed monitoring.
\n
\nSource
\nAWS Config Managed Rule: ec2-instance-detailed-monitoring-enabled
\n
\nAlert Criteria
\nYellow: Detailed monitoring is not enabled for Amazon EC2 instances.
\n
\nRecommended Action
\nTurn on detailed monitoring for your EC2 instances to increase the frequency at which EC2 metric data is published to Amazon CloudWatch (from 5-minute to 1-minute intervals).
\n
\nTo enable detailed monitoring for EC2 instances,see Enable or turn off detailed monitoring for your instances.
\n", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz144", + "status": "not_available" + } + }, + "8M012Ph3U5": { + "metadata": { + "id": "8M012Ph3U5", + "name": "AWS Direct Connect Location Redundancy", + "description": "Checks for regions with one or more AWS Direct Connect connections and only one AWS Direct Connect location. Connectivity to your AWS resources should have Direct Connect connections configured to different Direct Connect locations to provide redundancy in case a location is unavailable.
\n

Note:

Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.

\n

Alert Criteria


\nYellow: The Direct Connect connections in the region are not configured to different locations.

\n

Recommended Action


\nConfigure a Direct Connect connection that uses a different Direct Connect location to protect against location unavailability. For more information, see Getting Started with AWS Direct Connect.

\n

Additional Resources


\nGetting Started with AWS Direct Connect
\nAWS Direct Connect FAQs", + "category": "fault_tolerance", + "metadata": [ + "Status", + "Region", + "Timestamp", + "Location", + "Connection Details" + ] + }, + "reports": { + "checkId": "8M012Ph3U5", + "status": "not_available" + } + } + }, + "service_limits": { + "dx3xfbjfMr": { + "metadata": { + "id": "dx3xfbjfMr", + "name": "Route 53 Traffic Policies", + "description": "Checks for usage that is more than 80% of the Route 53 Traffic Policies Limit per account. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRoute 53 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dx3xfbjfMr", + "timestamp": "2023-11-22T07:11:03Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "fCgC-HykCSjE566hDl-zvrs2ZJ9XdH-4q3ec-4cWxBg", + "isSuppressed": false, + "metadata": [ + "-", + "Route53", + "Route 53 Traffic Policies", + "50", + "0", + "Green" + ] + } + ] + } + }, + "gH5CC0e3J9": { + "metadata": { + "id": "gH5CC0e3J9", + "name": "EBS Cold HDD (sc1) Volume Storage", + "description": "Checks for usage that is more than 80% of the EBS Cold HDD (sc1) Volume Storage Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "gH5CC0e3J9", + "timestamp": "2023-11-22T04:59:38Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "wPqNJxYc7zIy5cUGgEnkNma9-nnZLNBjti-BXOKtzaM", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "KGTMuAF5kAvO998NjgliPQhk2Rx7awvEc6km3ELXuuA", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "Z1D35yGWfjJlEIi3qwnf3Fuw3WRs1GbGsPgh8ZT7XXw", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "3n9e6tGO_yj-OZjiJKR0dc6eIG40eISEyrOMwBQwsus", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "6q6zJ1I1_36Jd6cRGnVo4euOB_mVLbNSManek4oN1Ts", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "3r-gDSVXDgegYoNvyvDrTMx6Qvki4v9O-Gozj2Uuxkc", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "Y5a1mBFWDQ2L4UQQmEEbb2mc4EzswTRrnreVCiQc0JY", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "_fOECKjv4hZ-M-pgT4BVQQixnhHLptAMGiTLHZS--HY", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "o3imocYYRKs1UYQFn_2xLQtSqqQkAF4K9BeGsZXi6DI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "b0R7A3VIE_RPS7S7kenPM1z4HTtM4-zHfMVdgYNJuyM", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "ix_VNz3PU72k7yCSBTZXMZPww_1F3sIg55SufGP87Go", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "f6o5EhK3vpNmSl_EjD7lv1thJIMGJIL1wESZNRS4sV0", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "o5IBONzmRKU6vgLiMU49m5k0jyk8HP7882GENxeHIAw", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "EX8F-dTKNl1DzE9Tx9ck6zVl1DxVYd3Y9UT5M8b7epI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "JHROmT2NpiIoxtzgAOpiKdKWvwbi8uFbzo9LfOwT8OU", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "aPfwFYZwGc7pkR9sntULfc_b8_rlro4WfAFJKP8WgMw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "Cold HDD (sc1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + } + ] + } + }, + "cG7HH0l7J9": { + "metadata": { + "id": "cG7HH0l7J9", + "name": "EBS Magnetic (standard) Volume Storage", + "description": "Checks for usage that is more than 80% of the EBS Magnetic (standard) Volume Storage Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "cG7HH0l7J9", + "timestamp": "2023-11-22T10:33:14Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "GlsQH5mSkGRtk6t6VDOfNgd9-WgcCDpGj1H9Eg0t_UM", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "gZunaA6AnKIeh9T4-cAvbofYMPUVZcVxUj-Gn_alPq8", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "RMS8C0rhz2cZMixjds2cgXqaJjl1T1mlJL1RtuDl3P0", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "A8zW9buVL6JV72ZfoPyXiOl766l7XTpnJFwft49Z7SY", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "cJPKeiDcVQfGDR9DvkHrTeHqtbP8fsCEFVjO7cOzTsw", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "eu_UmzlXcaAQSsahia-4R4akIyOLDU_rvuFPvxYSn-I", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "Up7BfyO_OD4GctFqlqtrkXMa6b2Id8Npk6bq3g_5vX0", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "1Vi7QwlbJWVfol4PN8ZOLxVYAfk18bOFB2Q0e9TpnXA", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "L22n0XXUN0r9ilPGk-t46aravFiK5T53eg1vNPntzjE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "hZfEnInTxj-k47sOL97oxcYxMCKIAO9zIJ49wrkzb4o", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "JRs1wHIZrwcu5VCp8-x_vtVhGVBhTXu9CG2HwhfmO7Q", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "eYbxbYRRRby4JimIreQabDFW4B5yFb8SGnMkAsDGMyc", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "OuokRze3iU6oulvLpXVn36mSNWHEMk6fVQgGBuql-ck", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "thxhOPBfcpMEYuReyY9y4iFsHwS5Aqn9039IcApvTkA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "6IYtILkOgj3HnPs8kMo09dGtoFE6lWMnf8KyI96fcnQ", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Sbmu3vTTDkKKS6SMZCqrrZgv53hlv6Yxkil3PSxYrHM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "Magnetic (standard) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + } + ] + } + }, + "sU7XX0l7J9": { + "metadata": { + "id": "sU7XX0l7J9", + "name": "IAM Group", + "description": "Checks for usage that is more than 80% of the IAM Group Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nIAM Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "sU7XX0l7J9", + "timestamp": "2023-11-24T06:48:25Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "a6xGzbUb6KqF_skG7GME-hr0WiFJcm1gR_3osTdroqM", + "isSuppressed": false, + "metadata": [ + "-", + "IAM", + "Groups", + "300", + "3", + "Green" + ] + } + ] + } + }, + "jtlIMO3qZM": { + "metadata": { + "id": "jtlIMO3qZM", + "name": "RDS Cluster Parameter Groups", + "description": "Checks for usage that is more than 80% of the RDS Cluster Parameter Groups Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "jtlIMO3qZM", + "timestamp": "2023-11-25T00:14:25Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "jEhCtdJKOY": { + "metadata": { + "id": "jEhCtdJKOY", + "name": "RDS Subnets per Subnet Group", + "description": "Checks for usage that is more than 80% of the RDS Subnets per Subnet Group Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "jEhCtdJKOY", + "timestamp": "2023-11-25T12:05:40Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "yChQOE33CgsCEljMlKtF2OIGdXvzmHMCUwbTTxtX0DI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "RDS", + "Subnets per subnet group", + "20", + "4", + "Green" + ] + } + ] + } + }, + "7fuccf1Mx7": { + "metadata": { + "id": "7fuccf1Mx7", + "name": "RDS Cluster Roles", + "description": "Checks for usage that is more than 80% of the RDS Cluster Roles Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "7fuccf1Mx7", + "timestamp": "2023-11-22T17:56:58Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "6gtQddfEw6": { + "metadata": { + "id": "6gtQddfEw6", + "name": "DynamoDB Read Capacity", + "description": "Checks for usage that is more than 80% of the DynamoDB Provisioned Throughput Limit for Reads per Account. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nDynamoDB Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "6gtQddfEw6", + "timestamp": "2023-11-24T19:20:23Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 17, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "Zgw_qxVGHBdbkKIMn6MGaPbvfjtC42xL54ilc8jRTs4", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "-piSvVijxhqCXwNJ7ms0MEfiNhs4yJXoN3s6IIalEmM", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-3", + "resourceId": "lvD16MQ5A1AH91smCRUXhnXPU44VpyFztbLXmWcXXiA", + "isSuppressed": false, + "metadata": [ + "ap-northeast-3", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "WeyB6EpgIg6WESTSj-NZFgLwYw-CtnvIaPu05RhqizU", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "7EUAHwjO2WyTBgGxaBDG6OAUaI_sBtwlalw-qoquS4s", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "UMk4RlxYZm-W9oHom-pjrLnBbrZswInEzWDALxUgT9w", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "DuDowDBT9nlyK3-TscbD7uxCT4Sp8LXrOObj9uIsBys", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "QRwVNJ94Jt_n5Hpt7oiYpggOSWK0B5snmK70FXaHQLk", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "6j-Ly8F6AIOAQ8ZDdEhG8jR03HZgDpJZ4JJvMTBRgTc", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "hW7R-8tWYP_YRg-uKy_oSB8QsFXXaZhLPDxZHQIlK8E", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "4T0KIrPh8OkAJ3nGUZcGgpiwiK3HaetDib9BT8PjnPU", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "rbFjn-KdTb4pU5c1zb7mL9tAXRBf_gbEfNwLSO_FojQ", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "IGfAIOontWIb-KiNA6yMKq7s0O7vMaid9EOp6DrUf6Q", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "nNtz4XD0SimLBi90AM7nIO4RMpIrAhUwqKYtd2L3lDU", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "SRIA7azyqSIe_hHUHoye64Ax5aAfQXK0yOTzi1weqxA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "q46YlHztJld5ju7nGgB5qD3ZuJ0pepg8O4xJMkReECM", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "lyvlun0oFi5NTbIgyXRXAhBvHPqEYgFqlipzCndvlaM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "DynamoDB", + "DynamoDB Read Capacity", + "80000", + "0", + "Green" + ] + } + ] + } + }, + "XG0aXHpIEt": { + "metadata": { + "id": "XG0aXHpIEt", + "name": "RDS DB Instances", + "description": "Checks for usage that is more than 80% of the RDS DB Instances Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "XG0aXHpIEt", + "timestamp": "2023-11-24T23:02:49Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "cPBntUdd7Gtr6s0gt3ZwjJACcrIfxVklGO_MvmuIKLA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "RDS", + "DB instances", + "40", + "2", + "Green" + ] + } + ] + } + }, + "aW9HH0l8J6": { + "metadata": { + "id": "aW9HH0l8J6", + "name": "EC2-Classic Elastic IP Addresses", + "description": "Checks for usage that is more than 80% of the EC2-Classic Elastic IP Addresses Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEC2 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "aW9HH0l8J6", + "timestamp": "2023-11-23T11:05:00Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "L8xZvflDYRDNFVd4ThoDHdxKZhCWt4DrWFYlBY2fIbQ", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "-McPHFiPhDEMmmpZsDCQMC1wgn53UknoewIxMZySTUM", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "jaIa456wLQSATBl8DujBhQ1ovbvvJNFggUofgwnvljw", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "CuduS8tdhptAMUPLoGlG4WkgH39Pmwwmjucs5-ZoANc", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "CCJGKEwiYMOGzbxv8a1MAqmT8UHhAkUTAcxMaaoYpDU", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "i1ehyxgPcO1nBrDeftNV7xJVyEM2muXKARoDcc7KmOI", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "RPGdKGW4QYrHfJQP-TbulCEh9YotYKcPzVJrWXY0GNY", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "xmafVQSGb_QN4kSvS4MRKHUx8MqrKRJt9Hv6PoPBD2A", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "tsGSqTKSTy71VJlHCNiTMBEpfa3oPCKRbxVCU19_XRc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "ixsdbMZggLyHjRLkYO1MlXnBWxJRj2cIase9w9QZqQA", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "1q-cYc1lDp0i03_Vke2RIQL1uKynzAPF3b5r0KnrtIM", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "UCLLnJ3twBQisT2OCSSJgdtZ6_pgCObZcXvZQr5QUhg", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "Aao6OoW_B5TOqRIFJ5v9LM5iU0Z2d-fQZzE2JefFty8", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "Z1pBElaolJn5j4VGMDu16RgApcPnZcOqY8PbLA0ZOQw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "xx4S4-yHlvsG-VgIfJy_Nx_1LXW2OMRbZDNO37-TGUU", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "oKHVWvrK_ET53NYR6imysh0qv1R984Kspo0KsQIuucs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EC2", + "Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + } + ] + } + }, + "wH7DD0l3J9": { + "metadata": { + "id": "wH7DD0l3J9", + "name": "EBS Throughput Optimized HDD (st1) Volume Storage", + "description": "Checks for usage that is more than 80% of the EBS Throughput Optimized HDD (st1) Volume Storage Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "wH7DD0l3J9", + "timestamp": "2023-11-23T15:24:30Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "xxuOt6Qiu-xxlCBZ1cW_tpRHQ5IiDe-gqnZ23Dc_1vM", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "w1d7S3ow64mor763zST6dYiy4rRH1u98eDleWhLjmW0", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "PYR03U1YWSCOR9sM2lJSKHE3oEdi1b7GYMMzKmufbBE", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "wJYVJfc6f_n8oGvosmCC4nw4li2TidZgVnevLDfeNho", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "L3BdbgmgRCJgnkYMrc3TmJa_y7CoRGbwCv1336hbF8o", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "Duk2OL4gSrcyB613bsKYZkZlpA5sLeGTjzc79x8F5_w", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "klnTdhUzdu7k14kfkFwxN_I69Flr3CISL9vQepS6crc", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "y_aUwg7lrKeFTlSlUFTW3BxKuSytqfJ8MOZDCehEybA", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "0EKDXpuvgx4Ommc1-vWmm6zlR-9rTcCpuaa39AYPCmg", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "Wq4oRQLkLZhW--SBC_UEq-DhRt_OXx38v2zNfEAFu0k", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "tyXrRQYX0x604TSQCmpfrIWo6A-awAfb70UFStMaPcg", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "06n06VZWwU4CV3zWkCVC6S1Oy-hqE8G3cziNfeV8pds", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "7CiMx15amgfv8qxS0QvBwENJMWVJpb1PvMFCRrzkFKw", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "wlPUCfj8sw_9pUkzXim_W1LaGSezJZCJtgX3AXqpNDE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "CtE0IBt8MxkV2Va5ip2me72H9kANUPdrhCY37NUio0E", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "zIBV4851yqY4YCaY5enqqQa8V1QIL6MQWAbWmQEkV6A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "Throughput Optimized HDD (st1) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + } + ] + } + }, + "iK7OO0l7J9": { + "metadata": { + "id": "iK7OO0l7J9", + "name": "ELB Classic Load Balancers", + "description": "Checks for usage that is more than 80% of the ELB Classic Load Balancers. Application Load Balancers and Network Load Balancers have a separate limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nAWS Service Limits - Elastic Load Balancing default service limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "iK7OO0l7J9", + "timestamp": "2023-11-24T22:05:32Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "-DKW29kQ2QiCIoe2QU50Ju6INdviBo9B1RiqWJal33U", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "ELB", + "Active load balancers", + "300", + "10", + "Green" + ] + } + ] + } + }, + "gI7MM0l7J2": { + "metadata": { + "id": "gI7MM0l7J2", + "name": "EBS Provisioned IOPS SSD (io2) Volume Storage", + "description": "Checks for usage that is more than 80% of the EBS Provisioned IOPS SSD (io2) Volume Storage Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "gI7MM0l7J2", + "timestamp": "2023-11-23T02:05:09Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "1vxKZmR_5RRoLX8K0GYRMq32LjFM7oa5JMF4Nt_wc1Q", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "1-lPBH4wurzE9_1IapG_NWDRTSedurg9myC2ucuQcJI", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "GKH__3kBa9_Rk5w6amRByZUbRoNzpTNmHD1OT7GBXKg", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "YWeS4gRjYZmTjJV7TfKE4ct2C-z2olfIscokx98VJbU", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "S3TF_wvZaFk1AxiOWpv0C4Wo2Yn-QCRm1wj1zk0V3pY", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "Z6vi9-79tYpsqbfXwOZMw2Jpt4tDVYx7nfppufEccnw", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "mevlbiUFwVVGrEmRVGmdi9lfA9uAs6kfccPMqdnhwX8", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "AnuTgOd9-SPfVO4b7qCHvwKcBlDDbmRW0zq4sxfUaCU", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "MjEnxCEpqpryXAyu8B_HHwaBwTraXi_r8tzp_WQQhSQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "UoWc0aw3sg54Y8wF6N2HeJ-7wxGUbjMUq4ldVF4sxlA", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "31osf7_HoA2Ua7JsOLmCb5YAKnSyl-qAOLsuWStWyTI", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "ph-Xvgs4BcIqTVPvIaYbD9febfhinyRrm3mCSry47wU", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "0UaMa20M6rOG6z1GwLQX293l8Dw2FvueWJiP4azNN0w", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "WDGpuJZZRwIRl1OlUfswJt39enWsEeArDkHN-g9JGc4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "jNFwIOxKX1x21rED1lKecbGHQUfF21m9IdqD0bkyP2s", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Z-NbVGdt0VHn1NtJeEucgYP2ryjXXSz0SjP37OWb5BI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "Provisioned IOPS SSD (io2) Volume Storage", + "20", + "0.000", + "Green" + ] + } + ] + } + }, + "EM8b3yLRTr": { + "metadata": { + "id": "EM8b3yLRTr", + "name": "ELB Application Load Balancers", + "description": "Checks for usage that is more than 80% of the ELB Application Load Balancers Limit. Classic Load Balancers and Network Load Balancers have separate limits. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nAWS Service Limits - Elastic Load Balancing default service limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "EM8b3yLRTr", + "timestamp": "2023-11-21T18:03:07Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "gI7MM0l7J9": { + "metadata": { + "id": "gI7MM0l7J9", + "name": "EBS Provisioned IOPS SSD (io1) Volume Storage", + "description": "Checks for usage that is more than 80% of the EBS Provisioned IOPS SSD (io1) Volume Storage Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "gI7MM0l7J9", + "timestamp": "2023-11-21T15:59:35Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "75DV1M0GnvpoGYlblHmeh56GFzvDDn1EyOZmy3MFAXQ", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "Bw7yYqT9XxH2VoyFgVcMVNybWBbxtHxtO_MaIYTlJ1c", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "pQynGL8cnCGxpN9s6mEVninrDgJXPBzwjY96EeArgy0", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "FL3kmzFkMDJ7HqNvuca4yK86jTNCoAMBlq4K7lIjUJQ", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "h3IUrTaR6p4TZjoDli9sVRMoK99R7dDa_CRb5KIn1RM", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "KUWuM48rrVWiN2GOVyudWow78YraAHirmvv1OTC_3Mo", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "qlX6DQTXJZq2mJIKmq0WZX_y4PtCu8NvRlT06GjZMzk", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "52", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "FrMx9uwdEc0vEK3g3agG9TeW8FYlLIZFwv38RPLS8nU", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "bDO83EQOQfQjL0vi0iOlj_D-pm8nkmu3A-9kvxexiHQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "DsitkgaxitfeLdto9zYHjadw0o2puOMlmN_aXdUHs2A", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "5OIFEelHDIWSrb9aTb9ougaQboBLgIj-iOAqV3L9VlU", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "nC97vQDT6GjTL9FN_TDvEwo6IG1QqwMmJqje9Usmp2w", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "M9rq16aS5kU1uT-NYik_rhoBsZd9B6YTPsD47PoqNWc", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "zh4vqVhXt6xxvcujdrhtJ6YMLdwiljstpnlVlU7fbvU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "q64c1qmUegvWMI4fWO6CwUdzpaBJeefk3r6ozOYBsQk", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "kgE_zORu6g-s21387zso-NW2sBBpYmpVK7QDWD31-hQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "Provisioned IOPS (SSD) storage (TiB)", + "900", + "0.000", + "Green" + ] + } + ] + } + }, + "bW7HH0l7J9": { + "metadata": { + "id": "bW7HH0l7J9", + "name": "Kinesis Shards per Region", + "description": "Checks for usage that is more than 80% of the Kinesis Shards per Region Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nKinesis Streams Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "bW7HH0l7J9", + "timestamp": "2023-11-21T19:01:11Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "dx3xfcdfMr": { + "metadata": { + "id": "dx3xfcdfMr", + "name": "Route 53 Hosted Zones", + "description": "Checks for usage that is more than 80% of the Route 53 Hosted Zones Limit per account. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRoute 53 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dx3xfcdfMr", + "timestamp": "2023-11-23T14:33:50Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "EPwqJ8k6Ra_OGTiXctRpkQW37XHpKgwckVCYd3FPHF8", + "isSuppressed": false, + "metadata": [ + "-", + "Route53", + "Route 53 Hosted Zones", + "2000", + "87", + "Green" + ] + } + ] + } + }, + "lN7RR0l7J9": { + "metadata": { + "id": "lN7RR0l7J9", + "name": "EC2-VPC Elastic IP Address", + "description": "Checks for usage that is more than 80% of the EC2-VPC Elastic IP Address Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nVPC Elastic IP Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "lN7RR0l7J9", + "timestamp": "2023-11-22T07:30:08Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "EI6N29qJJC1Z3ziLpSX3xY4jnIjN1qEDepUk4jrdBak", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "mv6iZ4gep9C9W4okVLRv82fXcw6C3ni2xPzmpLjuutw", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "UJfnDOVTUahzmHdzZICbkEu7kpRNhGK8ulh8ZwLKPhM", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "TuouPP3SY7RMSOT-p3eaYG__1cXVBWi5cNqIM0apeqs", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "8eLl55tURg8NrjBYFzWcwaEnUfwaW_vq0sJgZyE4z9w", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "DGVSN_jowB-p6Lsybh6yt7B2wydCNgW62er4AecAWDQ", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "uK3AeuszzgpuCZQWmc-xKraube-LurHA3HeJkNvP_Rg", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "_PLqF8UkZ8A7jD3jIcv1n8Lx_S_XS84PXs38n5ZhMEI", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "ihBBQRxmBTW5e8h0-dpdKPiRfU1XUsOCYjFk6M8qSug", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "500", + "87", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "l_E9lyy_5JXDLdBSCEXuAo_nKC0F65Au3ymWhF9KQEg", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "7Yp9jktT3-6zod_KLYPBUVpsuG4Gjwx0GPLa6GUUOE8", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "-dYiYYH77Hp4uEhw2fiV9MLdYllkfMoi7hgPlFH5dfo", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "2ACGZSehc92QntLOdR2zIKYw741EfSeeC4mSr8Z17_M", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "100", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "XaiOGYKVAwgmxrIek56uZCcF29t00i4XJ1iIApQ4RNo", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "500", + "6", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "IniIzIaaGQZJ3mG-sPdP5g8zeiWM4vayA3VnIOqYMsk", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "30", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "2QP4ttC1I1JI8zjRd8CrL5OE7vr8ZscSFUHGarftbus", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "VPC", + "EC2-VPC Elastic IP addresses (EIPs)", + "500", + "28", + "Green" + ] + } + ] + } + }, + "3Njm0DJQO9": { + "metadata": { + "id": "3Njm0DJQO9", + "name": "RDS Option Groups", + "description": "Checks for usage that is more than 80% of the RDS Option Groups Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "3Njm0DJQO9", + "timestamp": "2023-11-24T04:16:13Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "tV7YY0l7J9": { + "metadata": { + "id": "tV7YY0l7J9", + "name": "EBS Provisioned IOPS (SSD) Volume Aggregate IOPS", + "description": "Checks for usage that is more than 80% of the EBS Provisioned IOPS (SSD) Volume Aggregate IOPS Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "tV7YY0l7J9", + "timestamp": "2023-11-24T12:15:13Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "jn-R8ee8elt9YijUlzsJhuOB1f4sVKqLiL5vsu9Wy14", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "cdFvlyd9WoolkL-PxMag86rA5FgRme_X3rFggUdQ2sk", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "W2OptYVnPd8tE0qlS58KHSUMszaDVmRaCPLt2U5mxTk", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "jMBfBupjELbPcoeMrbjwVe5e4iblNF4J62UTXxT_PaI", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "bxNrxaaZpktgpqWwhk8kWqJzqIj04xVUeICRuw7Xf7Y", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "AAvcluyMbljL6HkGLpW8IcQET1vHzDkWe0iOskKpJLk", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "vRybyDExciPS9oySFThQQE7hli5k0iM7HJqY3GGZ1qs", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "XCdZWMbtNwowBRhMwSEST870uNNp-MMPj5trlsX1AA0", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "VCUnXU1iTeDFlBunAdzSVUMD_lB4j2Uc8kK83G7lj4k", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "cXDwtOwxtsyrDd-ycZyMBUJIKcrPWYl06XzbU7m2Iio", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "gpyvFb-RsM5qhwCWLXdczd-4RVOYGsauhzTmFJ-rSdo", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "LZRPCW8UYEuHaRsdWTXfTW8-5jaNm6txCI0QPpGTKrU", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "4aDDM6P89nc52mG9HseBsFuFh-Fw69oIqJNKaAbGUS4", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "fDVfEi07ZWJpXXGb_RGfCEW0GkysIaD2mKYGjQlFVqU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "t920fKGZpEv0NXwVN-Q6pJaIEZVvPTSj-fxVhaEHThw", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "Provisioned IOPS", + "300000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "K9zrXoF-IzbQc-hAgb5oI0TAeO2LIi-oQJbgE9_03B4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "Provisioned IOPS", + "774900", + "0", + "Green" + ] + } + ] + } + }, + "UUDvOa5r34": { + "metadata": { + "id": "UUDvOa5r34", + "name": "RDS Reserved Instances", + "description": "Checks for usage that is more than 80% of the RDS Reserved Instances Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "UUDvOa5r34", + "timestamp": "2023-11-25T08:57:13Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "oQ7TT0l7J9": { + "metadata": { + "id": "oQ7TT0l7J9", + "name": "IAM Roles", + "description": "Checks for usage that is more than 80% of the IAM Roles Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nIAM Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "oQ7TT0l7J9", + "timestamp": "2023-11-22T12:25:20Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "resourceId": "X1mS1mJtwxEbPnUS2lGjeynE4JW52Dz63T_uRQ8qVh0", + "isSuppressed": false, + "metadata": [ + "-", + "IAM", + "Roles", + "5000", + "4185", + "Yellow" + ] + } + ] + } + }, + "c1dfprch07": { + "metadata": { + "id": "c1dfprch07", + "name": "Lambda Code Storage Usage", + "description": "Checks for code storage usage that is more than 80% of the account limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\n
\n

Recommended Action


\nPlease identify unused lambda functions or versions and remove them to free up the code storage for your account in the region. If you need additional storage, please create a support case in Support Center. If you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create open a support case in Support Center.
\n
\n

Additional Resources


\nFor more information, please refer to the AWS Public documentation on: Lambda quotas", + "category": "service_limits", + "metadata": [ + "Status", + "Region", + "Function ARN", + "Current Usage (MB)", + "Function Version Count", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfprch07", + "timestamp": "2023-11-27T12:22:36Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "jEECYg2YVU": { + "metadata": { + "id": "jEECYg2YVU", + "name": "RDS DB Parameter Groups", + "description": "Checks for usage that is more than 80% of the RDS DB Parameter Groups Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "jEECYg2YVU", + "timestamp": "2023-11-26T04:33:43Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "wxKIGPbVbA8rs5tk0jtm86YqTSWC_ZaLJIC71NXxKfg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "RDS", + "DB parameter groups", + "50", + "4", + "Green" + ] + } + ] + } + }, + "iH7PP0l7J9": { + "metadata": { + "id": "iH7PP0l7J9", + "name": "EC2 Reserved Instance Leases", + "description": "Checks for usage that is more than 80% of the EC2 Reserved Instance Leases Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEC2 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "iH7PP0l7J9", + "timestamp": "2023-11-25T22:12:36Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "uq3RHLCT0Mga_VtxGSFyh7la4zVeMgf_QwLsenXg2O4", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "-7UI7ZecGjPesrW8UIS61NXfqGn-jlT6R7fm28tS9Qs", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "1Qgbf2KWTrVctSSu1m1L3Pl_qaFNhacixK-o6K4EdUk", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "gBs5-AyWNCy-IE8yD5wxI2z6aFjDZiHJVFhqKvGhcso", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "vDUJRMENyuIbWz6CGho8zJTKBfz4R9joNKGj2uROXE8", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "29vCzQvc8qcNxC40uej0r_2EydcsUWNnR63OKLaaa0s", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "8SaXIx3X6Psjtj0-K2vaM8n8I3N-vu9TOkR584El3SA", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "y08q8xtESS3ZnoA3PwCQW4Oh7VUbKl0Qvm5ki6T1CeI", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "DIXQz-a5iLrYeheHGF9tq04_ShDujEVEV8iiJH-RJJY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "ZObyoHFZUgKzLAcbSnMo4mxtGP2uIHqoTDD3bwwo8do", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "s3cmc9DHl7jJ0-4OO4q0PPnz5a94ZvChrrfONYAaao4", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "TdFdQ5X6xESQ_bKVSSML4YrWDMI3MPGtcdwJ999T52A", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "cK7Lus-uGFoM7nkzJ8vzKaUY61ecw3N3hq2UYvZc5Vw", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "xSY8U3-kgbDaE34jZSYbcd-MCmo8f-0r9TeReQ0KDc4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "2000", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "gMthpwWkhOrZkzNcsIfZsRjpOPEAuDtyNTHZrHcFOJY", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "20", + null, + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "XGU9uJxjcgdmcnbbeLGUDOgdBgIpkf2-jPdo9gEa0k0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EC2", + "Reserved Instances - purchase limit (monthly)", + "2000", + null, + "Green" + ] + } + ] + } + }, + "hJ7NN0l7J9": { + "metadata": { + "id": "hJ7NN0l7J9", + "name": "SES Daily Sending Quota", + "description": "Checks for usage that is more than 80% of the SES Daily Sending Quota Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nSES Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "hJ7NN0l7J9", + "timestamp": "2023-11-22T06:14:17Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 17, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "_QFnbiWg10WYhoOoeba1Mb-9EggTvzpmlcUKY6EaHx8", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "EZDdIt1dmjqHFin_Gb9sYq9lPdBFJTxQTAOzadVl0mg", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-3", + "resourceId": "NIocgY22J7fmrWi37hwXiFm_oVcGGD5qH5W1O5m2sNQ", + "isSuppressed": false, + "metadata": [ + "ap-northeast-3", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "ISDRrHR41vcnZSea3GTNrHKCxzYwelgHGNLJAXe3MqE", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "mn_UBENTx1d4qOOzWwKN90QHQn6rmObn8KIIcY-sx7Y", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "UphcIB1DOA-O7yTYzAU7yqlnyniJlALGXNlycBZsVCU", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "QHLSiVUHSJ14Wm_MFAvmFNY75Q8d0GsLL1zjQGvAQ7Q", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "g9DysPvBb1opiiAgTTyZ37GVG81zFm5_nx-s4T_ccls", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "UeK7P47zu2tEfWJA4dxUWes84jGxDX5JQLfLmIPZgLQ", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "0DfZxNXRI5VX6MW8Qaw1EjBQ8Iul8HRw7A9j-68mTgc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "aVho7eBMu9Em51viw5tLUOhpxj4Q5FFUmzTYLrNGC_g", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "9BUpZsAR9J-24dMJIuqxZa5c1HNQ_HTwB7Qp_OAOzjY", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "D4xWSzr_eKkI0XVssk1tGRjgR6nH5Q1VS65HFlEbGCQ", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "j8t_Uv_BOzug3oh66lGxjdJJDD9XCPY99qSvl1iv4Po", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "VwdejzzcG8tP899EWr9vu7G-sWfUN-mPJSepwOCoZ1M", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "62TZyM9AF121EjNZodHzOfuioXHul2RXnsImkLw1htU", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "olLkfCBz_yFNofBYS70xgC7oxMjnqaF3sGytMG_MZds", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "SES", + "Daily sending quota", + "200", + "0", + "Green" + ] + } + ] + } + }, + "dx8afcdfMr": { + "metadata": { + "id": "dx8afcdfMr", + "name": "Route 53 Traffic Policy Instances", + "description": "Checks for usage that is more than 80% of the Route 53 Traffic Policy Instances Limit per account. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRoute 53 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dx8afcdfMr", + "timestamp": "2023-11-23T18:53:38Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "M_yoHlsiI6IfzsjE-0wA8-mq3DrnwBWc6kvqBZ1LZS0", + "isSuppressed": false, + "metadata": [ + "-", + "Route53", + "Route 53 Traffic Policy Instances", + "5", + "0", + "Green" + ] + } + ] + } + }, + "aW7HH0l7J9": { + "metadata": { + "id": "aW7HH0l7J9", + "name": "Auto Scaling Launch Configurations", + "description": "Checks for usage that is more than 80% of the Auto Scaling Launch Configurations Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nAuto Scaling Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "aW7HH0l7J9", + "timestamp": "2023-11-26T01:32:44Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 17, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "3DXZ6uOGonth_nfDg_n0GEWDY9EitH0a-NEacq0GXQ0", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "YZgPdIyVGDhkrL6iL7yO63l7wtj5lPSdfTYbOI0-v_g", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-3", + "resourceId": "2HGHG1Y58z-RLEOdr63OnBsieVfDxrXYXqIZXnUfpcY", + "isSuppressed": false, + "metadata": [ + "ap-northeast-3", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "6Lkl0Hjvz6uClCOeAQ7lQwXIso0dyNdlBcOMbApUXxQ", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "kt9rZkkSC8nVWf5tXNBVBDu8_cteoqQLa9SB341LYys", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "BVgcb6bVqWnxxDjzrNPoIPTRkaux3P0EdbKfOYpm6kE", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "0XCwi96XJjXzSLxzo02oWzQs2CYQuwZg3PXuU5ealbc", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "MvzFR56jm_vxSS_2rL0VRMexcWaJd2SivGiOHs4HFao", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "ccbYxU-CfMOoJoRw8HwjyZLwoq682-PmkI8HAhuYxVw", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "LFWOrz7SD9JOK2s-hTZDerhi1WPKpbn5xdBjadydrKU", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "MLicJ9BTrCe-TWkdf2iuYzBhIRbglPECBXB9H05dwak", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "vQfa2t5rprX7xBJ3kQy-q2oIJQc2dQdMYC_sW5iAC6w", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "Qsm5nXTxL_L-JxkOIytWqqBDgoS4tfqPBTiag1CIrT4", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "KQDe_j-P1BQhQP73Uj6hjzwoR_YfCf9KI0_ffmBAoqw", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "z6SXDrWFWc-zi3wvvhbd2NuJy3ecxWDkEXHr1Gg_HOU", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "blqhLRldCzRDy-TXuO2B3iKhj27hCRiXb8Egr46CAGk", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "frIDxQZseHOHU1d7RNRvW-teKy-ShO97N65FY8tW55Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "AutoScaling", + "Launch configurations", + "200", + "0", + "Green" + ] + } + ] + } + }, + "8wIqYSt25K": { + "metadata": { + "id": "8wIqYSt25K", + "name": "ELB Network Load Balancers", + "description": "Checks for usage that is more than 80% of the ELB Network Load Balancers Limit. Classic Load Balancers and Application Load Balancers have separate limits. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nAWS Service Limits - Elastic Load Balancing default service limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "8wIqYSt25K", + "timestamp": "2023-11-23T02:26:12Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 3, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "-WnFzJZedWfam5Oo9NuoSC5dDwY31MPnFB1RyGfVYt4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "ELB", + "Active Network Load Balancers", + "50", + "1", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "dfPhLHEGWSuBvOHmZXFa2sSvgJPALBvJMOgXdHgovsQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "ELB", + "Active Network Load Balancers", + "100", + "10", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "jZzRPclE6ZmYnXtJs6X3773Qh4x5xeYD5fazATyKcmk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "ELB", + "Active Network Load Balancers", + "100", + "18", + "Green" + ] + } + ] + } + }, + "ru4xfcdfMr": { + "metadata": { + "id": "ru4xfcdfMr", + "name": "Route 53 Max Health Checks", + "description": "Checks for usage that is more than 80% of the Route 53 Health Checks Limit per account. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRoute 53 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "ru4xfcdfMr", + "timestamp": "2023-11-24T05:59:58Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "YyyVFvaVqpd8NS1tzf_uQa0efsTquKKBe3GcErIhc-8", + "isSuppressed": false, + "metadata": [ + "-", + "Route53", + "Route 53 Max Health Checks", + "200", + "0", + "Green" + ] + } + ] + } + }, + "dV84wpqRUs": { + "metadata": { + "id": "dV84wpqRUs", + "name": "RDS DB Manual Snapshots", + "description": "Checks for usage that is more than 80% of the RDS DB Manual Snapshots Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dV84wpqRUs", + "timestamp": "2023-11-24T05:03:00Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ujyBVEk8uHSlDIn4k5tQmEOL168K0qxfx7LbumPe50w", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "RDS", + "RDS DB Manual Snapshots", + "100", + "1", + "Green" + ] + } + ] + } + }, + "kM7QQ0l7J9": { + "metadata": { + "id": "kM7QQ0l7J9", + "name": "VPC Internet Gateways", + "description": "Checks for usage that is more than 80% of the VPC Internet Gateways Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nVPC Gateway Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "kM7QQ0l7J9", + "timestamp": "2023-11-26T00:17:50Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "juSMEd8u86J_Bk21G6BF1Rnsea5ZVleeVXhjQNGay0Y", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "q0HQGFs9wlCKrnVCpY2ICvRtVQEI-mkp1RfpS9cytE8", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "iyR6E_rTch1sv32hxaT1l_eDFn-rtBO79aRAhHQIVpM", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "VPC", + "Internet gateways", + "5", + "1", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "AeIqEaMcZbO-XLRUDGyvpDiXZAySKYwrm8mkAl9kh2E", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "t6p65IEVaoQcjznTJCcePb4a9GZbY5WL0XPGM-Awj38", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "kJRQy71yd_VNGOla3nZQn1gwZSFVk8E64sEoxjcUntg", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "Z2UbGaComTdPO2V-QmCPmnKMDTRlWhcCyD2UbDL0YdM", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "VPC", + "Internet gateways", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "-k_NApWiiq25afskrcL4bhUDREPBf3SQt-1JmX7dZx8", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "Fw318bcfQQz1asN5kmNjPK6Dw_SZqsw-dyKVusPZq6A", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "VPC", + "Internet gateways", + "500", + "31", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "-9k-ZYjMCZeWiDJB8kUNixCzy2W2U1nSjS9eL0Sv9Wg", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "MbpO2COefDlf8XO_nf3rpqYyrfNM5Sg_B76ERPA3qyk", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "nLKXAeDsRMAc4dWg2R2Vs5_PHEKN7U4hWVtOYgXmRsI", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "VPC", + "Internet gateways", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "2DPPZhFEgNkAApNyRM6l_z9HjTAfddNeN7MmsjL96A0", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "VPC", + "Internet gateways", + "500", + "5", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "_tYDXyh4EBPBhJijLCNC7JalAvVNO_V_A0VdSCe4EgI", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "VPC", + "Internet gateways", + "500", + "59", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "weMXfYeTRpOmJtxOMzFIDsGwomjLpiajgD-cncXzT1s", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "VPC", + "Internet gateways", + "10", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "dm9DNqyzf6uEHHkW4N6WzWpjMKpxZVLlNv3ozWE4T14", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "VPC", + "Internet gateways", + "500", + "41", + "Green" + ] + } + ] + } + }, + "pYW8UkYz2w": { + "metadata": { + "id": "pYW8UkYz2w", + "name": "RDS Read Replicas per Master", + "description": "Checks for usage that is more than 80% of the RDS Read Replicas per Master Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "pYW8UkYz2w", + "timestamp": "2023-11-24T04:32:39Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "pR7UU0l7J9": { + "metadata": { + "id": "pR7UU0l7J9", + "name": "IAM Policies", + "description": "Checks for usage that is more than 80% of the IAM Policies Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nIAM Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "pR7UU0l7J9", + "timestamp": "2023-11-24T00:10:49Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "f19bZfCiU_ExI1pPmMw19-MWE--omiiNGUwLF6XIO7A", + "isSuppressed": false, + "metadata": [ + "-", + "IAM", + "Policies", + "1500", + "90", + "Green" + ] + } + ] + } + }, + "eI7KK0l7J9": { + "metadata": { + "id": "eI7KK0l7J9", + "name": "EBS Active Snapshots", + "description": "Checks for usage that is more than 80% of the EBS Active Snapshots Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "eI7KK0l7J9", + "timestamp": "2023-11-24T13:43:26Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "jwi2NzpznCEX75Y-EejXJdSE-RvTRZMyMjk1KQZqyg8", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "2836sM6HAz9Axnna1_txuJQNTPCLZq0-AS7DHiJfk6Q", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "GM19cBrllM6kWVH-ttXA-ppYL5H_b0zC4-79vEM_eso", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "Qe8hrB_19TDBQYTznyYKo1JTshYrZds2zpDNT_l259Y", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "P9WQGddecN_wHHN-LaUSYT_hUUCn9k4qW5wMo2_qTC4", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "Jan9XEibxXjvTnPbuGMHQqdrPf-4ub7xuaylJSMTqQQ", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "rdTOBQtvgNxSGgmcjFjmvdUI-RDPs44G7vhvXSubCJc", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "9pG4d00_0hkaS_30AZJpOUAGyYa19yJQ9ESdLW4BUc4", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "eSQzRjMh0JWierVn4Yd6InXeq7uGpjnvVEQ82k5sYfE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "93hhBomuHr009i8C9LsInFcq_X0rFo2iQHAgRzFFw0I", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "3ZS-KyOBGbnYQNr6CsEOWvRbJtMNSBvmaKw59GScKYc", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "6UEojTtd5Qc6QJJUQfMa8huzJN9piz6NEeb-LqKEx8Y", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "bihFpPoWs1k-Ner9Hk9Z4e5qvD84lVeTuBo656LVzik", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "I-WuZzIBQL2OPheJb1gHhVfTSE49ZEVtlSlpPHRRNP8", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "JU4Jpr7F6W1I88axPIPqsHlum6KfeM_KOPwqJKtWb50", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "Active snapshots", + "100000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "fUqqMTJN0M3-UKEiWtChJ1lX5YmEGe-5_kizuQiTGFY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "Active snapshots", + "100000", + "9", + "Green" + ] + } + ] + } + }, + "fW7HH0l7J9": { + "metadata": { + "id": "fW7HH0l7J9", + "name": "Auto Scaling Groups", + "description": "Checks for usage that is more than 80% of the Auto Scaling Groups Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nAuto Scaling Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "fW7HH0l7J9", + "timestamp": "2023-11-23T09:13:57Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 17, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "WtywMag-O-UjGz-IIe4qMb596pIV97fw0oSloCyOJ6I", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "I5Y1nn19pBh4ArLGA9cCVhiJIuN3lRbr5pfX_STGUDQ", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-3", + "resourceId": "oLhxiMDZA9ss8g38HqOoSbyEOFI30nFUlvtjUKvtJcc", + "isSuppressed": false, + "metadata": [ + "ap-northeast-3", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "zU5A8jVKBOxuvyG56kfnUIB6NQDOkw54okHH2FvUAFU", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "efx0SNPa4CUUEq75aYyhIbD-45Vy9SRS4ssPyjPncps", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "-0mI5yPEH2MgYu0ejbSfG-i9oDz0Y-yC6jzx7uiRGyI", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "YymQOho8Bufg91iqd6zonT8lowEW8yPChAzlto0WidQ", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "O9UDW4p0bETWN0VfRMfs7kHJmsLYZPqSqFCLmEvhsSE", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "6aHKTU69oBhaXYrUxmjHglyeukrazTyGcHCmxkAvX3k", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "VlfLgv-jwlcvc2TnzyBa4aizz2NRHwUk1FA4lUDchCk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "EUKdDyKINNe2AmoYXIugisT2ka1_fB_Aq-3CPAANeVE", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "fQNE2OgshfA-pCvI5uwUdI0aIwZevs-DZ0O05Il565A", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "OmrXrA54-Vz9x9A3b1ivAPkKZuM6g-8LIckSPhPCpTU", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "7YaaSUFI3pISSczCq_KTLxAWJuV9GadOO7n94G5lEfU", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "QYvx1qpzgbEJoK1EOHCaWbIyB2SOCOXzljL48Q94R5Q", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "D6t7gRjnfyfSCP-VE2wzAvvRxQfNm9ofQBFuQKfhE4Q", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "4KauPhs6tHUY1hN5im0Uu0-a87yWLXrgk5NP8KNfTX0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "AutoScaling", + "Auto Scaling groups", + "500", + "0", + "Green" + ] + } + ] + } + }, + "P1jhKWEmLa": { + "metadata": { + "id": "P1jhKWEmLa", + "name": "RDS Total Storage Quota", + "description": "Checks for usage that is more than 80% of the RDS Total Storage Quota Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "P1jhKWEmLa", + "timestamp": "2023-11-22T03:11:40Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "Ksn-oz6Nj7Jw_HGD1Sy8vQS26WB6YJElnIuXTXkPs30", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "RDS", + "Storage quota (GB)", + "100000", + "25", + "Green" + ] + } + ] + } + }, + "gW7HH0l7J9": { + "metadata": { + "id": "gW7HH0l7J9", + "name": "CloudFormation Stacks", + "description": "Checks for usage that is more than 80% of the CloudFormation Stacks Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nCloudFormation Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "gW7HH0l7J9", + "timestamp": "2023-11-26T01:20:00Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 3, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-east-1", + "resourceId": "PmPVmYtj62OTv9qJLzrSZq5d5kPhT9QTlXS06-KEN2I", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "CloudFormation", + "Stacks", + "2000", + "2", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "NyCUG_blIHco1_oB_rdDZEkjo7l4xEaB6bhAjjg-Ma0", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "CloudFormation", + "Stacks", + "2000", + "2", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "uJLL88FL2K4kNIg9wEphPjXZBxzJG7mCTj8Z36D4LKw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "CloudFormation", + "Stacks", + "2000", + "3", + "Green" + ] + } + ] + } + }, + "rT7WW0l7J9": { + "metadata": { + "id": "rT7WW0l7J9", + "name": "IAM Server Certificates", + "description": "Checks for usage that is more than 80% of the IAM Server Certificates Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nIAM Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "rT7WW0l7J9", + "timestamp": "2023-11-23T21:27:00Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "2WAKjyOU9HiV1bJmiyInFZ1KDfWioM5YsUVhR5foqxM", + "isSuppressed": false, + "metadata": [ + "-", + "IAM", + "Server certificates", + "20", + "0", + "Green" + ] + } + ] + } + }, + "keAhfbH5yb": { + "metadata": { + "id": "keAhfbH5yb", + "name": "RDS Event Subscriptions", + "description": "Checks for usage that is more than 80% of the RDS Event Subscriptions Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "keAhfbH5yb", + "timestamp": "2023-11-22T10:01:09Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c5ftjdfkMr": { + "metadata": { + "id": "c5ftjdfkMr", + "name": "DynamoDB Write Capacity", + "description": "Checks for usage that is more than 80% of the DynamoDB Provisioned Throughput Limit for Writes per Account. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nDynamoDB Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "c5ftjdfkMr", + "timestamp": "2023-11-23T12:03:21Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 17, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "n0XUjeQd1QLpbFe9NynBq8jbEnXqAzUE1QyLQStJwHo", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "ZMOBr9f4XU00QTf2zfpP6K3i1ALWwlk2rHn8qeFLSFc", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-3", + "resourceId": "E93gEMiPQQy4ZPdYeYLduyNAdyztB4r5KHRfoG4tthk", + "isSuppressed": false, + "metadata": [ + "ap-northeast-3", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "mqLHcEU063eQNzthZUUGbHv6e9m-PV3kXTo43zi_-Sc", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "43YfX8NabFnxisoJ1ThFof85GP3ojWEnxN-DV6_Hocs", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "DJ9LJ5M0RK9m38ryEF03d4-prs4KnueOiaoqLnFidA0", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "gfy33DMmK-Pmp9hcwedpP3zSC-PQNWrTPsMywWZ2L8Q", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "r2-fe8eVpyJW179L9dwtOxv0SKgd0mqyfWoe-2D1894", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "0NbtJFovOoej7FHpfIk5g5anq2f92BpLQwzCp6ewUVA", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "plXokomlkLIk_AixRTv07Wg9nFmNW4Xl56kLlWUBBDQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "XGZKcMK-7IjAGFsiPt5vcm_e6eI4ALWAwFX7VFuAH5E", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "ivemc7zsrcDecdL_Mg-dwJnuYJ4-rFu1HV8NNCkIz1k", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "aUGvSNOWIgNG69KA4Z8d6cra8GWKI1ysi48wd9pOrEo", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "lqHqUjvNuWDDz4tZxaH_Qj5L6X54iQrUubGvVHMUbcM", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "6i_dKXsSYKxjjEEnlXiVSRhP5b15eQQJQxz_YPN-ubQ", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "DqdOK3r9BEAUPWMiU3kHnHkaLH8f2h0QO5wNb8rPzrU", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "MAHMlxLlnBjZRB6BVJJWrthCAZX29v4mKkuLazMQ8Uo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "DynamoDB", + "DynamoDB Write Capacity", + "80000", + "0", + "Green" + ] + } + ] + } + }, + "nO7SS0l7J9": { + "metadata": { + "id": "nO7SS0l7J9", + "name": "IAM Instance Profiles", + "description": "Checks for usage that is more than 80% of the IAM Instance Profiles Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nIAM Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "nO7SS0l7J9", + "timestamp": "2023-11-24T21:00:18Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "HezvUYantuOovlsV3Z6jtBcpN5jX1X8LAfWgkw7FzFE", + "isSuppressed": false, + "metadata": [ + "-", + "IAM", + "Instance profiles", + "5000", + "1451", + "Green" + ] + } + ] + } + }, + "dBkuNCvqn5": { + "metadata": { + "id": "dBkuNCvqn5", + "name": "RDS Max Auths per Security Group", + "description": "Checks for usage that is more than 80% of the RDS Max Auths per Security Group Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dBkuNCvqn5", + "timestamp": "2023-11-21T09:05:49Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "gjqMBn6pjz": { + "metadata": { + "id": "gjqMBn6pjz", + "name": "RDS Clusters", + "description": "Checks for usage that is more than 80% of the RDS Clusters Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "gjqMBn6pjz", + "timestamp": "2023-11-21T09:28:45Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "ty3xfcdfMr": { + "metadata": { + "id": "ty3xfcdfMr", + "name": "Route 53 Reusable Delegation Sets", + "description": "Checks for usage that is more than 80% of the Route 53 Reusable Delegation Sets Limit per account. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRoute 53 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "ty3xfcdfMr", + "timestamp": "2023-11-26T05:22:24Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "TX0gENU9CffK7854BKTRiZAOgtB3BlMn6JT7l8rutC0", + "isSuppressed": false, + "metadata": [ + "-", + "Route53", + "Route 53 Reusable Delegation Sets", + "100", + "0", + "Green" + ] + } + ] + } + }, + "gfZAn3W7wl": { + "metadata": { + "id": "gfZAn3W7wl", + "name": "RDS DB Security Groups", + "description": "Checks for usage that is more than 80% of the RDS DB Security Groups Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "gfZAn3W7wl", + "timestamp": "2023-11-25T08:02:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "jL7PP0l7J9": { + "metadata": { + "id": "jL7PP0l7J9", + "name": "VPC", + "description": "Checks for usage that is more than 80% of the VPC Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nVPC Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "jL7PP0l7J9", + "timestamp": "2023-11-22T13:56:18Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "ZpKc6vF5jaAhIVjmf-CAjUritBMOzEfg9QN0mYNil6A", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "CjTTdZeA89UBEXILRqUH84hGxBpa41O7szcL2hLmCt0", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "9V-1bCaKBGuU1eJ5ucUlSvCebkANEYSTplpqb68_bzQ", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "VPC", + "VPCs", + "5", + "1", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "VXg8axaOViP8_tsbglwgoDaQm0LKXCbkHUQ0QANCOX4", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "VPC", + "VPCs", + "5", + "1", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "9DlhgxVnIfNeeVy9mEytvDOX3_sa5BkAcVPmKnR-oBc", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "yQNoc5zyF4rigVpdNTsApeZV-ADWFaAvyreTL7TgvEk", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "CjAFxaYichaOjcGpd8qSPc5qCvAEEZq3Rx9Z7HEUjuM", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "VPC", + "VPCs", + "500", + "2", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "guFvHAoi0gdkukOnAahJcMTIAbmYMK_ZUK1Sig4S5qs", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "avvKEBoqypBNOebybZ18aSj_txWurcQZ9qb3KtDMgAQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "VPC", + "VPCs", + "500", + "31", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "-tTt_uF6hyvt1AfwF2eS4qrrGnuHE8ea26oZWDZnjPA", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "suCCHR5p3zUlg4D1TGbF_kIBWdLHjwK50jrK1tudNpQ", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "pnD-DRLOeQ3CltgwngI9J0J06a8XpkEkr4w1gxptn0o", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "VPC", + "VPCs", + "5", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "ElTQMkocn3SbvIpwYuLg8IBMIw9CKvVb-9P1s_oRVOA", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "VPC", + "VPCs", + "500", + "5", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "qVpJEwpwzQJYn6jMmAf_gfeB8pXsAU4S0QG99HZBBbg", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "VPC", + "VPCs", + "500", + "44", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "P4sT1eIxxklmEZsYyI0V6jE8J1ROFAtW7CNhSnjeTEc", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "VPC", + "VPCs", + "10", + "0", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "6uWfPHxxCO_2PBYFHYqOHIlVyiYe3-AF_BeT2jMzkzg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "VPC", + "VPCs", + "500", + "47", + "Green" + ] + } + ] + } + }, + "dYWBaXaaMM": { + "metadata": { + "id": "dYWBaXaaMM", + "name": "RDS Subnet Groups", + "description": "Checks for usage that is more than 80% of the RDS Subnet Groups Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nRDS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dYWBaXaaMM", + "timestamp": "2023-11-25T19:23:37Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "us-west-2", + "resourceId": "QavnafO3Grxm83M9AXF2UvN8Yr3foLoRMWGClERa9-c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "RDS", + "Subnet groups", + "50", + "5", + "Green" + ] + } + ] + } + }, + "0Xc6LMYG8P": { + "metadata": { + "id": "0Xc6LMYG8P", + "name": "EC2 On-Demand Instances", + "description": "Checks for usage that is more than 80% of the EC2 On-Demand Instances Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEC2 Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "0Xc6LMYG8P", + "timestamp": "2023-11-21T05:27:31Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 3, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "M7kgYkQrDWunNi03LSJ6ilE6fSwESrpD4yYH0IhigEY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EC2", + "On-Demand instances - Standard", + "57468", + "4", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "Vk62WuJJYCaWizL_Lq3CMlMY2UuK6rBayXOhbL3XrYA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EC2", + "On-Demand instances - Standard", + "57468", + "8", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "lIi1cavxwxYc43BecsQMJtD9FidDK6rEhSg9lBOpM1o", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EC2", + "On-Demand instances - Standard", + "57468", + "234", + "Green" + ] + } + ] + } + }, + "dH7RR0l6J3": { + "metadata": { + "id": "dH7RR0l6J3", + "name": "EBS General Purpose SSD (gp3) Volume Storage", + "description": "Checks for usage that is more than 80% of the EBS General Purpose SSD (gp3) Volume Storage Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dH7RR0l6J3", + "timestamp": "2023-11-25T08:17:52Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "1Q_oyY7MEdREJpYy8f3KIljYqGF_D7AiKUaL2NNwuE4", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "ttcp1kPs4Qv_sFU5qD1a_3MxqFO3xsZ0wu6ZksOgE54", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "8qTngV9icMVXCpM6H3ziirPI29Kcmr0Q-3o7eGkbK2M", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "llU8Oc9U2IlMa-8NJe9oKw1W0-reeCvYa2m0VizNIfg", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "jKMG4HVJK7DxEPzNpw8Ghgn3Jv-BqVNvHkI-cEQlrsU", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "dYf4S4LtnAeADDheAaMR_pkrLAQwUJSv5QGQlmihFpk", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "ki9AURl_bGGirvuG4drewRIiLpXjzAw2M7ClZwb4NrY", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "500", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "NDeKolP3R_atEqStRA2VYSMujo7GKC6ksuRqd9fQ62I", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "OoMglTJlFQ0Tb5kHzFqHoykrGqOzV6QSJnQdlfPSLyY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "551", + "0.293", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "pf6TphIyxBp9LZxbDak1pgzuW68o4WMvVEYDH0Ap_Ag", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "E0xuf5gAS16Lnj8F4ExiH0HfgyocDqobN55X5IYvtrw", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "Zsy4OJn-OmPHkKHCgEbW83e1FKJWrGnu512qa4TBSVg", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "yjgoDavRVUpx6Ws72SpMccg93D-gH80iP0TbrqQ3f_M", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "449", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "Sd2S1tVp4GsgizUQvqZK9Swc62kiwXyy7Lbl1gKHbZA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "General Purpose SSD (gp3) volume storage", + "643", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "YvZuJ3P1XPR-C1ZgutEz9lH_0R5VNO2PIvTL5jT3WhQ", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "General Purpose SSD (gp3) volume storage", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "ActaggDzrix2WZocguRYkx2NsQ7HetYoUMIFX2rONFo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "General Purpose SSD (gp3) volume storage", + "750", + "5.475", + "Green" + ] + } + ] + } + }, + "dH7RR0l6J9": { + "metadata": { + "id": "dH7RR0l6J9", + "name": "EBS General Purpose SSD (gp2) Volume Storage", + "description": "Checks for usage that is more than 80% of the EBS General Purpose SSD (gp2) Volume Storage Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nEBS Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "dH7RR0l6J9", + "timestamp": "2023-11-22T20:43:53Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 16, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "region": "ap-northeast-1", + "resourceId": "RKQDnGPiZKKgtil2hm_ExOt5iAtTgjLEIX_PjQr-B_0", + "isSuppressed": false, + "metadata": [ + "ap-northeast-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-northeast-2", + "resourceId": "0Uq0tbC-opbYjGz3cCFjS1Kr5XkVARBhroVEMqMzeyU", + "isSuppressed": false, + "metadata": [ + "ap-northeast-2", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-south-1", + "resourceId": "NA_0rAobtMvTMYF3_L2XGlVt4cnqqreLyiqrTcEpo1U", + "isSuppressed": false, + "metadata": [ + "ap-south-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-1", + "resourceId": "LWThPmugAFTHdD6wfqIl-YkIePR9DsBIRbzw6yTgttg", + "isSuppressed": false, + "metadata": [ + "ap-southeast-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ap-southeast-2", + "resourceId": "mNE_0gaHbmvqDb9iRdVKEbw-4SoCIJsNyPpZgZpxdBI", + "isSuppressed": false, + "metadata": [ + "ap-southeast-2", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "ca-central-1", + "resourceId": "yMTFXJteuuBR3mhJJW8aRfCZCJF9Btz7lxSCWc9kQi4", + "isSuppressed": false, + "metadata": [ + "ca-central-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-central-1", + "resourceId": "-UaEYfk-EEhZkUPR1ugvmxP1JrqCz1VvL6R39rui-JE", + "isSuppressed": false, + "metadata": [ + "eu-central-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "266", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-north-1", + "resourceId": "iOnIUkMemK2-N9KuzqWw5Raz_ODjlUxEv9NUR5V9R0A", + "isSuppressed": false, + "metadata": [ + "eu-north-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-1", + "resourceId": "bDWO6OC-SuTOZRKOFEgTJZRH3IQXn-TrtGwgKK7T0iY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-2", + "resourceId": "-AFKPdt5Tv0A9h_LQ9XGiOqZGr3srkfEajaaVl8sFuk", + "isSuppressed": false, + "metadata": [ + "eu-west-2", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "eu-west-3", + "resourceId": "4BcFLg60plAO6Kri4TTAWJ9L-2n7i-BFL1NoONaXckg", + "isSuppressed": false, + "metadata": [ + "eu-west-3", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "114", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "sa-east-1", + "resourceId": "-OAE_1IhkVLIroVFaQrG-tuO5hpRkiii_Juh-TC1X_o", + "isSuppressed": false, + "metadata": [ + "sa-east-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-1", + "resourceId": "qjmozeN7w4JI_6TzhUNUI4JJrO6VUWf0YI1xK0_i1nk", + "isSuppressed": false, + "metadata": [ + "us-east-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "87", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-east-2", + "resourceId": "fz9L0bBBcjQ6xgkOJ5lLdvKy-fiw4Bu6a9TkgXZm8II", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-1", + "resourceId": "uy7WXRcJgygH4WDHfe95na29O1thiqGfBlGNV53sJus", + "isSuppressed": false, + "metadata": [ + "us-west-1", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "50", + "0.000", + "Green" + ] + }, + { + "status": "ok", + "region": "us-west-2", + "resourceId": "XnwbMDXOtERv51b94hA3dQOG1ODCZhYOP8I2AX2sYKI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "EBS", + "General Purpose SSD (gp2) volume storage (TiB)", + "744", + "2.873", + "Green" + ] + } + ] + } + }, + "qS7VV0l7J9": { + "metadata": { + "id": "qS7VV0l7J9", + "name": "IAM Users", + "description": "Checks for usage that is more than 80% of the IAM Users Limit. Values are based on a snapshot, so your current usage might differ. Limit and usage data can take up to 24 hours to reflect any changes. In cases where limits have been recently increased, you may temporarily see utilization that exceeds the limit.
\n
\n

Alert Criteria


\nYellow: 80% of limit reached.
\nRed: 100% of limit reached.
\nBlue: Trusted Advisor was unable to retrieve utilization or limits in one or more regions.
\n
\n

Recommended Action


\nIf you expect to exceed a service limit, request an increase directly from the Service Quotas console. If Service Quotas doesn\u2019t support your service yet, you can create a support case in Support Center.
\n
\n

Additional Resources


\nIAM Limits", + "category": "service_limits", + "metadata": [ + "Region", + "Service", + "Limit Name", + "Limit Amount", + "Current Usage", + "Status" + ] + }, + "reports": { + "checkId": "qS7VV0l7J9", + "timestamp": "2023-11-23T04:40:10Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "ok", + "resourceId": "Y_-SzFTk3SNkdD8xaT3HvjhOh1sEKfml492_wAkyDE0", + "isSuppressed": false, + "metadata": [ + "-", + "IAM", + "Users", + "5000", + "109", + "Green" + ] + } + ] + } + } + }, + "performance": { + "c18d2gz136": { + "metadata": { + "id": "c18d2gz136", + "name": "Amazon DynamoDB Auto Scaling Not Enabled", + "description": "Checks if your Amazon DynamoDB tables and global secondary indexes have auto scaling or on-demand enabled.
\n
\nAmazon DynamoDB auto scaling uses the AWS Application Auto Scaling service to dynamically adjust provisioned throughput capacity on your behalf, in response to actual traffic patterns. This enables a table or a global secondary index to increase its provisioned read and write capacity to handle sudden increases in traffic, without throttling. When the workload decreases, Application Auto Scaling decreases the throughput so that you don't pay for unused provisioned capacity.
\n
\nYou can adjust the check configuration using the parameters in your AWS Config rules.
\nFor more information, see Managing throughput capacity automatically with DynamoDB auto scaling.
\n
\nSource
\nAWS Config Managed Rule: dynamodb-autoscaling-enabled
\n
\nAlert Criteria
\nYellow: Auto scaling is not enabled for your Amazon DynamoDB tables and/or global secondary indexes.
\n
\nRecommended Action
\nUnless you already have a mechanism to automatically scale the provisioned throughput of your Amazon DynamoDB table and/or the global secondary indexes based on your workload requirement, consider turning on auto scaling for your Amazon DynamoDB tables.
\nFor more information, see Using the AWS Management Console with DynamoDB auto scaling.
\n", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz136", + "status": "not_available" + } + }, + "COr6dfpM04": { + "metadata": { + "id": "COr6dfpM04", + "name": "Amazon EBS under-provisioned volumes", + "description": "Checks the Amazon Elastic Block Storage (Amazon EBS) volumes that were running at any time during the lookback period. This check alerts you if any EBS volumes were under-provisioned for your workloads. Consistent high utilization can indicate optimized, steady performance, but can also indicate that an application does not have enough resources.
\n
\n

Source


\nAWS Compute Optimizer
\n
\n

Alert Criteria


\nYellow: An EBS Volume that was under-provisioned during the lookback period. To determine if a volume is under-provisioned, we consider all default CloudWatch metrics (including IOPS and throughput). The algorithm used to identify under-provisioned EBS volumes follows AWS best practices. The algorithm is updated when a new pattern has been identified.
\n
\n

Recommended Action


\nConsider upsizing volumes that have high utilization.
\n
\n

Additional Resources


\nFor more information about this recommendation, see the Trusted Advisor documentation.\n", + "category": "performance", + "metadata": [ + "Status", + "Region/AZ", + "Volume ID", + "Volume Type", + "Volume Size(GB)", + "Volume Baseline IOPS", + "Volume Burst IOPS", + "Volume Baseline Throughput", + "Volume Burst Throughput", + "Recommended Volume Type", + "Recommended Volume Size(GB)", + "Recommended Volume Baseline IOPS", + "Recommended Volume Burst IOPS", + "Recommended Volume Baseline Throughput", + "Recommended Volume Burst Throughput", + "Lookback Period (days)", + "Performance Risk", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "COr6dfpM04", + "timestamp": "2023-11-26T12:21:43Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [] + } + }, + "COr6dfpM06": { + "metadata": { + "id": "COr6dfpM06", + "name": "AWS Lambda under-provisioned functions for memory size", + "description": "Checks the AWS Lambda functions that were invoked at least once during the lookback period. This check alerts you if any of your Lambda functions were under-provisioned for memory size. When you have Lambda functions that are under-provisioned for memory size, these functions take longer time to complete.
\n
\n

Source


\nAWS Compute Optimizer
\n
\n

Alert Criteria


\nYellow: A Lambda function that was under-provisioned for memory size during the lookback period. To determine if a Lambda function is under-provisioned, we consider all default CloudWatch metrics for that function. The algorithm used to identify under-provisioned Lambda functions for memory size follows AWS best practices. The algorithm is updated when a new pattern has been identified.
\n
\n

Recommended Action


\nConsider increasing the memory size of your Lambda functions.
\n
\n

Additional Resources


\nFor more information about this recommendation, see the Trusted Advisor documentation.\n", + "category": "performance", + "metadata": [ + "Status", + "Region/AZ", + "Function Name", + "Function Version", + "Memory Size(MB)", + "Recommended Memory Size(MB)", + "Lookback Period (days)", + "Performance Risk", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "COr6dfpM06", + "timestamp": "2023-11-27T12:21:44Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Wxdfp4B1L2": { + "metadata": { + "id": "Wxdfp4B1L2", + "name": "AWS Well-Architected high risk issues for performance efficiency", + "description": "Checks for high risk issues (HRIs) for your workloads in the performance pillar. This check is based on your AWS-Well Architected reviews. Your check results depend on whether you completed the workload evaluation with AWS Well-Architected.
\n
\n

Alert Criteria


\nRed: At least one active high risk issue was identified in the performance pillar for AWS Well-Architected.
\nGreen: No active high risk issues were detected in the performance pillar for AWS Well-Architected.
\n
\n

Recommended Action


\nAWS Well-Architected detected high risk issues during your workload evaluation. These issues present opportunities to reduce risk and save money. Sign in to the AWS Well-Architected tool to review your answers and take action to resolve your active issues.", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Workload ARN", + "Workload Name", + "Reviewer Name", + "Workload Type", + "Workload Started Date", + "Workload Last Modified Date", + "Number of identified HRIs for Performance", + "Number of HRIs resolved for Performance", + "Number of questions answered for Performance", + "Total number of questions in Performance pillar", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Wxdfp4B1L2", + "timestamp": "2023-11-27T12:21:48Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c18d2gz102": { + "metadata": { + "id": "c18d2gz102", + "name": "Amazon EC2 Auto Scaling Group is not Associated with a Launch Template", + "description": "Checks if an Amazon EC2 Auto Scaling group is created from an EC2 launch template.
\n
Use a launch template to create your EC2 Auto Scaling groups to ensure access to the latest Auto Scaling group features and improvements. For example, versioning and multiple instance types.
\n
For more information, see Launch templates
\n
\nSource
\nAWS Config Managed Rule: autoscaling-launch-template
\n
\nAlert Criteria
\nYellow: The Amazon EC2 Auto Scaling group isn\u2019t associated with a valid launch template.
\n
\nRecommended Action
\nUse an EC2 launch template to create your Amazon EC2 Auto Scaling groups.
\n
\nFor more information, see Create a launch template for an Auto Scaling group.
\n
\nAdditional Resources
\nLaunch templates
\nHow to create Launch templates", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz102", + "status": "not_available" + } + }, + "B913Ef6fb4": { + "metadata": { + "id": "B913Ef6fb4", + "name": "Amazon Route 53 Alias Resource Record Sets", + "description": "Checks for resource record sets that can be changed to alias resource record sets to improve performance and save money. An alias resource record set routes DNS queries to an AWS resource (for example, an Elastic Load Balancing load balancer or an Amazon S3 bucket) or to another Route 53 resource record set. When you use alias resource record sets, Route 53 routes your DNS queries to AWS resources free of charge. Hosted zones created by AWS services won\u2019t appear in your check results.
\n
\n

Alert Criteria


\nYellow: A resource record set is a CNAME to an Amazon S3 website.
\nYellow: A resource record set is a CNAME to an Amazon CloudFront distribution.
\nYellow: A resource record set is a CNAME to an Elastic Load Balancing load balancer.
\n
\n

Recommended Action


\nReplace the listed CNAME resource record sets with alias resource record sets; see Choosing Between Alias and Non-Alias Resource Record Sets. You also need to change the record type from CNAME to A or AAAA, depending on the AWS resource; see Values that You Specify When You Create or Edit Amazon Route 53 Resource Record Sets.
\n
\n

Additional Resources


\nRouting Queries to AWS Resources", + "category": "performance", + "metadata": [ + "Hosted Zone Name", + "Hosted Zone ID", + "Resource Record Set Name", + "Resource Record Set Type", + "Resource Record Set Identifier", + "Alias Target", + "Status" + ] + }, + "reports": { + "checkId": "B913Ef6fb4", + "timestamp": "2023-11-21T04:36:15Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "j3DFqYTe29": { + "metadata": { + "id": "j3DFqYTe29", + "name": "Large Number of EC2 Security Group Rules Applied to an Instance", + "description": "Checks for Amazon Elastic Compute Cloud (EC2) instances that have a large number of security group rules. Performance can be degraded if an instance has a large number of rules.
\n
\n

Alert Criteria


\nYellow: An Amazon EC2-VPC instance has more than 50 security group rules.
\nYellow: An Amazon EC2-Classic instance has more than 100 security group rules.
\n
\n

Recommended Action


\nReduce the number of rules associated with an instance by deleting unnecessary or overlapping rules. For more information, see Deleting Rules from a Security Group.
\n
\n

Additional Resources


\nAmazon EC2 Security Groups", + "category": "performance", + "metadata": [ + "Region", + "Instance ID", + "Instance Name", + "VPC ID", + "Total Inbound Rules", + "Total Outbound Rules" + ] + }, + "reports": { + "checkId": "j3DFqYTe29", + "timestamp": "2023-11-23T20:02:03Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "796d6f3D83": { + "metadata": { + "id": "796d6f3D83", + "name": "CloudFront Content Delivery Optimization", + "description": "Checks for cases where data transfer from Amazon Simple Storage Service (Amazon S3) buckets could be accelerated by using Amazon CloudFront, the AWS global content delivery service. When you configure CloudFront to deliver your content, requests for your content are automatically routed to the nearest edge location where content is cached, so it can be delivered to your users with the best possible performance. A high ratio of data transferred out to the data stored in the bucket indicates that you could benefit from using Amazon CloudFront to deliver the data. \n
\nTo estimate the retrieval activity of users, only data transferred by using a GET request is counted for this check. In addition, the transfer activity from the last 24 hours is not included. \n
\n
\n

Alert Criteria


\nYellow: The amount of data transferred out of the bucket to your users by GET requests in the 30 days preceding the check is at least 25 times greater than the average amount of data stored in the bucket.
\nRed: The amount of data transferred out of the bucket to your users by GET requests in the 30 days preceding the check is at least 10 TB and at least 25 times greater than the average amount of data stored in the bucket.\n
\n
\n

Recommended Action


\nConsider using CloudFront for better performance; see Amazon CloudFront Product Details. \n
\nIf the data transferred is 10 TB per month or more, see Amazon CloudFront Pricing to explore possible cost savings.\n
\n
\n

Additional Resources


\nAmazon CloudFront Developer Guide
\nAWS Case Study: PBS", + "category": "performance", + "metadata": [ + "Region", + "Bucket Name", + "S3 Storage (GB)", + "Data Transfer Out (GB)", + "Ratio of Transfer to Storage", + "Status" + ] + }, + "reports": { + "checkId": "796d6f3D83", + "timestamp": "2023-11-23T01:29:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "PPkZrjsH2q": { + "metadata": { + "id": "PPkZrjsH2q", + "name": "Amazon EBS Provisioned IOPS (SSD) Volume Attachment Configuration", + "description": "Checks for Provisioned IOPS (SSD) volumes that are attached to an Amazon EBS-optimizable Amazon Elastic Compute Cloud (Amazon EC2) instance that is not EBS-optimized. Provisioned IOPS (SSD) volumes in the Amazon Elastic Block Store (Amazon EBS) are designed to deliver the expected performance only when they are attached to an EBS-optimized instance.
\n
\n

Alert Criteria


\nYellow: An Amazon EC2 instance that can be EBS-optimized has an attached Provisioned IOPS (SSD) volume but the instance is not EBS-optimized.
\n
\n

Recommended Action


\nCreate a new instance that is EBS-optimized, detach the volume, and reattach the volume to your new instance. For more information, see Amazon EBS-Optimized Instances and Attaching an Amazon EBS Volume to an Instance.
\n
\n

Additional Resources


\nAmazon EBS Volume Types
\nAmazon EBS Volume Performance", + "category": "performance", + "metadata": [ + "Region/AZ", + "Volume ID", + "Volume Name", + "Volume Attachment", + "Instance ID", + "Instance Type", + "EBS Optimized", + "Status" + ] + }, + "reports": { + "checkId": "PPkZrjsH2q", + "timestamp": "2023-11-21T21:19:31Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt014": { + "metadata": { + "id": "c1qf5bt014", + "name": "Amazon RDS resources major versions update is required", + "description": "Databases with the current major version for the DB engine won't be supported. We recommend that you upgrade to the latest major version which includes new functionality and enhancements.
\n
\n

Alert Criteria


\nRed: RDS resources are using end of support major versions
\n
\n

Recommended Action


\nUpgrade to the latest major version for the DB engine
\n
\n

Additional Resources



Amazon RDS releases new versions for the supported database engines to maintain your databases with the latest version. The new released versions may include bug fixes, security enhancements, and other improvements for the database engine. You can minimize the downtime required for the DB instance upgrade by using a blue/green deployment.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Engine Version Current", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt014", + "timestamp": "2023-11-27T12:22:33Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt017": { + "metadata": { + "id": "c1qf5bt017", + "name": "Amazon RDS DB clusters support only up to 64 TiB volume", + "description": "Your DB clusters support volumes up to 64 TiB. The latest engine versions support volumes up to 128 TiB. We recommend that you upgrade the engine version of your DB cluster to latest versions to support volumes up to 128 TiB.
\n
\n

Alert Criteria


\nYellow: DB clusters have support for volumes only up to 64 TiB
\n
\n

Recommended Action


\nUpgrade the engine version of your DB clusters to support volumes up to 128 TiB
\n
\n

Additional Resources



When you scale up your application on a single Amazon Aurora DB cluster, you may not reach the limit if the storage limit is 128 TiB. The increased storage limit helps to avoid deleting the data or splitting the database across multiple instances.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Engine Version Current", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt017", + "timestamp": "2023-11-27T12:22:36Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt016": { + "metadata": { + "id": "c1qf5bt016", + "name": "Amazon RDS resources using end of support engine edition under license-included", + "description": "We recommend that you upgrade the major version to the latest engine version supported by Amazon RDS to continue with the current license support. The engine version of your database won't be supported with the current license.
\n
\n

Alert Criteria


\nRed: RDS resources are using end of support engine edition under license-included model
\n
\n

Recommended Action


\nWe recommend that you upgrade your database to the latest supported version in Amazon RDS to continue using the licensed model.
\n
\n

Additional Resources



\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Engine Version Current", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt016", + "timestamp": "2023-11-27T12:22:36Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt015": { + "metadata": { + "id": "c1qf5bt015", + "name": "Amazon RDS resources instance class update is required", + "description": "Your database is running a previous generation DB instance class. We have replaced DB instance classes from a previous generation with DB instance classes with better cost, performance, or both. We recommend that you run your DB instance with a DB instance class from a newer generation.
\n
\n

Alert Criteria


\nRed: DB instances are using end of support DB instance class
\n
\n

Recommended Action


\nUpgrade to latest DB instance class
\n
\n

Additional Resources



\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Db Instance Class", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt015", + "timestamp": "2023-11-27T12:22:37Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1dfprch02": { + "metadata": { + "id": "c1dfprch02", + "name": "Amazon EFS Throughput Mode Optimization", + "description": "Checks whether the customer's Amazon EFS file system is currently configured to use Bursting Throughput mode. File systems in EFS's Bursting Throughput mode [1] deliver a consistent baseline level of throughput (50 KiB/s per GiB of data in EFS Standard storage), and use a credit model to deliver higher levels of \"burst throughput\" performance when \"burst credits\" are available. When you exhaust your burst credits, your file system performance is throttled to this lower, baseline level, which can result in slowness, timeouts, or other forms of performance impact for your end users or applications.
\n
\nAlert Criteria
\nYellow: File system is using Bursting throughput mode.
\n
\nRecommended Action
\nTo allow your users and applications to achieve their desired throughput, we recommend that you update your file system configuration to Elastic Throughput mode [2]. When in Elastic Throughput mode, your file system can achieve up to 10 GiB/s of read throughput or 3 GiB/s of write throughput - depending on the AWS Region [3], and you only pay for the throughput you use. Please note that you can update your file system configuration to switch between Elastic and Bursting throughput modes on demand, and that File Systems in Elastic Throughput mode accrue additional charges for data transfer [4].
\n
\nAdditional Resources
\nFor more information, see [1] Amazon EFS Performance Throughput Modes, [2] Amazon EFS Performance Elastic Throughput Mode, [3] Amazon EFS Quotas and Limits, and [4] Amazon EFS Pricing.", + "category": "performance", + "metadata": [ + "Status", + "Region", + "EFS File System ID", + "Throughput Mode", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1dfprch02", + "timestamp": "2023-11-27T12:22:38Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt000": { + "metadata": { + "id": "c1qf5bt000", + "name": "Amazon RDS magnetic volume is in use", + "description": "Your DB instances are using magnetic storage. Magnetic storage isn't recommended for most of the DB instances. Choose a different storage type: General Purpose (SSD) or Provisioned IOPS.
\n
\n

Alert Criteria


\nYellow: RDS resources are using magnetic storage
\n
\n

Recommended Action


\nChoose a different storage type: General Purpose (SSD) or Provisioned IOPS
\n
\n

Additional Resources



Magnetic storage is an earlier generation storage type. The General Purpose (SSD) or Provisioned IOPS is the recommended storage type for new storage requirements. These storage types provide higher and consistent performance, and improved storage size options.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt000", + "timestamp": "2023-11-27T12:22:40Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt009": { + "metadata": { + "id": "c1qf5bt009", + "name": "Amazon RDS DB instances in the clusters with heterogeneous instance classes", + "description": "We recommend that you use the same DB instance class and size for all the DB instances in your DB cluster.
\n
\n

Alert Criteria


\nRed: DB clusters have the DB instances with heterogeneous instance classes
\n
\n

Recommended Action


\nUse the same instance class and size for all the DB instances in your DB cluster
\n
\n

Additional Resources



When the DB instances in your DB cluster use different DB instance classes or sizes, there can be an imbalance in the workload for the DB instances. During a failover, one of the reader DB instance changes to a writer DB instance. If the DB instances use the same DB instance class and size, the workload can be balanced for the DB instances in your DB cluster.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt009", + "timestamp": "2023-11-27T12:22:44Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt008": { + "metadata": { + "id": "c1qf5bt008", + "name": "Amazon RDS DB instances in the clusters with heterogeneous instance sizes", + "description": "We recommend that you use the same DB instance class and size for all the DB instances in your DB cluster.
\n
\n

Alert Criteria


\nRed: DB clusters have the DB instances with heterogeneous instance sizes
\n
\n

Recommended Action


\nUse the same instance class and size for all the DB instances in your DB cluster
\n
\n

Additional Resources



When the DB instances in your DB cluster use different DB instance classes or sizes, there can be an imbalance in the workload for the DB instances. During a failover, one of the reader DB instance changes to a writer DB instance. If the DB instances use the same DB instance class and size, the workload can be balanced for the DB instances in your DB cluster.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Recommended Value", + "Engine Name", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt008", + "timestamp": "2023-11-27T12:22:45Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt032": { + "metadata": { + "id": "c1qf5bt032", + "name": "Amazon RDS innodb_stats_persistent parameter is turned off", + "description": "Your DB instance isn't configured to persist the InnoDB statistics to the disk. When the statistics aren't stored, they are recalculated each time the instance restarts and the table accessed. This leads to variations in the query execution plan. You can modify the value of this global parameter at the table level.
\n
\n
\nWe recommend that you set the innodb_stats_persistent parameter value to ON.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have optimizer statistics that aren't persisted to the disk
\n
\n

Recommended Action


\nSet the innodb_stats_persistent parameter value to ON
\n
\n

Additional Resources



If the innodb_stats_persistent parameter is set to ON, the optimizer statistics are persisted when the instance restarts. This improves the execution plan stability and consistent query performance. You can modify global statistics persistence at the table level by using the clause STATS_PERSISTENT when you create or alter a table.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt032", + "timestamp": "2023-11-27T12:22:46Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt033": { + "metadata": { + "id": "c1qf5bt033", + "name": "Amazon RDS innodb_open_files parameter is low", + "description": "The innodb_open_files parameter controls the number of files InnoDB can open at one time. InnoDB opens all of the log and system tablespace files when mysqld is running.
\n
\n
\nYour DB instance has a low value for the maximum number of files InnoDB can open at one time. We recommend that you set the innodb_open_files parameter to a minimum value of 65.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have the InnoDB open files setting misconfigured
\n
\n

Recommended Action


\nSet the innodb_open_files parameter to a minimum value of 65
\n
\n

Additional Resources



The innodb_open_files parameter controls the number of files InnoDB can open at one time. InnoDB keeps all the log files and the system tablespace files open when mysqld is running. InnoDB also needs to open a few .ibd files, if file-per-table storage model is used. When the innodb_open_files setting is low, it impacts the database performance and the server may fail to start.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt033", + "timestamp": "2023-11-27T12:22:48Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Bh2xRR2FGH": { + "metadata": { + "id": "Bh2xRR2FGH", + "name": "Amazon EC2 to EBS Throughput Optimization", + "description": "Checks for Amazon EBS volumes whose performance might be affected by the maximum throughput capability of the Amazon EC2 instance they are attached to. \r\nTo optimize performance, you should ensure that the maximum throughput of an EC2 instance is greater than the aggregate maximum throughput of the attached EBS volumes. \r\nThis check computes the total EBS volume throughput for each five-minute period in the preceding day (UTC) for each EBS-optimized instance and alerts you if usage in more than half of those periods was greater than 95% of the maximum throughput of the EC2 instance.

\r\n

Alert Criteria


Yellow: In the preceding day (UTC), the aggregate throughput (megabytes/sec) of the EBS volumes attached to the EC2 instance exceeded 95% of the published throughput between the instance and the EBS volumes more than 50% of time.

\r\n

Recommended Action


Compare the maximum throughput of your EBS volumes \r\n(see Amazon EBS Volume Types) \r\nwith the maximum throughput of the EC2 instance they are attached to \r\n(see Instance Types That Support EBS Optimization). \r\nConsider attaching your volumes to an instance that supports higher throughput to EBS for optimal performance.

\r\n

Additional Resources


Amazon EBS Volume Types
\r\nAmazon EBS-Optimized Instances
\r\nMonitoring the Status of Your Volumes
\r\nAttaching an Amazon EBS Volume to an Instance
\r\nDetaching an Amazon EBS Volume from an Instance
\r\nDeleting an Amazon EBS Volume", + "category": "performance", + "metadata": [ + "Region", + "Instance ID", + "Instance Type", + "Status", + "Time Near Maximum" + ] + }, + "reports": { + "checkId": "Bh2xRR2FGH", + "timestamp": "2023-11-21T04:19:57Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt037": { + "metadata": { + "id": "c1qf5bt037", + "name": "Amazon RDS general_logging parameter is turned on", + "description": "The general logging is turned on for your DB instance. This setting is useful while troubleshooting the database issues. However, turning on general logging increases the amount of I/O operations and allocated storage space, which might result in contention and performance degradation.
\n
\n
\nCheck your requirements for general logging usage. We recommend that you set the general_logging parameter value to 0.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have general_logging turned on
\n
\n

Recommended Action


\nCheck your requirements for general logging usage. If it isn't mandatory, we recommend that you to set the general_logging parameter value to 0.
\n
\n

Additional Resources



The general query log is turned on when the general_log parameter value is 1. The general query log contains records of the database server operations. The server writes information to this log when clients connect or disconnect and the logs contain each SQL statement received from the clients. The general query log is useful when you suspect an error in a client and you want to find the information the client to sent to the database server.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt037", + "timestamp": "2023-11-27T12:22:50Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt021": { + "metadata": { + "id": "c1qf5bt021", + "name": "Amazon RDS InnoDB_Change_Buffering parameter using less than optimum value", + "description": "Change buffering allows a MySQL DB instance to defer a few writes, which are required to maintain secondary indexes. This feature was useful in environments with slow disks. The change buffering configuration improved the DB performance slightly but caused a delay in crash recovery and long shutdown times during upgrade.
\n
\n
\nWe recommend that you set the value of innodb_change_buffering parameter to NONE.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have innodb_change_buffering parameter set to a low optimum value
\n
\n

Recommended Action


\nSet innodb_change_buffering parameter value to NONE in your DB parameter groups
\n
\n

Additional Resources



\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt021", + "timestamp": "2023-11-27T12:22:51Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt020": { + "metadata": { + "id": "c1qf5bt020", + "name": "Amazon RDS DB memory parameters are diverging from default", + "description": "The memory parameters of the DB instances are significantly different from the default values. These settings can impact performance and cause errors.
\n
\n
\nWe recommend that you reset the custom memory parameters for the DB instance to their default values in the DB parameter group.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have memory parameters that diverge considerably from the default values
\n
\n

Recommended Action


\nReset the memory parameters to their default values
\n
\n

Additional Resources



\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt020", + "timestamp": "2023-11-27T12:22:51Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt025": { + "metadata": { + "id": "c1qf5bt025", + "name": "Amazon RDS autovacuum parameter is turned off", + "description": "The autovacuum parameter is turned off for your DB instances. Turning autovacuum off increases the table and index bloat and impacts the performance.
\n
\n
\nWe recommend that you turn on autovacuum in your DB parameter groups.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have autovacuum turned off
\n
\n

Recommended Action


\nTurn on the autovacuum parameter in your DB parameter groups
\n
\n

Additional Resources



PostgreSQL database requires periodic maintenance which is known as vacuuming. Autovacuum in PostgreSQL automates running VACCUUM and ANALYZE commands. This process gathers the table statistics and deletes the dead rows. When autovacuum is turned off, the increase of the table, index bloat, stale statistics will impact the database performance.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt025", + "timestamp": "2023-11-27T12:22:52Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt024": { + "metadata": { + "id": "c1qf5bt024", + "name": "Amazon RDS parameter groups not using huge pages", + "description": "Large pages can increase database scalability, but your DB instance isn't using large pages. We recommend that you set the use_large_pages parameter value to ONLY in the DB parameter group for your DB instance.
\n
\n

Alert Criteria


\nYellow: DB parameter groups don't use large pages
\n
\n

Recommended Action


\nSet the use_large_pages parameter value to ONLY in your DB parameter groups
\n
\n

Additional Resources



\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt024", + "timestamp": "2023-11-27T12:22:52Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt022": { + "metadata": { + "id": "c1qf5bt022", + "name": "Amazon RDS query cache parameter is turned on", + "description": "When changes require that your query cache is purged, your DB instance will appear to stall. Most workloads don't benefit from a query cache. The query cache was removed from MySQL version 8.0. We recommend that you set the query_cache_type parameter to 0.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have query cache turned on
\n
\n

Recommended Action


\nSet the query_cache_type parameter value to 0 in your DB parameter groups
\n
\n

Additional Resources



\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt022", + "timestamp": "2023-11-27T12:22:53Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt029": { + "metadata": { + "id": "c1qf5bt029", + "name": "Amazon RDS enable_indexscan parameter is turned off", + "description": "The query planner or optimizer can't use the index scan plan type when it is turned off.
\n
\n
\nWe recommend that you set the enable_indexscan parameter value to 1.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have indexscan parameter turned off
\n
\n

Recommended Action


\nSet the parameter enable_indexscan to 1
\n
\n

Additional Resources



When you turn off enable_indexscan parameter, it prevents the query planner from selecting an optimal execution plan. The query planner uses a different plan type, such as sequential scan which may increase the query cost and execution time.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt029", + "timestamp": "2023-11-27T12:22:54Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c1qf5bt028": { + "metadata": { + "id": "c1qf5bt028", + "name": "Amazon RDS enable_indexonlyscan parameter is turned off", + "description": "The query planner or optimizer can't use the index-only scan plan type when it is turned off.
\n
\n
\nWe recommend that you set the enable_indexonlyscan parameter value to 1.
\n
\n

Alert Criteria


\nYellow: DB parameter groups have indexonlyscan parameter turned off
\n
\n

Recommended Action


\nSet the parameter enable_indexonlyscan to 1
\n
\n

Additional Resources



When you turn off enable_indexonlyscan parameter, it prevents the query planner from selecting an optimal execution plan. The query planner uses a different plan type, such as index scan which can increase the query cost and execution time. The index only scan plan type retrieves the data without accessing the table data.\n

\nFor more information, please refer to the AWS Public documentation on: ", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "Parameter Name", + "Recommended Value", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c1qf5bt028", + "timestamp": "2023-11-27T12:22:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "N420c450f2": { + "metadata": { + "id": "N420c450f2", + "name": "CloudFront Alternate Domain Names", + "description": "Checks Amazon CloudFront distributions for alternate domain names (CNAMES) that have incorrectly configured DNS settings. If a CloudFront distribution includes alternate domain names, the DNS configuration for the domains must route DNS queries to that distribution.
\n
\nNote: This check assumes Amazon Route 53 DNS and Amazon CloudFront distribution are configured in the same AWS account. As such the Alert list may include resources otherwise working as expected due to DNS setting outsides of this AWS account.
\n
\n

Alert Criteria


\nYellow: A CloudFront distribution includes alternate domain names, but the DNS configuration is not correctly set up with a CNAME record or an Amazon Route 53 alias resource record.
\nYellow: A CloudFront distribution includes alternate domain names, but Trusted Advisor could not evaluate the DNS configuration because there were too many redirects.
\nYellow: A CloudFront distribution includes alternate domain names, but Trusted Advisor could not evaluate the DNS configuration for some other reason, most likely because of a timeout.\n

\n

Recommended Action


\nUpdate the DNS configuration to route DNS queries to the CloudFront distribution; see Using Alternate Domain Names (CNAMEs). If you're using Amazon Route 53 as your DNS service, see Routing Traffic to an Amazon CloudFront Web Distribution by Using Your Domain Name. If the check timed out, try refreshing the check.
\n
\n

Additional Resources


\nAmazon CloudFront Developer Guide", + "category": "performance", + "metadata": [ + "Status", + "Distribution ID", + "Distribution Domain Name", + "Alternate Domain Name", + "Reason" + ] + }, + "reports": { + "checkId": "N420c450f2", + "timestamp": "2023-11-23T17:12:42Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "tfg86AVHAZ": { + "metadata": { + "id": "tfg86AVHAZ", + "name": "Large Number of Rules in an EC2 Security Group", + "description": "Checks each Amazon Elastic Compute Cloud (EC2) security group for an excessive number of rules. If a security group has a large number of rules, performance can be degraded.\n
\nFor more information, see Amazon EC2 Security Groups.\n
\n
\n

Alert Criteria

\n
\nYellow: An Amazon EC2-VPC security group has more than 50 rules.\n
\nYellow: An Amazon EC2-Classic security group has more than 100 rules.\n
\n
\n

Recommended Action

\n
\nReduce the number of rules in a security group by deleting unnecessary or overlapping rules. For more information, see Deleting Rules from a Security Group.\n
\n
\n

Additional Resources

\n
\nAmazon EC2 Security Groups", + "category": "performance", + "metadata": [ + "Region", + "Security Group Name", + "Group ID", + "Description", + "Instance Count", + "VPC ID", + "Total Inbound Rules", + "Total Outbound Rules" + ] + }, + "reports": { + "checkId": "tfg86AVHAZ", + "timestamp": "2023-11-26T03:15:09Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "k3J2hns32g": { + "metadata": { + "id": "k3J2hns32g", + "name": "Overutilized Amazon EBS Magnetic Volumes", + "description": "Checks for Amazon Elastic Block Store (EBS) Magnetic volumes that are potentially overutilized and might benefit from a more efficient configuration. A Magnetic volume is designed for applications with moderate or bursty I/O requirements, and the IOPS rate is not guaranteed. It delivers approximately 100 IOPS on average, with a best-effort ability to burst to hundreds of IOPS. For consistently higher IOPS, you can use a Provisioned IOPS (SSD) volume. For bursty IOPS, you can use a General Purpose (SSD) volume. For more information, see Amazon EBS Volume Types.
\n
\nFor a list of instance types that support EBS-optimized behavior, see Amazon EBS-Optimized Instances.\n

\nTo get daily utilization metrics, download the report for this check. The detailed report shows a column for each of the last 14 days. If there is no active EBS volume, the cell is empty. If there is insufficient data to make a reliable measurement, the cell contains \"N/A\". If there is sufficient data, the cell contains the daily median and the percentage of the variance in relation to the median (for example, \"256 / 20%\").

\n

Alert Criteria


\nYellow: An Amazon EBS Magnetic volume is attached to an instance that can be EBS-optimized or is part of a cluster compute network with a daily median of more than 95 IOPS, and varies by less than 10% of the median value for at least 7 of the past 14 days.
\n
\n

Recommended Action


\nFor consistently higher IOPS, you can use a Provisioned IOPS (SSD) volume. For bursty IOPS, you can use a General Purpose (SSD) volume. For more information, see Amazon EBS Volume Types.
\n
\n

Additional Resources


\nAmazon Elastic Block Store (Amazon EBS)", + "category": "performance", + "metadata": [ + "Region", + "Volume ID", + "Volume Name", + "Day 1", + "Day 2", + "Day 3", + "Day 4", + "Day 5", + "Day 6", + "Day 7", + "Day 8", + "Day 9", + "Day 10", + "Day 11", + "Day 12", + "Day 13", + "Day 14", + "Number of Days Over", + "Max Daily Median", + "Status" + ] + }, + "reports": { + "checkId": "k3J2hns32g", + "timestamp": "2023-11-24T06:56:10Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "N415c450f2": { + "metadata": { + "id": "N415c450f2", + "name": "CloudFront Header Forwarding and Cache Hit Ratio", + "description": "Checks the HTTP request headers that CloudFront currently receives from the client and forwards to your origin server. Some headers, such as Date or User-Agent, significantly reduce the cache hit ratio (the proportion of requests that are served from a CloudFront edge cache). This increases the load on your origin and reduces performance because CloudFront must forward more requests to your origin.
\n
\n

Alert Criteria


\nYellow: One or more request headers that CloudFront forwards to your origin might significantly reduce your cache hit ratio.
\n
\n

Recommended Action


\nConsider whether the request headers provide enough benefit to justify the negative effect on the cache hit ratio. If your origin returns the same object regardless of the value of a given header, we recommend that you don't configure CloudFront to forward that header to the origin. For more information, see Configuring CloudFront to Cache Objects Based on Request Headers.
\n
\n

Additional Resources


\nIncreasing the Proportion of Requests that Are Served from CloudFront Edge Caches
\nCloudFront Cache Statistics Reports
\nHTTP Request Headers and CloudFront Behavior", + "category": "performance", + "metadata": [ + "Status", + "Distribution ID", + "Distribution Domain Name", + "Cache Behavior Path Pattern", + "Headers" + ] + }, + "reports": { + "checkId": "N415c450f2", + "timestamp": "2023-11-22T09:25:23Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "ZRxQlPsb6c": { + "metadata": { + "id": "ZRxQlPsb6c", + "name": "High Utilization Amazon EC2 Instances", + "description": "Checks the Amazon Elastic Compute Cloud (Amazon EC2) instances that were running at any time during the last 14 days and alerts you if the daily CPU utilization was more than 90% on 4 or more days. Consistent high utilization can indicate optimized, steady performance, but it can also indicate that an application does not have enough resources. To get daily CPU utilization data, download the report for this check.
\n
\n

Alert Criteria


\nYellow: An instance had more than 90% daily average CPU utilization on at least 4 of the previous 14 days.\n

\n

Recommended Action


\nConsider adding more instances. For information about scaling the number of instances based on demand, see What is Auto Scaling?\n

\n

Additional Resources


\nMonitoring Amazon EC2
\nInstance Metadata and User Data
\nAmazon CloudWatch Developer Guide
\nAuto Scaling Developer Guide", + "category": "performance", + "metadata": [ + "Region/AZ", + "Instance ID", + "Instance Name", + "Instance Type", + "Day 1", + "Day 2", + "Day 3", + "Day 4", + "Day 5", + "Day 6", + "Day 7", + "Day 8", + "Day 9", + "Day 10", + "Day 11", + "Day 12", + "Day 13", + "Day 14", + "14-Day Average CPU Utilization", + "Number of Days over 90% CPU Utilization" + ] + }, + "reports": { + "checkId": "ZRxQlPsb6c", + "timestamp": "2023-11-22T10:16:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c18d2gz176": { + "metadata": { + "id": "c18d2gz176", + "name": "Amazon ECS Memory Hard Limit", + "description": "Checks if Amazon ECS task definitions have a set memory limit for its container definitions. The total amount of memory reserved for all containers within a task must be lower than the task memory value.
\n
\nFor more information, see Container definitions.
\n
\nSource
\nAWS Config Managed Rule: ecs-task-definition-memory-hard-limit
\n
\nAlert Criteria
\nYellow: Amazon ECS memory hard limit is not set.
\n
\nRecommended Action
\nAllocate memory for your ECS taks to avoid running out of memory. If your container attempts to exceed the specified memory, then the container is terminated. For more information, see How can I allocate memory to tasks in Amazon ECS?.
\n
\nAdditional Resources
\nCluster reservation", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz176", + "status": "not_available" + } + }, + "c18d2gz181": { + "metadata": { + "id": "c18d2gz181", + "name": "AWS Lambda Functions without Concurrency Limit configured", + "description": "Checks if AWS Lambda function is configured with function-level concurrent execution limit.
\n
\nConcurrency is the number of in-flight requests your AWS Lambda function is handling at the same time. For each concurrent request, Lambda provisions a separate instance of your execution environment.
\nYou can specify the minimum and maximum concurrency limit, using the \"ConcurrencyLimitLow\" and \"ConcurrencyLimitHigh\" parameters in your AWS Config rules.
\n
\nFor more information, see Lambda function scaling.
\n
\nSource
\nAWS Config Managed Rule: lambda-concurrency-check
\n
\nAlert Criteria
\nYellow: AWS Lambda Functions has no concurrency limit configured.
\n
\nRecommended Action
\nConsider AWS Lambda Function have concurrency configured. Enabling a concurrency limit for your AWS Lambda functions helps to ensure that your function processes requests reliably and predictably. A concurrency limit reduces the risk of your function being overwhelmed due to a sudden surge in traffic.
\n
\nFor more information, see Configuring reserved concurrency.
\n
\nAdditional Resources
\nLambda function scaling
\nConfiguring reserved concurrency", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz181", + "status": "not_available" + } + }, + "c18d2gz142": { + "metadata": { + "id": "c18d2gz142", + "name": "Amazon EBS Optimization Not Enabled", + "description": "Checks if Amazon EBS optimization is enabled for your EC2 instances.
\n
\nAn Amazon EBS\u2013optimized instance uses an optimized configuration stack and provides additional, dedicated capacity for Amazon EBS I/O. This optimization provides the best performance for your EBS volumes by minimizing contention between Amazon EBS I/O and other traffic from your instance.
\n
\nFor more information, see Amazon EBS\u2013optimized instances..
\n
\nSource
\nAWS Config Managed Rule: ebs-optimized-instance
\n
\nAlert Criteria
\nYellow: The EBS optimization is not enabled on supported EC2 instance.
\n
\nRecommended Action
\nTurn on EBS optimization on supported instances.
\n
\nFor more information, see Enable EBS optimization at launch.
\n
\nAdditional Resources
\nAmazon EBS\u2013optimized instances", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz142", + "status": "not_available" + } + }, + "c18d2gz148": { + "metadata": { + "id": "c18d2gz148", + "name": "EC2 Virtualization Type is Paravirtual", + "description": "Checks if the virtualization type of an Amazon EC2 instance is paravirtual.
\n
\nIt is recommended that you use Hardware Virtual Machine (HVM) instances instead of paravirtual instances, when possible. This is because of enhancements in HVM virtualization and the availability of PV drivers for HVM AMIs, which have closed the performance gap that historically existed between PV and HVM guests. It's important to note that current generation instance types do not support PV AMIs. Therefore, choosing an HVM instance type provides the best performance and compatibility with modern hardware.
\n
For more information, see Linux AMI virtualization types.
\n
\nSource
\nAWS Config Managed Rule: ec2-paravirtual-instance-check
\n
\nAlert Criteria
\nYellow: The virtualization type of EC2 instances is paravirtual.
\n
\nRecommended Action
\nUse HVM virtualization for your EC2 instances, and use a compatible instance type.
\n
\nFor information on choosing the appropriate virtualization type, see Compatibility for changing the instance type.
\n", + "category": "performance", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz148", + "status": "not_available" + } + } + }, + "cost_optimizing": { + "c18d2gz128": { + "metadata": { + "id": "c18d2gz128", + "name": "Amazon ECR Repository Without Lifecycle Policy Configured", + "description": "Checks if a private Amazon ECR repository has at least one lifecycle policy configured.
\n
\nLifecycle policies allow you to define a set of rules to automatically clean up old or unused container images. This gives you control over the lifecycle management of the images, allows ECR repositories to be better organized, and helps to lower overall storage costs.
\n
For more information, see Lifecycle policies.
\n
\nSource
\nAWS Config Managed Rule: ecr-private-lifecycle-policy-configured
\n
\nAlert Criteria
\nYellow: An Amazon ECR private repository doesn\u2019t have any lifecycle policies configured.
\n
\nRecommended Action
\nConsider creating at least one lifecycle policy for your private Amazon ECR repository.
\n
\nAdditional Resources
\nAmazon ECR Lifecycle policies
\nCreating a lifecycle policy
\nExamples of lifecycle policies", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz128", + "status": "not_available" + } + }, + "c18d2gz127": { + "metadata": { + "id": "c18d2gz127", + "name": "AWS Account Not Part of AWS Organizations", + "description": "Checks if an AWS account is part of AWS Organizations under the appropriate management account.
\n
\nAWS Organizations is an account management service for consolidating multiple AWS accounts into a centrally-managed organization. This enables you to centrally structure accounts for billing consolidation and implement ownership and security policies as your workloads scale on AWS. You can specify the management account id, using the \"MasterAccountId\" parameters of the AWS Config rules.
\n
For more information, see What is AWS Organizations?
\n
\nSource
\nAWS Config Managed Rule: account-part-of-organizations
\n
\nAlert Criteria
\nYellow: This AWS account is not part of AWS Organizations under the appropriate management account.
\n
\nRecommended Action
\nAdd this AWS account as part of AWS Organizations under the appropriate management account.
\n
\nFor more information, see Tutorial: Creating and configuring an organization.
\n
\nAdditional Resources
\nWhat is AWS Organizations?
\nCreating and configuring an organization", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz127", + "status": "not_available" + } + }, + "COr6dfpM03": { + "metadata": { + "id": "COr6dfpM03", + "name": "Amazon EBS over-provisioned volumes", + "description": "Checks the Amazon Elastic Block Storage (Amazon EBS) volumes that were running at any time during the lookback period. This check alerts you if any EBS volumes were over-provisioned for your workloads. When you have over-provisioned volumes, you\u2019re paying for unused resources. Although some scenarios can result in low optimization by design, you can often lower your costs by changing the configuration of your EBS volumes. Estimated monthly savings are calculated by using the current usage rate for EBS volumes. Actual savings will vary if the volume isn\u2019t present for a full month.
\n
\n

Source


\nAWS Compute Optimizer
\n
\n

Alert Criteria


\nYellow: An EBS Volume that was over-provisioned during the lookback period. To determine if a volume is over-provisioned, we consider all default CloudWatch metrics (including IOPS and throughput). The algorithm used to identify over-provisioned EBS volumes follows AWS best practices. The algorithm is updated when a new pattern has been identified.
\n
\n

Recommended Action


\nConsider downsizing volumes that have low utilization.
\n
\n

Additional Resources


\nFor more information about this recommendation, see the Trusted Advisor documentation..\n", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region/AZ", + "Volume ID", + "Volume Type", + "Volume Size(GB)", + "Volume Baseline IOPS", + "Volume Burst IOPS", + "Volume Baseline Throughput", + "Volume Burst Throughput", + "Recommended Volume Type", + "Recommended Volume Size(GB)", + "Recommended Volume Baseline IOPS", + "Recommended Volume Burst IOPS", + "Recommended Volume Baseline Throughput", + "Recommended Volume Burst Throughput", + "Lookback Period (days)", + "Savings Opportunity(%)", + "Estimated Monthly Savings", + "Estimated Monthly Savings Currency", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "COr6dfpM03", + "timestamp": "2023-11-26T12:21:43Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 8.125, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [] + } + }, + "COr6dfpM05": { + "metadata": { + "id": "COr6dfpM05", + "name": "AWS Lambda over-provisioned functions for memory size", + "description": "Checks the AWS Lambda functions that were invoked at least once during the lookback period. This check alerts you if any of your Lambda functions were over-provisioned for memory size. When you have Lambda functions that are over-provisioned for memory sizes, you\u2019re paying for unused resources. Although some scenarios can result in low utilization by design, you can often lower your costs by changing the memory configuration of your Lambda functions. Estimated monthly savings are calculated by using the current usage rate for Lambda functions.
\n
\n

Source


\nAWS Compute Optimizer
\n
\n

Alert Criteria


\nYellow: A Lambda function that was over-provisioned for memory size during the lookback period. To determine if a Lambda function is over-provisioned, we consider all default CloudWatch metrics for that function. The algorithm used to identify over-provisioned Lambda functions for memory size follows AWS best practices. The algorithm is updated when a new pattern has been identified.
\n
\n

Recommended Action


\nConsider reducing the memory size of your Lambda functions.
\n
\n

Additional Resources


\nFor more information about this recommendation, see the Trusted Advisor documentation page.\n", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region/AZ", + "Function Name", + "Function Version", + "Memory Size(MB)", + "Recommended Memory Size(MB)", + "Lookback Period (days)", + "Savings Opportunity(%)", + "Estimated Monthly Savings", + "Estimated Monthly Savings Currency", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "COr6dfpM05", + "timestamp": "2023-11-27T12:21:44Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Wxdfp4B1L1": { + "metadata": { + "id": "Wxdfp4B1L1", + "name": "AWS Well-Architected high risk issues for cost optimization", + "description": "Checks for high risk issues (HRIs) for your workloads in the cost optimization pillar. This check is based on your AWS-Well Architected reviews. Your check results depend on whether you completed the workload evaluation with AWS Well-Architected.
\n
\n

Alert Criteria


\nRed: At least one active high risk issue was identified in the cost optimization pillar for AWS Well-Architected.
\nGreen: No active high risk issues were detected in the cost optimization pillar for AWS Well-Architected.
\n
\n

Recommended Action


\nAWS Well-Architected detected high risk issues during your workload evaluation. These issues present opportunities to reduce risk and save money. Sign in to the AWS Well-Architected tool to review your answers and take action to resolve your active issues.", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Workload ARN", + "Workload Name", + "Reviewer Name", + "Workload Type", + "Workload Started Date", + "Workload Last Modified Date", + "Number of identified HRIs for Cost Optimization", + "Number of HRIs resolved for Cost Optimization", + "Number of questions answered for Cost Optimization", + "Total number of questions in Cost Optimization pillar", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Wxdfp4B1L1", + "timestamp": "2023-11-27T12:21:51Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c18d2gz100": { + "metadata": { + "id": "c18d2gz100", + "name": "Amazon S3 Bucket Lifecycle Policy Configured", + "description": "Checks if an Amazon S3 bucket has a lifecycle policy configured.
\n
\nAn Amazon S3 lifecycle policy ensures that S3 objects inside the bucket are stored cost-effectively throughout their lifecycle. This is important for meeting regulatory requirements for data retention and storage. The policy configuration is a set of rules that define actions applied by the Amazon S3 service to a group of objects. A lifecycle policy allows you to automate transitioning objects to lower-cost storage classes or deleting them as they age. For example, you can transition an object to Amazon S3 Standard-IA storage 30 days after creation, or to Amazon S3 Glacier after 1 year.
\n
\nYou can also define object expiration so that Amazon S3 deletes the object on your behalf after a certain period of time. You can adjust the check configuration using the parameters in your AWS Config rules.
\n
\nSource
\nAWS Config Managed Rule: s3-lifecycle-policy-check
\n
\nAlert Criteria
\nYellow: Amazon S3 Bucket has no lifecycle policy configured.
\n
\nRecommended Action
\nMake sure that you have a lifecycle policy configured in your Amazon S3 bucket. If your organization does not have a retention policy in place, consider using Amazon S3 Intelligent-Tiering to optimize cost.
\n
\nFor information on how to define your Amazon S3 lifecycle policy, see setting lifecycle configuration on a bucket.
\nFor information on Amazon S3 Intelligent-Tiering, see Amazon S3 Intelligent-Tiering storage class.
\n
\nAdditional Resources
\nSetting lifecycle configuration on a bucket
\nExamples of S3 lifecycle configuration", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz100", + "status": "not_available" + } + }, + "1e93e4c0b5": { + "metadata": { + "id": "1e93e4c0b5", + "name": "Amazon EC2 Reserved Instance Lease Expiration", + "description": "Checks for Amazon EC2 Reserved Instances that are scheduled to expire within the next 30 days or have expired in the preceding 30 days. Reserved Instances do not renew automatically; you can continue using an EC2 instance covered by the reservation without interruption, but you will be charged On-Demand rates. New Reserved Instances can have the same parameters as the expired ones, or you can purchase Reserved Instances with different parameters.
\r\nThe estimated monthly savings we show is the difference between the On-Demand and Reserved Instance rates for the same instance type.

\r\n

Alert Criteria


\r\nYellow: The Reserved Instance lease expires in less than 30 days.
\r\nYellow: The Reserved Instance lease expired in the preceding 30 days.

\r\n

Recommended Action


\r\nConsider purchasing a new Reserved Instance to replace the one that is nearing the end of its term. For more information, see How to Purchase Reserved Instances and Buying Reserved Instances.

\r\n

Additional Resources


\r\nReserved Instances
\r\nInstance Types", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Zone", + "Instance Type", + "Platform", + "Instance Count", + "Current Monthly Cost", + "Estimated Monthly Savings", + "Expiration Date", + "Reserved Instance ID", + "Reason" + ] + }, + "reports": { + "checkId": "1e93e4c0b5", + "timestamp": "2023-11-23T21:02:23Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "hjLMh88uM8": { + "metadata": { + "id": "hjLMh88uM8", + "name": "Idle Load Balancers", + "description": "Checks your Elastic Load Balancing configuration for load balancers that are not actively used. Any load balancer that is configured accrues charges. If a load balancer has no associated back-end instances or if network traffic is severely limited, the load balancer is not being used effectively.
\n
\n

Alert Criteria


\nYellow: A load balancer has no active back-end instances.
\nYellow: A load balancer has no healthy back-end instances.
\nYellow: A load balancer has had less than 100 requests per day for the last 7 days.
\n
\n

Recommended Action


\nIf your load balancer has no active back-end instances, consider registering instances or deleting your load balancer. See Registering Your Amazon EC2 Instances with Your Load Balancer or Delete Your Load Balancer.
\nIf your load balancer has no healthy back-end instances, see Troubleshooting Elastic Load Balancing: Health Check Configuration.
\nIf your load balancer has had a low request count, consider deleting your load balancer. See Delete Your Load Balancer.
\n
\n

Additional Resources


\nManaging Load Balancers
\nTroubleshoot Elastic Load Balancing", + "category": "cost_optimizing", + "metadata": [ + "Region", + "Load Balancer Name", + "Reason", + "Estimated Monthly Savings" + ] + }, + "reports": { + "checkId": "hjLMh88uM8", + "timestamp": "2023-11-23T03:06:26Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 8, + "resourcesFlagged": 8, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 144.00000000000003, + "estimatedPercentMonthlySavings": 1.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "7QAmlKuahQGeS41cCZcyffh7IbDYzdbCfiFa--6kgP0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a6d814b9b5ac44ad29b2af2a76f96d4d", + "No active back-end instances", + "$18.00" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "G_TogNnpVFpg_Ps-AoL_V1_89mGCkfZhslKLZwcBKpU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a23e595fab3334f50994f255529fb7d0", + "No active back-end instances", + "$18.00" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GxmrFK2fj9WZQDEfmKftetIOq5b_j_x7tkSZW8JgRNY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "ab018e0f022534c0e9e21ffcd14f5a0b", + "No healthy back-end instances", + "$18.00" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Kv4pKUKswleOvNWnCR3J2UA-TQdtX8vBSVqLiRBns_A", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a27abbe72757b46d0b11857a6e9887a3", + "No active back-end instances", + "$18.00" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "UEaCC9GFIbjASL2Q--3EivpdlG2rD_lGPXDJwfkF_YQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "aec8c7ebf2eb149909978c8179bb82ca", + "No active back-end instances", + "$18.00" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "anCQFp6vlD1h7GQ5WjIaAK7Hfp121RKp7DpIikdeoPA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a559ef1ae4b234f99985aae08493ea30", + "No active back-end instances", + "$18.00" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "sk_NYnJc3xTh-6tbVbCan_kiVoerzl9uddlV372LauE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "af74f1f143f534387bd5a9ef8d0e3650", + "No active back-end instances", + "$18.00" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "yPbtNYfa4aLnpKnYY3By3GSTq3xdVf63q-IPUDXo2lg", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "a4c60e1ef3747463bbfc7c3cca8762c2", + "No active back-end instances", + "$18.00" + ] + } + ] + } + }, + "Ti39halfu8": { + "metadata": { + "id": "Ti39halfu8", + "name": "Amazon RDS Idle DB Instances", + "description": "Checks the configuration of your Amazon Relational Database Service (Amazon RDS) for any DB instances that appear to be idle. If a DB instance has not had a connection for a prolonged period of time, you can delete the instance to reduce costs. If persistent storage is needed for data on the instance, you can use lower-cost options such as taking and retaining a DB snapshot. Manually created DB snapshots are retained until you delete them.
\n
\n

Alert Criteria


\nYellow: An active DB instance has not had a connection in the last 7 days.
\n
\n

Recommended Action


\nConsider taking a snapshot of the idle DB instance and then either stopping it or deleting it. Stopping the DB instance removes some of the costs for it, but does not remove storage costs. A stopped instance keeps all automated backups based upon the configured retention period. Stopping a DB instance usually incurs additional costs when compared to deleting the instance and then retaining only the final snapshot. See Stopping an Amazon RDS DB Instance Temporarily and Deleting a DB Instance with a Final Snapshot.
\n
\n

Additional Resources


\nBack Up and Restore", + "category": "cost_optimizing", + "metadata": [ + "Region", + "DB Instance Name", + "Multi-AZ", + "Instance Type", + "Storage Provisioned (GB)", + "Days Since Last Connection", + "Estimated Monthly Savings (On Demand)" + ] + }, + "reports": { + "checkId": "Ti39halfu8", + "timestamp": "2023-11-23T07:48:15Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 1, + "resourcesFlagged": 1, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 12.24, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "hL7a45c1uwXE29OUnhFc0nJBsCPKD-0RVxXRUoR9Nug", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vchalla-quay-quay-db", + "No", + "db.t3.micro", + "5", + "14+", + "$12.24" + ] + } + ] + } + }, + "Cm24dfsM12": { + "metadata": { + "id": "Cm24dfsM12", + "name": "Amazon Comprehend Underutilized Endpoints", + "description": "Checks the throughput configuration of your endpoints. This check alerts you when endpoints are not actively used for real-time inference requests. An endpoint that isn\u2019t used for more than 15 consecutive days is considered underutilized. All endpoints accrue charges based on both the throughput set and the length of time that the endpoint is active.
\n

Note:

This check is automatically refreshed once a day.
\n
\n

Alert Criteria


\nYellow: The endpoint is active, but hasn\u2019t been used for real-time inference requests in the past 15 days.
\n
\n

Recommended Action

\n
If the endpoint hasn\u2019t been used in the past 15 days, we recommend that you define a scaling policy for the resource by using Application Autoscaling.
If the endpoint has a scaling policy defined and hasn\u2019t been used in the past 30 days, consider deleting the endpoint and using asynchronous inference. For more information, see Deleting an endpoint with Amazon Comprehend.\n", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Endpoint ARN", + "Provisioned Inference Unit", + "AutoScaling Status", + "Reason", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Cm24dfsM12", + "timestamp": "2023-11-27T12:22:27Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "Z4AUBRNSmz": { + "metadata": { + "id": "Z4AUBRNSmz", + "name": "Unassociated Elastic IP Addresses", + "description": "Checks for Elastic IP addresses (EIPs) that are not associated with a running Amazon Elastic Compute Cloud (Amazon EC2) instance. EIPs are static IP addresses designed for dynamic cloud computing. Unlike traditional static IP addresses, EIPs can mask the failure of an instance or Availability Zone by remapping a public IP address to another instance in your account. A nominal charge is imposed for an EIP that is not associated with a running instance.
\n
\n

Alert Criteria


\nYellow: An allocated Elastic IP address (EIP) is not associated with a running Amazon EC2 instance.
\n
\n

Recommended Action


\nAssociate the EIP with a running active instance, or release the unassociated EIP. For more information, see Associating an Elastic IP Address with a Different Running Instance and Releasing an Elastic IP Address.
\n
\n

Additional Resources


\nElastic IP Addresses", + "category": "cost_optimizing", + "metadata": [ + "Region", + "IP Address" + ] + }, + "reports": { + "checkId": "Z4AUBRNSmz", + "timestamp": "2023-11-23T22:10:59Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 91, + "resourcesFlagged": 91, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 0.0, + "estimatedPercentMonthlySavings": 0.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "4aI_BeY2-uYLMKWuef9aSDa4KzPkKqtsjYVzdfpBSOA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.203.21.48" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "4zaM394yq3y5-Gcv7edeNoToIpvqjLXl-JsshRPg5-4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "108.129.31.198" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "6DzZnyzcmAU2R9BEHjIq2zz1hokUeHSFRdAJPyWCCvs", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "3.251.4.172" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "7vTuEw8sSIt2TvlKqe24PLU5xaV0Q9cBV6LvwiapJHw", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "3.248.31.170" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "9Yg9Gi19e8WbsoUlSMsPdHv1zSc8prYDDDOLwDTh54k", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.242.56.141" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "BibxoVQRH8TEKHk9MpfbjGw-p-oQSpZMnIXYYLOh3kA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.248.79.219" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "CcWIk10km9UiycBCceGIWzpUvevt1_QPflYZbgfOhPE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.243.175.117" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "E7oeDqoFs7aDiSudQs3M7Wee1qCcIIeYo6dBvpHSNgk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "3.248.40.35" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "F3U132LxkIAE32crlHpmHb1D8rRoy9N0GK9csUG-ImE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.200.82.7" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "NDscetBBOa8l8HGOUWhZRe0--jX4QK2dL7gqbsJnTVE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "3.248.106.252" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "Q0sn0eIZj8W3EuvLfIQNKSKe0YchIYNNp4c73zKIct0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.240.83.218" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "RAZudEsD6pPBYDVSjPFz2-BtfxAVtoLtHxAPAJgego0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.203.119.246" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "U5OgDGgOp9SrHzCTIL525qqlhLhT8AzlN0sRrSMbVWs", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.200.68.35" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "Uf_Mc4l0un5i9eoYOeOQ67JjAMq-MC8D9GHqkQHxav4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.203.169.231" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "UyVUif_t-v0Kr-HOcQFlarC5Gin4Ed53tAEVI0Fl-lM", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.249.114.181" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "V79Fu0IyO3Oe_KJtl9ecUWp8DmqvqMhKX-LnWv3awsA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.250.168.241" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "h8lXmXdqOkG0qL2jEyBsz3O04olsU5IqS8he-6ZOjmk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.200.118.185" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "o8kjx_cSmucsVC4_os2GLY7mxafqp0IeW_YfSaFR1DA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.250.235.60" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "oPA2jbVCUc4L6LtshOqAa3awK1NnJYVUh0bWMnvjlAY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.200.37.52" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "sz7gumTSxkKKnFm3qMWXX2LFKDDea0uryDciOW7QMb0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.200.179.152" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "u7PkZwd9KzCjfE8OkzbYZNnTaw6VXVxuVI3ZcrxdyFQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "108.128.105.34" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "uG1aIDQ7KnN__3HM792UVQE4fhH87u1kOIILqj5Zm18", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.203.217.80" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "vZuLEybvyvQVkinnvpbufpLJf3dT52kjG7Y-ycvyCDk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.250.204.68" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "wqQLNApwmDFe0BRs6nU3RZFKjViB4e0FlxFJIsj8GoU", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "18.202.59.220" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "x9ZNx7_yQhovl3VZT7luUaZT0p5zlvNws2I-KqHDSFE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "108.128.8.102" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "0lxHUvSqnJkXFBlPczZhKVgoaB5ZiyQwwgaruzl-1dc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.16.138.84" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "23VtiNZN9PwmLAeS4nq5bTI0rr0TKEwqHfhk_4ZI4SM", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.210.46.138" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "350nVI_H1cmz_Wl1pls1wlKTyerTJmWD03me4z_3Ksg", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "46.137.31.218" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "8rPvYoxAM6TBnqTef_pUKMlACK95m1gpiH8lGx_q830", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.19.188.251" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "CZRLSYdaTYL9nULJHRnNtlYYT4572G7CbBhw2D9I_Oc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.214.89.198" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "KnlPUHXgz7aeLq0sD3q2wzskI3SurKKVnZV3dD3U3fY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.16.151.180" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "M23nWe25RHHmbEmyNtYJkQscsTvBSnrnPg_FWG9KBm8", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.48.191.202" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "STDZxV0Tl0-01IT4eHznjYIq0iQ9R-I9hIAQkA_A8vA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.19.59.152" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "_VO7hyEzLCG09FGnchMdroihS6RVXmbHg4t9Wzn7K-0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.252.67.126" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "a4Rz8tbUSfszX6-aQYhnOrStsfInsUJx7fXSjLRHc-U", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.17.35.2" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "dBLke0MXUjCoHjHsr5-UY9YuayAKlHZHn68IyLMfTd0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.208.141.87" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "h6qvN36YfGHGetX81Ok72041UbuGJ2G5m1K4xR8-QLo", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.19.217.87" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "j7oYyZv23RWuFftsag9cwfeIzoTKnFbW7SK4pQi9xXg", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.16.83.166" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "mRM2XAaBX-bgqbtoU_w-w2jRYPhbIesomO9AMOVUEGs", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.16.210.221" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "nu0vj4zDXbs0JdIJ-ooWoa04IJYkzO4loKlXw3-CIE8", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.31.115.241" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "oJgq9688-2xgaGdUbCCZyoIj0g6d8iGrVLfQUByUxR4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.48.93.131" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "qg3kkwt29hGsntKHCMuXdbjhDCn9tnPVZBlu_-Qq7ZQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "34.250.55.38" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "rx_xzmQG7ItmhCI9C66rtnu2rGH5kv9ajhvUhu-2TwI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.18.132.18" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "tCEaBy2CoPihmG49U3ICxo6f7LQSD5P-5x_8Od9yqLg", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.209.202.40" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "vB1-Tf7hcGAWr_8BIxkzvRhGto-RttBgVxl6cb9Wo80", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.19.139.83" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "vvh8wNlzlxOuJFt7rcEEeljNdmkhwSaYlckex7VHmZk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.211.57.217" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "xQqV75zl8YaFWNRXZSS3tX2qYGLIqfgxKKN98SbJU4Y", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.212.167.199" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "yXyGz3VKAs1ROYBsYqteWrHBqymDWuFK597LDOqiR1w", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.215.213.79" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "z2DjzFvRLf4mdw0v7XOj9SXh-QOdW0dt8GNJ2GwxkDk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.48.173.248" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "znMLRWD7ySDsYALoHUBYULQs__7WR6FY27a4qLPQAEI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.48.108.55" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "0EYOmowQuadg8OXN51shSuSXiJXCkpbS01s2oCOagLI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.72.132.53" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "7ZANr0-mCk-7NOnCnhhqcdgnQ_1T2SVQtwEXSz4bV5M", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.50.103.154" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "93_ifkgoJ3XlvBZ0Epoeponm6X9XN22UHD0GhabPZYI", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.73.229.71" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "9yXgo0jmdtJjXVUsmAgmzPAzxDxFPhBqhIDAU0DjLJQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.72.108.104" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "CEkjnFKNfT5r4SYFeguqEUK-GlWvlVFsioJTRngUUzw", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.74.228.208" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "DOXRzq9941uzoWPHoVWgOcQwFroneUp96ZAOW7M8FGE", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.220.31.50" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "E_HWpTQBc7FEIMpqpZuKXvjuEGkHG7xaMsJUwm7v5ik", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.228.67.109" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "Fbalj9m-yOBv5omDIdtEW0rDBrsUKFc0j40-_-Ifyqo", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.220.138.165" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "HnhIEAKgEAYSz71sfj5CM8XnShBeuLiB_8yUI8q0R_E", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.170.38.247" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "JgqN-t7naKUaU3L8QYIOpxXcykheNXaugp_Elm68ooY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.216.205.131" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "KaGBgNKzGnE3CEhMFWw3CrKHIv1umm3LeSSmvEtx4QA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.72.244.47" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "KkOJPpOpiEriHgY1f7P0_BzVBGsrUq5vFv_A7e9oObs", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.247.131.56" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "LY-Lt2-EudfSo6gcA_2Pe77JvGWIR-tCpG3A-gDIdGw", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.246.187.26" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "POD7UHBuRyJgmWz4O8D66ZNMylMMY6s2VVRzGsSpVkc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.78.153.169" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "SZj7yqd9D0MH3Tb1AgVXQy9OElw_fF0TQkUrgeM3tX0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.155.243.83" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "aCU5V3PZ9jAHVO04LUxTzFzBrovZJVy42QyUKDgZ2O8", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.228.183.181" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "cy6dyuNXUfbymQ36TT1WzGEvozo5ZCXd09PvdzaTOTk", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.78.50.2" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "eeJj7P8te4PJh2fM5WQqzxDtGrrqAKyFIp-yG70jioU", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.73.53.40" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "gW2D6YireStXth0ifkzW5bSmuPKgDVgPvdg2mtcwCQA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.228.211.129" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "hrerCCOw9xmAW8cBbjJgJuEcLNuYC2lpCgtPJNPc-uY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "52.50.1.55" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "oyK7WM-dHnnxiT1flF1lg_0XI_wJZ_MkrVuGkzIUCqY", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.73.247.129" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "q8l-UlqM2r3cn7jdK0Zqvo7-JV4aakUY45QTBalupHQ", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.220.238.254" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "scRYgRI6oiAzP2vk8k9VfKQl_jgm4s2r9CkLzGtn79I", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.195.216.88" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "xMlMYT2ntTOs0v5ZS2Acj1oxEir3O0yCFnW4TsNeur0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.217.70.145" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "zSchzuBvVW0RORkiaLg0r3EmGHSdeLLSdmROHwvL5c0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.229.106.157" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "AUTPI6BIeJh0DlopXPfFqdYc4iXmNAvhFZJM7F67E3Q", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "79.125.113.175" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "JtNLyvPRazo7TRxHtrZKj5zTvozaD9eRd8R1aWPR4xo", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "63.32.229.151" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "eJE5M4KYMVcWh63AwegfwKhmc51yr8XhKaKy6lVH6Xc", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "79.125.78.248" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "h2J0IrrCsihAVZoCoHOy7nDBVQXH75xx5BdPexwgDM4", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "63.35.132.20" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "kXTfslGXiPenK6AH2y47AkHavwc_yAiC9tbPR-I2P0U", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "54.78.64.229" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "mzaK3xczNvhs9UOGaY2qeKF1DJ89_dt0GSldHm-wmsA", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "63.35.71.57" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "pr5A3X6h0bw04LxDpsVaRTKcZ8jxY60VFkQQXZw3Axo", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "99.81.6.63" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "qvyw3WOUMdHLNwEo339rAiRMUaQ2jI9N5Jpxmf5H0g8", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "99.80.28.79" + ] + }, + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "rsFCZ7VtVgU1ixHYPzc2OTz9SpfhwLEPhDO6wdaNPd0", + "isSuppressed": false, + "metadata": [ + "eu-west-1", + "63.33.219.249" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "Jka-NeguDQFekBo5oLXQm5f4yr3ennaWyLgfzf8FqqM", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "3.142.178.238" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "cPVEMQt3vEl-40UjKfInN2BCG6vKRvxzS-4OHavwZSE", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "3.134.201.63" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "dQreHhYr55B3Xf1dEbNhAYdqJ6OgDMqkEsl6vqAaQp0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "18.221.44.14" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "esR_sK0PUsIVovDu_zBHLFQ7H5D0hNnMk_69PiO6uk0", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "3.137.128.73" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "jpnN8fBeqsVvQGKRNXiecehhzlw03aWQ-wiiMbC1CHA", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "18.219.99.147" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "qprcK4kWvFYzlz_Xu_HadoiDq3hqCUfINJOViXutfcw", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "52.15.85.237" + ] + }, + { + "status": "warning", + "region": "us-east-2", + "resourceId": "yXC6d4AX_hlMZoDBCgJ7P1d88athaCPCM23TvcYoeD4", + "isSuppressed": false, + "metadata": [ + "us-east-2", + "3.136.193.39" + ] + } + ] + } + }, + "Qch7DwouX1": { + "metadata": { + "id": "Qch7DwouX1", + "name": "Low Utilization Amazon EC2 Instances", + "description": "Checks the Amazon Elastic Compute Cloud (Amazon EC2) instances that were running at any time during the last 14 days and alerts you if the daily CPU utilization was 10% or less and network I/O was 5 MB or less on 4 or more days. Running instances generate hourly usage charges. Although some scenarios can result in low utilization by design, you can often lower your costs by managing the number and size of your instances.\n

\nEstimated monthly savings are calculated by using the current usage rate for On-Demand Instances and the estimated number of days the instance might be underutilized. Actual savings will vary if you are using Reserved Instances or Spot Instances, or if the instance is not running for a full day. To get daily utilization data, download the report for this check. \n
\n
\n

Alert Criteria


\nYellow: An instance had 10% or less daily average CPU utilization and 5 MB or less network I/O on at least 4 of the previous 14 days.
\n
\n

Recommended Action


\nConsider stopping or terminating instances that have low utilization, or scale the number of instances by using Auto Scaling. For more information, see Stop and Start Your Instance, Terminate Your Instance, and What is Auto Scaling?
\n
\n

Additional Resources


\nMonitoring Amazon EC2
\nInstance Metadata and User Data
\nAmazon CloudWatch Developer Guide
\nAuto Scaling Developer Guide", + "category": "cost_optimizing", + "metadata": [ + "Region/AZ", + "Instance ID", + "Instance Name", + "Instance Type", + "Estimated Monthly Savings", + "Day 1", + "Day 2", + "Day 3", + "Day 4", + "Day 5", + "Day 6", + "Day 7", + "Day 8", + "Day 9", + "Day 10", + "Day 11", + "Day 12", + "Day 13", + "Day 14", + "14-Day Average CPU Utilization", + "14-Day Average Network I/O", + "Number of Days Low Utilization" + ] + }, + "reports": { + "checkId": "Qch7DwouX1", + "timestamp": "2023-11-23T08:28:43Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 6, + "resourcesFlagged": 6, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 932.4205714285713, + "estimatedPercentMonthlySavings": 0.8941097565786877 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "eu-west-1", + "resourceId": "OaeLn66CcYfZEePznZwq-MY89hzwWL8QsrUsHGg_3zg", + "isSuppressed": false, + "metadata": [ + "eu-west-1b", + "i-072a400ea55c4d134", + "mohit-v2-infra-3-191e5c67-sq242", + "r5.xlarge", + "$203.04", + null, + null, + null, + null, + null, + null, + "0.5% 3.08MB", + "0.4% 0.11MB", + "0.4% 0.00MB", + "0.4% 0.00MB", + "0.4% 0.00MB", + "0.4% 0.00MB", + "0.4% 0.00MB", + "0.4% 0.00MB", + "0.4%", + "0.40MB", + "8 days" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "AJIva6hLZsVAKJGsRuX1PDVsn9od6a6c_LTW3ewYuGE", + "isSuppressed": false, + "metadata": [ + "us-west-2a", + "i-07ab3be6262d3490c", + "snappy-server(do not delete)", + "i3.xlarge", + "$192.55", + "0.1% 0.05MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.2% 6.88MB", + "0.2% 6.87MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.05MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1%", + "1.00MB", + "12 days" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "GvOcE7eMze7oWqTdkyksuNlVJjJwoq4-AOgk7ozqCrk", + "isSuppressed": false, + "metadata": [ + "us-west-2b", + "i-0ddfcc90befbb6b21", + "rzaleski-jh-2023", + "m5.2xlarge", + "$217.23", + "0.2% 0.69MB", + "4.1% 61.67MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 1.38MB", + "0.1% 0.02MB", + "0.1% 0.06MB", + "1.1% 6.53MB", + "8.1% 150.22MB", + "0.1% 0.14MB", + "0.1% 0.01MB", + "0.8% 2.40MB", + "0.5% 1.55MB", + "0.2% 0.49MB", + "1.1%", + "16.08MB", + "11 days" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "X4WsdNQkflgXIbp8dBJ1LnH9Pr2T8QJJ-_LaKcsXQnc", + "isSuppressed": false, + "metadata": [ + "us-west-2a", + "i-0ec26314bbe48be6f", + "cloud-bulldozer-ci-agent-1", + "t2.large", + "$66.82", + "0.3% 0.01MB", + "0.2% 0.01MB", + "0.2% 0.00MB", + "0.3% 0.07MB", + "0.2% 0.00MB", + "0.2% 0.01MB", + "0.3% 0.13MB", + "0.2% 0.01MB", + "0.2% 0.00MB", + "0.2% 0.01MB", + "0.2% 0.01MB", + "0.2% 0.01MB", + "0.2% 0.01MB", + "0.2% 0.00MB", + "0.2%", + "0.02MB", + "14 days" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "YYn4bNg_Pa135udS17umvLp9eE0sHKdDmnq6WxsN8pY", + "isSuppressed": false, + "metadata": [ + "us-west-2a", + "i-0d1ebf47f5f160926", + "airflow-jh-DO-NOT-DELETE", + "t2.xlarge", + "$114.54", + "6.3% 0.42MB", + "7.2% 6.50MB", + "6.5% 0.01MB", + "6.5% 0.01MB", + "6.9% 3.06MB", + "7.3% 12.43MB", + "6.5% 3.45MB", + "6.2% 1.34MB", + "6.1% 1.35MB", + "5.8% 0.01MB", + "5.9% 0.02MB", + "5.9% 0.50MB", + "5.9% 0.08MB", + "6.3% 2.27MB", + "6.4%", + "2.25MB", + "12 days" + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "pbQmHF0fYCUFL73b24z_hvkQD7JbCHhitD6stkgaMBQ", + "isSuppressed": false, + "metadata": [ + "us-west-2a", + "i-07b4cc7cb2d666bf5", + "cloud-bulldozer-ci-DO-NOT-DELETE", + "m6i.xlarge", + "$138.24", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1% 0.01MB", + "0.1%", + "0.01MB", + "14 days" + ] + } + ] + } + }, + "G31sQ1E9U": { + "metadata": { + "id": "G31sQ1E9U", + "name": "Underutilized Amazon Redshift Clusters", + "description": "Checks your Amazon Redshift configuration for clusters that appear to be underutilized. If an Amazon Redshift cluster has not had a connection for a prolonged period of time or is using a low amount of CPU, you can use lower-cost options such as downsizing the cluster or shutting down the cluster and taking a final snapshot. Final snapshots are retained even after you delete your cluster.

\n

Alert Criteria


\nYellow: A running cluster has not had a connection in the last 7 days.
\nYellow: A running cluster had less than 5% cluster-wide average CPU utilization for 99% of the last 7 days.

\n

Recommended Action


\nConsider shutting down the cluster and taking a final snapshot, or downsizing the cluster. See Shutting Down and Deleting Clusters and Resizing a Cluster.

\n

Additional Resources


\nAmazon CloudWatch Developer Guide", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Cluster", + "Instance Type", + "Reason", + "Estimated Monthly Savings" + ] + }, + "reports": { + "checkId": "G31sQ1E9U", + "timestamp": "2023-11-25T00:43:52Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "51fC20e7I2": { + "metadata": { + "id": "51fC20e7I2", + "name": "Amazon Route 53 Latency Resource Record Sets", + "description": "Checks for Amazon Route 53 latency record sets that are configured inefficiently. To allow Amazon Route 53 to route queries to the region with the lowest network latency, you should create latency resource record sets for a particular domain name (such as example.com) in different regions. If you create only one latency resource record set for a domain name, all queries are routed to one region, and you pay extra for latency-based routing without getting the benefits. Hosted zones created by AWS services won\u2019t appear in your check results.\n
\n
\n

Alert Criteria

\n
\nYellow: Only one latency resource record set is configured for a particular domain name.\n
\n
\n

Recommended Action

\n
\nIf you have resources in multiple regions, be sure to define a latency resource record set for each region; see Latency-Based Routing.
\nIf you have resources in only one region, consider creating resources in more than one region and define latency resource record sets for each; see Latency-Based Routing.
\nIf you don't want to use multiple regions, you should use a simple resource record set; see Working with Resource Record Sets.\n
\n
\n

Additional Resources

\n
\nAmazon Route 53 Developer Guide
\nAmazon Route 53 Pricing", + "category": "cost_optimizing", + "metadata": [ + "Hosted Zone Name", + "Hosted Zone ID", + "Resource Record Set Name", + "Resource Record Set Type" + ] + }, + "reports": { + "checkId": "51fC20e7I2", + "timestamp": "2023-11-22T22:01:04Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "L4dfs2Q3C2": { + "metadata": { + "id": "L4dfs2Q3C2", + "name": "AWS Lambda Functions with High Error Rates", + "description": "Checks for Lambda functions with high error rates that may result in high cost. Lambda charges based on the number of requests and aggregate execution time for your function. Function errors may cause retries that incur additional charges.
\n

Note:

Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.
\n
\n

Alert Criteria


\nYellow: Functions where > 10% of invocations end in error on any given day within the last 7 days.
\n
\n

Recommended Action

\n
Consider the following guidelines to reduce errors. Function errors include errors returned by the function's code and errors returned by the function's runtime. To help you troubleshoot Lambda errors, Lambda integrates with services like Amazon CloudWatch and AWS X-Ray. You can use a combination of logs, metrics, alarms, and X-ray tracing to quickly detect and identify issues in your function code, API, or other resources that support your application. For more information, see Monitoring and troubleshooting Lambda applications. For more information on handling errors with specific runtimes, see Error handling and automatic retries in AWS Lambda. For additional troubleshooting, see Troubleshooting issues in Lambda.You can also choose from an ecosystem of monitoring and observability tools provided by AWS Lambda partners. For additional information about Partners, see AWS Lambda Partners.
\n
\n

Additional Resources


\nError Handling and Automatic Retries in AWS Lambda
\nMonitoring and Troubleshooting Lambda applications
\nLambda Function Retry Timeout SDK
\nTroubleshooting issues in Lambda
\nAPI Invoke Errors
\nError Processor Sample Application for AWS Lambda
\n", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Function ARN", + "Max Daily Error Rate", + "Date for Max Error Rate", + "Average Daily Error Rate", + "Lost Daily Compute Cost", + "Current Day Invokes", + "Current Day Error Rate", + "Average Daily Invokes", + "Last Refresh Time" + ] + }, + "reports": { + "checkId": "L4dfs2Q3C2", + "timestamp": "2023-11-27T12:23:01Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "L4dfs2Q3C3": { + "metadata": { + "id": "L4dfs2Q3C3", + "name": "AWS Lambda Functions with Excessive Timeouts", + "description": "Checks for Lambda functions with high timeout rates that may result in high cost. Lambda charges based on execution time for your function and number of requests for your function. Function timeouts result in function errors that may cause retries that incur additional request and execution time charges.
\n

Note:

Results for this check are automatically refreshed several times daily, and refresh requests are not allowed. It might take a few hours for changes to appear.
\n
\n

Alert Criteria


\nYellow: Functions where > 10% of invocations end in an error due to a timeout on any given day within the last 7 days.
\n
\n

Recommended Action


\nInspect function logging and X-ray traces to determine the contributor to the high function duration. Implement logging in your code at relevant parts, such as before or after API calls or database connections. By default, AWS SDK clients timeouts may be longer than the configured function duration. Adjust API and SDK connection clients to retry or fail within the function timeout. If the expected duration is longer than the configured timeout, you can increase the timeout setting for the function. For more information, see Monitoring and troubleshooting Lambda applications.
\n
\n

Additional Resources


\nMonitoring and troubleshooting Lambda applications
\nLambda Function Retry Timeout SDK
\nUsing AWS Lambda with AWS X-Ray
\nAccessing Amazon CloudWatch logs for AWS Lambda
\nError Processor Sample Application for AWS Lambda
\n", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Function ARN", + "Max Daily Timeout Rate", + "Date of Max Daily Timeout Rate", + "Average Daily Timeout Rate", + "Function Timeout Setting (millisecond)", + "Lost Daily Compute Cost", + "Average Daily Invokes", + "Current Day Invokes", + "Current Day Timeout Rate", + "Last Refresh Time" + ] + }, + "reports": { + "checkId": "L4dfs2Q3C3", + "timestamp": "2023-11-27T12:23:01Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "DAvU99Dc4C": { + "metadata": { + "id": "DAvU99Dc4C", + "name": "Underutilized Amazon EBS Volumes", + "description": "Checks Amazon Elastic Block Store (Amazon EBS) volume configurations and warns when volumes appear to be underused. Charges begin when a volume is created. If a volume remains unattached or has very low write activity (excluding boot volumes) for a period of time, the volume is probably not being used.
\n
\n

Alert Criteria


\nYellow: A volume is unattached or had less than 1 IOPS per day for the past 7 days.
\n
\n

Recommended Action


\nConsider creating a snapshot and deleting the volume to reduce costs. For more information, see Creating an Amazon EBS Snapshot and Deleting an Amazon EBS Volume.
\n
\n

Additional Resources


\nAmazon Elastic Block Store (Amazon EBS)
\nMonitoring the Status of Your Volumes", + "category": "cost_optimizing", + "metadata": [ + "Region", + "Volume ID", + "Volume Name", + "Volume Type", + "Volume Size", + "Monthly Storage Cost", + "Snapshot ID", + "Snapshot Name", + "Snapshot Age" + ] + }, + "reports": { + "checkId": "DAvU99Dc4C", + "timestamp": "2023-11-22T03:06:22Z", + "status": "warning", + "resourcesSummary": { + "resourcesProcessed": 48, + "resourcesFlagged": 48, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": { + "costOptimizing": { + "estimatedMonthlySavings": 275.76000000000005, + "estimatedPercentMonthlySavings": 1.0 + } + }, + "flaggedResources": [ + { + "status": "warning", + "region": "us-west-2", + "resourceId": "5e_cnwVC7JJWE5LmimmQAqMRsDecZkL9MyeWLruDbZU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c49f0ad4fbcd296b", + "afcollins-2619-ancoll-5b8gn-master-0-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "AiiG2psHTMl7hATBIOjClyzqVbf7iajpPt_8TGO9pfc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d46f5e7ae92609bc", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-6f184736-906a-4a56-9762-fd5da8bc1fca", + "General Purpose SSD (gp3)", + "2", + "$0.16", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BBB-ya0vda9msDYv_EPggulSkWsglo4e6AjZChkUKAc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-056a86a2d14bf9193", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2a-ntpqv", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "FXo8sxJnE_PiSkL2yJYR9AKtsvDzn7YSxkO14i052K0", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0ad2627dcd97af4c2", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2c-nkhsw", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "LNpIB2WrHyA12mXd9psqF-ZRQF-SEd6n1_FMQy2e6rY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b687508e51625f57", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-8a87215f-41e5-4cf4-8544-defa6a1bb924", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "TBUENxQ6o6Skxq7k1yt_fRAEIl7hWpSXHVMDjjmYeH8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b5aa26ab23c5f031", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-6178ee71-3af2-4e36-8ef1-e2ee47553df5", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "TGFwbubS7caeu7q1c7HxJGZyxXKa91YygzaHaPnrIbs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d40345b5e4bb6f47", + "infra-us-west-2a-vh8kr", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "WiE2T2zD59vqECRM8DAtE7L8eGipRyqtZI055w3Dr6E", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b6950ceb7f9cd51e", + "afcollins-2619-ancoll-xrppt-worker-us-west-2a-g7w7c", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "XzUyhhIpenB2HZsP0kcdqxwPXWG7gd7yBl2AIdfPZ1Q", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-03f583800d26d4fd3", + "afcollins-2619-ancoll-5b8gn-master-2-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ZVmktWczQxiwH198zL6_Djy4ro8hGUUpryVzikxQxoE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06a8581a6ccae3f92", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2d-4qn76", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "akn4xL5M6xION20b2s073iZkj-yKgq7wh2vVlum0mvc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0eb7161c4de2c1627", + "vol-us-west-2-c1627", + "General Purpose SSD (gp3)", + "250", + "$20.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "dXcNQGr-6SUWXdWxpbXjxFJXsONLv0mCQUaaivlHbxA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-04b9a5a18bd4f155d", + "afcollins-2619-ancoll-xrppt-worker-us-west-2a-dlfs9", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ia9k459LMs6SIDSW94_JpCalzMyjAE3YF2PoN4ZoxHU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00e923a4772a2b8ca", + "afcollins-2619-ancoll-ptfqt-master-0-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "jKeBYCbPrdoxBX1HMT5p-g2oUARmIyMoXCSXnfFedlk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-097d73a28c6f468fa", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-366c473d-e77b-44aa-b520-7f39eef8b29e", + "General Purpose SSD (gp3)", + "2", + "$0.16", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "jd1SI11hOr3ZxpeXldXV9ld1AfwyjDzudWyqN-Slg2c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-09cb9bc1171828182", + "afcollins-2619-ancoll-xrppt-worker-us-west-2c-x4d4t", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "km0Ws-D9yTuwVAJQv8_vI1zh0UVPqJUtKnWkGWPg5ZU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-09fa9b223e5601a6d", + "infra-us-west-2a-xjs9k", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "pjdbtzEVahdow81jBcBERU-jHL5iVAi3S6BFvisrTTE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-007e22b99e992f685", + "afcollins-2619-ancoll-ptfqt-master-2-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "qB-tQY6s5MTjEPWxUIRb_sEsAjLBAZeFv2qkM2KjhJw", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-024d4ecfc117948fb", + "vol-us-west-2-948fb", + "General purpose(SSD)", + "128", + "$12.80", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "wj9TOiVU9u1YmoChttvAed2OfaqDZoMaH2JxLpfmqwk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0fd013cbcd1905fe3", + "vol-us-west-2-05fe3", + "General purpose(SSD)", + "500", + "$50.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xZxHPeIsHKqNFmh5wu6Va01mKc87cJqHAUvHf3N0nqc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-090071972a9194894", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2c-d4ssn", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "x_Svi9AtUzBM-7pJb73__TMIwhFFdRF45EegrArBprs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0943c948bbfd25923", + "afcollins-2619-ancoll-xrppt-master-0-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xhv4vRfhO38cdrZkl1Bdv-K6JN18D_CuoZfY2RUoWVs", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-016570e27a1b1ec68", + "afcollins-2619-ancoll-xrppt-worker-us-west-2d-vpxsb", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "xp-gK7v8KUvGlA2YzuRISE9fNeZbHNxToko9B2OO94M", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0db992b1e14127636", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2d-zhx9f", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "y92Gs9qrjDAJ7BxlKojJtiN1m5wwNQQry8wAMfVipVo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-053df2f00ffe7ed43", + "afcollins-2619-ancoll-xrppt-master-2-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ypoxUnhz36b4Qo5E5yGYlIcBOCqRXjZRPS8hR_tdH90", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0dc446e96eb81c4f6", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2a-kk8c7", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "0jsLgHovMqA3OGf4hJ78x3DQzPjywaqipMlD-TLoYng", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00fb9db94b58bf2c7", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-a9d6e28b-1f8e-406d-b117-4cccd83dde4f", + "General Purpose SSD (gp3)", + "2", + "$0.16", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "As5X8hGJ9xwZNCvN4XJp6srDp4xFsySj-TFd6o2jS1c", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06ce30bd4439b8f5d", + "infra-us-west-2a-j9zkx", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "B-9-mtLwihkHjmRYVdacy_oy1aNTkw_KojpLWjdUnrI", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0aa48d5c07f06fff7", + "afcollins-2619-ancoll-xrppt-worker-us-west-2b-7xd4k", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BSxGB_xH-9oR5YthBcWvtUIHmNGx-uTxrXdCr9ifItk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-02c1af4bf8192019f", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2b-pgxw6", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BaNCG47z-CXLZfr5rEqYtUvRMBqSavD8pyQ0dkgLWso", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-077fa51345512c417", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-ade13cf3-a915-4a26-865c-517fd2fc2e88", + "General Purpose SSD (gp3)", + "2", + "$0.16", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "BhLaIXdL5kYasXW6gqCdJBChE1ihDW9N0_ZsIW_eMfo", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0d085ad157fae5f7c", + "afcollins-2619-ancoll-xrppt-worker-us-west-2b-9mxlp", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "IYGWKT1f2qHGSjBz1f0XJ7-6h4ZFSNqA1HCtpDekwx8", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0b6710f83bbdf8e33", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-8e80ad34-582c-47de-ac1a-a1df32c998a9", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "Jnw1Gw99spkb0_YKm4qCrLsttkleEPKu74RNxWXB2wk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06a6c181ef8eee1c3", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2a-fj4pj", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "K7vPc4l3AvvuPCVdiZ_hMsaMdRZwN005SGZUY5GZKQ4", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-08e82090f21b9c817", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2b-dm5hv", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "LD794SpTlKztmVXhcAiyk7Tq6DcKsMsFD7HlR2l1Scc", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0f379979a6e188b98", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-f094f2a8-841e-41a0-92e3-a2a97b42a32f", + "General Purpose SSD (gp3)", + "2", + "$0.16", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "NPiYIMHy9b7EGdZiO9GaCPeuQymNaFnX2H9WRfhqW40", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0e07e95f12786b170", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-314324eb-b8ee-468f-a44a-81f8252fae75", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "RfcHJlmG808BwZnAVBxx4RkgJ_W9KvrvhGHr5LoMOVU", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-030386f9c8d98d23c", + "afcollins-2619-ancoll-5b8gn-master-1-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "WbjvDHLvNVsVFmtMYZrZ0fpXg2j0JNeZuX6oA22j0RQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0cb6168c423727ba4", + "afcollins-2619-ancoll-5b8gn-worker-us-west-2b-dt69r", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ZIIcrCF47sWPui0rG-HmBEhnwgvn5LmYSTL0Jf-qYtY", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00e58b3389fa58d87", + "afcollins-2619-ancoll-xrppt-master-1-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ZildwQI5Oqa_wPX0iZKFV5x3yVFRs-FJ9A6ul1Hk8RA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-03366204e122af53e", + "afcollins-2619-ancoll-ptfqt-master-1-vol", + "General Purpose SSD (gp3)", + "100", + "$8.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "b0u0vQmKi7JBTAVRetbKLwfhaBPLGfXEchhAuhTbphk", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0648fdd816d6c8e94", + "afcollins-2619-ancoll-ptfqt-dynamic-pvc-abf7861e-a64b-462e-936b-e2c29cd8ec50", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "bC-7mAZk4abPxn4pHq5wQZolgq-wKOPU55FMaPH_FnM", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-003891809dc30e8fa", + "afcollins-2619-ancoll-5b8gn-dynamic-pvc-ce10272d-91e6-47d8-a3ed-01ae783523b9", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "cxbEoJ8fW2XN9IfSUZnKz3Xx1f2sCcZpwF6VaqjhhbE", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00a07c47070adb577", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2b-cx9dz", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ddyxK74DCB5E8ukguk-HU7lqgeKi2xUBfiDCE2cjpwQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0c8f3aded06141aab", + "infra-us-west-2b-r5dn4", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "nukVIG1-5boduD10vgBge9qz91v6gjQDuv7Vt9qARbQ", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-06743f3af54589a45", + "afcollins-2619-ancoll-xrppt-dynamic-pvc-cbde8b70-e64d-4667-a9a6-e616d429c29b", + "General Purpose SSD (gp3)", + "2", + "$0.16", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "ovgtRCxezwvCQZx6MGR1Fg8dTntNZ3o6pr_v4WHDA9g", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-059317a813494f5f1", + "infra-us-west-2b-7wwlk", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "vNAKL7IeShqZ1rC2JKWbLgqh-qC-cZ-mgpYPBM8XOPA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-0f1113d45c05df176", + "afcollins-2619-ancoll-ptfqt-worker-us-west-2a-mcb24", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + }, + { + "status": "warning", + "region": "us-west-2", + "resourceId": "zhBoQSS8E7eBIQ05tYbVeeGBMTbu0fUdPgPjCjZWMYA", + "isSuppressed": false, + "metadata": [ + "us-west-2", + "vol-00a466c70ba434cb1", + "infra-us-west-2b-m6cn7", + "General Purpose SSD (gp3)", + "50", + "$4.00", + null, + null, + null + ] + } + ] + } + }, + "c18d2gz171": { + "metadata": { + "id": "c18d2gz171", + "name": "Amazon S3 version-enabled buckets without lifecycle policies configured", + "description": "Checks if Amazon S3 version-enabled buckets have a lifecycle policy configured.
\nYou can specify the bucket names you would like to check, using the \u201cbucketNames\" parameters in your AWS Config rules.
\n
\nFor more information, see Managing your storage lifecycle.
\n
\nSource
\nAWS Config Managed Rule: s3-version-lifecycle-policy-check
\n
\nAlert Criteria
\nYellow: You have Amazon S3 version-enabled buckets without a lifecycle policy configured.
\n
\nRecommended Action
\nConfigure lifecycle policies for your S3 buckets to manage your objects so that they are stored cost effectively throughout their lifecycle.
\n
\nFor more information, see Setting lifecycle configuration on a bucket.
\n
\nAdditional Resources
\nManaging your storage lifecycle
\nSetting lifecycle configuration on a bucket", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz171", + "status": "not_available" + } + }, + "Qsdfp3A4L1": { + "metadata": { + "id": "Qsdfp3A4L1", + "name": "Amazon EC2 instances over-provisioned for Microsoft SQL Server", + "description": "Checks your Amazon Elastic Compute Cloud (Amazon EC2) instances that are running SQL Server in the past 24 hours. An SQL Server database has a compute capacity limit for each instance. An instance with SQL Server Standard edition can use up to 48 vCPUs. An instance with SQL Server Web can use up to 32 vCPUs. This check alerts you if an instance exceeds this vCPU limit.If your instance is over-provisioned, you pay full price without realizing an improvement in performance. You can manage the number and size of your instances to help lower costs. Estimated monthly savings are calculated by using the same instance family with the maximum number of vCPUs that an SQL Server instance can use and the On-Demand pricing. Actual savings will vary if you\u2019re using Reserved Instances (RI) or if the instance isn\u2019t running for a full day.
\n
\n

Alert Criteria


\nRed: An instance with SQL Server Standard edition has more than 48 vCPUs.
\nRed: An instance with SQL Server Web edition has more than 32 vCPUs.
\n
\n

Recommended Action


\nFor SQL Server Standard edition, consider changing to an instance in the same instance family with 48 vCPUs. For SQL Server Web edition, consider changing to an instance in the same instance family with 32 vCPUs. If it is memory intensive, consider changing to memory optimized R5 instances. For more information, see Best Practices for Deploying Microsoft SQL Server on Amazon EC2.
\n
\n

Additional Resources


\nMicrosoft SQL Server on AWS
\nYou can use Launch Wizard to simplify your SQL Server deployment on EC2.
\n", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Instance ID", + "Instance Type", + "vCPU", + "SQL Server Edition", + "Maximum vCPU", + "Recommended Instance Type", + "Estimated Monthly Savings", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Qsdfp3A4L1", + "timestamp": "2023-11-27T12:23:55Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + }, + "c18d2gz150": { + "metadata": { + "id": "c18d2gz150", + "name": "Amazon EC2 Instances Stopped", + "description": "Checks if there are Amazon EC2 instances that have been stopped for more than 30 days or other specified number.
\nYou can specify the allowed number of days value in the \"AllowedDays\" of AWS Config parameters.
\n
For more information, see Why am I being charged for Amazon EC2 when all my instances were terminated?
\n
\nSource
\nAWS Config Managed Rule: ec2-stopped-instance
\n
\nAlert Criteria
\nYellow: There are Amazon EC2 instances stopped for more than more than allowed number of days.
\n
\nRecommended Action
\nReview the EC2 instances that have been stopped for more than allowed number of days. To avoid incuring unnecessary cost, terminate any instances that are no longer needed.
\n
\nFor more information, see Terminate your instance.
\n
\nAdditional Resources
\nAmazon EC2 On-Demand Pricing", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Resource", + "AWS Config Rule", + "Input Parameters", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "c18d2gz150", + "status": "not_available" + } + }, + "Qsdfp3A4L2": { + "metadata": { + "id": "Qsdfp3A4L2", + "name": "Amazon EC2 instances consolidation for Microsoft SQL Server", + "description": "Checks your Amazon Elastic Compute Cloud (Amazon EC2) instances that are running SQL Server in the past 24 hours. This check alerts you if your instance has less than the minimum number of SQL Server licenses. From the Microsoft SQL Server Licensing Guide, you are paying 4 vCPU licenses even if an instance has only 1 or 2 vCPUs. You can consolidate smaller SQL Server instances to help lower costs.
\n
\n

Alert Criteria


\nYellow: An instance with SQL Server has less than 4 vCPUs.
\n
\n

Recommended Action


\nConsider consolidating smaller SQL Server workloads into instances with at least 4 vCPUs.
\n
\n

Additional Resources


\nMicrosoft SQL Server on AWS
\nMicrosoft Licensing on AWS
\nMicrosoft SQL Server Licensing Guide
\n", + "category": "cost_optimizing", + "metadata": [ + "Status", + "Region", + "Instance ID", + "Instance Type", + "vCPU", + "Minimum vCPU", + "SQL Server Edition", + "Last Updated Time" + ] + }, + "reports": { + "checkId": "Qsdfp3A4L2", + "timestamp": "2023-11-27T12:24:27Z", + "status": "ok", + "resourcesSummary": { + "resourcesProcessed": 0, + "resourcesFlagged": 0, + "resourcesIgnored": 0, + "resourcesSuppressed": 0 + }, + "categorySpecificSummary": {}, + "flaggedResources": [] + } + } + } +} \ No newline at end of file diff --git a/cloud_governance/policy/aws/optimize_resources_report.py b/cloud_governance/policy/aws/optimize_resources_report.py new file mode 100644 index 000000000..b5c0888aa --- /dev/null +++ b/cloud_governance/policy/aws/optimize_resources_report.py @@ -0,0 +1,113 @@ +import json + +import boto3 + +from cloud_governance.common.clouds.aws.support.support_operations import SupportOperations +from cloud_governance.common.clouds.aws.utils.common_methods import get_tag_value_from_tags +from cloud_governance.common.logger.init_logger import logger + +# @Todo, focusing only on cost-optimizing service: Need to find the tags for, rds, route53, ecr + + +class OptimizeResourcesReport: + COST_OPIMIZING_REPORTS = { + 'ec2_reports': ['Amazon EC2 instances over-provisioned for Microsoft SQL Server', + 'Low Utilization Amazon EC2 Instances', + 'Amazon EC2 instances consolidation for Microsoft SQL Server', + 'Amazon EC2 Reserved Instance Lease Expiration', 'Amazon EC2 Instances Stopped'], + 'ebs_reports': ['Amazon EBS over-provisioned volumes', 'Underutilized Amazon EBS Volumes'], + 'eip_reports': ['Unassociated Elastic IP Addresses'], + 's3_reports': ['Amazon S3 Bucket Lifecycle Policy Configured', + 'Amazon S3 version-enabled buckets without lifecycle policies configured'], + 'rds_reports': ['Amazon RDS Idle DB Instances'], + 'load_balancer_reports': ['Idle Load Balancers'], + 'lambda_reports': ['AWS Lambda Functions with Excessive Timeouts', 'AWS Lambda Functions with High Error Rates', + 'AWS Lambda over-provisioned functions for memory size'], + 'ecr_reports': ['Amazon ECR Repository Without Lifecycle Policy Configured'], + 'route_53_reports': ['Amazon Route 53 Latency Resource Record Sets', 'Amazon Route 53 Name Server Delegations'] + } + + def __init__(self): + self.__support_operations = SupportOperations() + + def __get_tags(self, name: str, region_name: str, resource_id: str): + """ + This method returns the aws client + :param name: + :return: + """ + ec2_reports = self.COST_OPIMIZING_REPORTS['ec2_reports'] + ebs_reports = self.COST_OPIMIZING_REPORTS['ebs_reports'] + eip_reports = self.COST_OPIMIZING_REPORTS['eip_reports'] + s3_reports = self.COST_OPIMIZING_REPORTS['s3_reports'] + load_balancer_reports = self.COST_OPIMIZING_REPORTS['load_balancer_reports'] + + def lower_data(data: list): + return list(map(lambda item: item.lower(), data)) + try: + if name.lower() in lower_data(ec2_reports) + lower_data(ebs_reports) + lower_data(eip_reports): + return boto3.client('ec2', region_name=region_name). \ + describe_tags(Filters=[{'Name': 'resource-id', 'Values': [resource_id]}]).get('Tags', []) + elif name.lower() in lower_data(s3_reports): + return boto3.client('s3', region_name=region_name).get_bucket_tagging(Bucket=resource_id).get('TagSet', []) + elif name.lower() in lower_data(load_balancer_reports): + tags = boto3.client('elb', region_name=region_name).\ + describe_tags(LoadBalancerNames=[resource_id]).get('TagDescriptions', []) + for tag in tags: + if tag.get('LoadBalancerName') == resource_id: + return tag.get('Tags') + tags = boto3.client('elbv2', region_name=region_name). \ + describe_tags(ResourceArns=[resource_id]).get('TagDescriptions', []) + for tag in tags: + if tag.get('ResourceArn') == resource_id: + return tag.get('Tags') + except Exception as err: + logger.error(err) + return [] + + def __get_optimization_reports(self): + """ + This method returns the report data + :return: + :rtype: + """ + report_list = self.__support_operations.get_trusted_advisor_reports() + optimize_resource_list = [] + unique_report = set() + for report_name, resources in report_list.items(): + if report_name: + for key, values in resources.items(): + name = values.get('metadata', {}).get('name') + unique_report.add(name) + flagged_resources_list = values.get('reports', {}).get('flaggedResources') + if flagged_resources_list: + resource_values = [item.replace(' ', '') for item in + values.get('metadata', {}).get('metadata', [])] + for flagged_resources in flagged_resources_list: + resource_location = '' + if report_name == 'cost_optimizing': + resource_location = 1 + resources = {} + for idx, item in enumerate(flagged_resources.get('metadata', [])): + if resource_values[idx] in [f'Day{i}' for i in range(1, 15)]: + continue + resources[resource_values[idx]] = str(item) + if resource_location and resource_location == idx: + tags = self.__get_tags(name, region_name=flagged_resources.get('region'), resource_id=item) + user = get_tag_value_from_tags(tags=tags, tag_name='User') + resources['User'] = user + resources['ResourceId'] = item + resources['ReportName'] = name + resources['Report'] = report_name + if 'LastUpdatedTime' in resources: + del resources['LastUpdatedTime'] + optimize_resource_list.append(resources) + return optimize_resource_list + + def run(self): + """ + This method start the report collection + :return: + :rtype: + """ + return self.__get_optimization_reports() diff --git a/cloud_governance/policy/policy_operations/aws/zombie_non_cluster/zombie_non_cluster_polices.py b/cloud_governance/policy/policy_operations/aws/zombie_non_cluster/zombie_non_cluster_polices.py index b4e5d683a..f03f16a5c 100644 --- a/cloud_governance/policy/policy_operations/aws/zombie_non_cluster/zombie_non_cluster_polices.py +++ b/cloud_governance/policy/policy_operations/aws/zombie_non_cluster/zombie_non_cluster_polices.py @@ -22,27 +22,32 @@ def run(self): for cls in inspect.getmembers(zombie_non_cluster_policy_module, inspect.isclass): if self._policy.replace('_', '') == cls[0].lower(): response = cls[1]().run() - if isinstance(response, str): - logger.info(f'key: {cls[0]}, Response: {response}') - else: - logger.info(f'key: {cls[0]}, count: {len(response)}, {response}') - policy_result = response - - if self._es_operations.check_elastic_search_connection(): - if policy_result: - for policy_dict in policy_result: - policy_dict['region_name'] = self._region - policy_dict['account'] = self._account - self._es_operations.upload_to_elasticsearch(data=policy_dict.copy(), index=self._es_index) - logger.info(f'Uploaded the policy results to elasticsearch index: {self._es_index}') - else: - logger.error(f'No data to upload on @{self._account} at {datetime.utcnow()}') + if response: + if isinstance(response, str): + logger.info(f'key: {cls[0]}, Response: {response}') else: - logger.error('ElasticSearch host is not pingable, Please check ') - - if self._policy_output: - # if self._policy not in ('ec2_idle', 'ebs_in_use', 'ec2_run', 's3_inactive', 'zombie_snapshots', 'nat_gateway_unused'): - # beautify_data = self._beautify_upload_data(upload_resource_data=response) - # policy_result = {'count': len(beautify_data), self._policy: beautify_data} - logger.info(policy_result) - self._s3operations.save_results_to_s3(policy=self._policy.replace('_', '-'), policy_output=self._policy_output, policy_result=policy_result) + logger.info(f'key: {cls[0]}, count: {len(response)}, {response}') + policy_result = response + + if self._es_operations.check_elastic_search_connection(): + if policy_result: + if len(policy_result) > 500: + self._es_operations.upload_data_in_bulk(data_items=policy_result.copy(), + index=self._es_index) + else: + for policy_dict in policy_result: + policy_dict['region_name'] = self._region + policy_dict['account'] = self._account + self._es_operations.upload_to_elasticsearch(data=policy_dict.copy(), index=self._es_index) + logger.info(f'Uploaded the policy results to elasticsearch index: {self._es_index}') + else: + logger.error(f'No data to upload on @{self._account} at {datetime.utcnow()}') + else: + logger.error('ElasticSearch host is not pingable, Please check ') + + if self._policy_output: + # if self._policy not in ('ec2_idle', 'ebs_in_use', 'ec2_run', 's3_inactive', 'zombie_snapshots', 'nat_gateway_unused'): + # beautify_data = self._beautify_upload_data(upload_resource_data=response) + # policy_result = {'count': len(beautify_data), self._policy: beautify_data} + logger.info(policy_result) + self._s3operations.save_results_to_s3(policy=self._policy.replace('_', '-'), policy_output=self._policy_output, policy_result=policy_result) diff --git a/jenkins/clouds/aws/daily/policies/run_policies.py b/jenkins/clouds/aws/daily/policies/run_policies.py index 0bf230453..b1b99db96 100644 --- a/jenkins/clouds/aws/daily/policies/run_policies.py +++ b/jenkins/clouds/aws/daily/policies/run_policies.py @@ -56,6 +56,7 @@ def get_policies(type: str = None): policies.remove('monthly_report') policies.remove('cost_billing_reports') policies.remove('cost_explorer_payer_billings') +policies.remove('optimize_resources_report') for region in regions: for policy in policies: @@ -109,6 +110,14 @@ def get_policies(type: str = None): envs = list(map(combine_vars, account.items())) os.system(f"""podman run --rm --name cloud-governance --net="host" -e policy="send_aggregated_alerts" -e {' -e '.join(envs)} -e {' -e '.join(common_envs)} -e DEFAULT_ADMINS="['athiruma']" quay.io/ebattat/cloud-governance:latest""") +# Running the trust advisor reports, data dumped into default index - cloud-governance-policy-es-index + +os.system(f"""podman run --rm --name cloud-governance -e AWS_DEFAULT_REGION="us-east-1" -e account="perf-dept" -e policy="optimize_resources_report" -e AWS_ACCESS_KEY_ID="{AWS_ACCESS_KEY_ID_DELETE_PERF}" -e AWS_SECRET_ACCESS_KEY="{AWS_SECRET_ACCESS_KEY_DELETE_PERF}" -e es_host="{ES_HOST}" -e es_port="{ES_PORT}" -e log_level="INFO" quay.io/ebattat/cloud-governance:latest""") +os.system(f"""podman run --rm --name cloud-governance -e AWS_DEFAULT_REGION="us-east-1" -e account="psap" -e policy="optimize_resources_report" -e AWS_ACCESS_KEY_ID="{AWS_ACCESS_KEY_ID_DELETE_PSAP}" -e AWS_SECRET_ACCESS_KEY="{AWS_SECRET_ACCESS_KEY_DELETE_PSAP}" -e es_host="{ES_HOST}" -e es_port="{ES_PORT}" -e log_level="INFO" quay.io/ebattat/cloud-governance:latest""") +os.system(f"""podman run --rm --name cloud-governance -e AWS_DEFAULT_REGION="us-east-1" -e account="perf-scale" -e policy="optimize_resources_report" -e AWS_ACCESS_KEY_ID="{AWS_ACCESS_KEY_ID_DELETE_PERF_SCALE}" -e AWS_SECRET_ACCESS_KEY="{AWS_SECRET_ACCESS_KEY_DELETE_PERF_SCALE}" -e es_host="{ES_HOST}" -e es_index="" -e log_level="INFO" quay.io/ebattat/cloud-governance:latest""") + + + # # Gitleaks run on github not related to any aws account print("run gitleaks") region = 'us-east-1' diff --git a/tests/unittest/cloud_governance/common/clouds/aws/support/__init__.py b/tests/unittest/cloud_governance/common/clouds/aws/support/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/tests/unittest/cloud_governance/common/clouds/aws/support/test_support_operations.py b/tests/unittest/cloud_governance/common/clouds/aws/support/test_support_operations.py new file mode 100644 index 000000000..9aa7b75ff --- /dev/null +++ b/tests/unittest/cloud_governance/common/clouds/aws/support/test_support_operations.py @@ -0,0 +1,70 @@ +from unittest.mock import patch + +from cloud_governance.common.clouds.aws.support.support_operations import SupportOperations + + +@patch('boto3.client') +def test_get_describe_trusted_advisor_checks(mock_client): + """ + This method tests the get_describe_trusted_advisor_checks method + :param mock_client: + :type mock_client: + :return: + :rtype: + """ + mock_client.return_value.describe_trusted_advisor_checks.return_value = { + 'checks': [ + { + 'id': 'test_report', + 'name': 'Test Report', + 'category': 'test_optimize_report', + 'metadata': [ + 'ResourceId', + ] + }, + ] + } + support_operations = SupportOperations() + response = support_operations.get_describe_trusted_advisor_checks() + assert response == [{'id': 'test_report', 'name': 'Test Report', 'category': 'test_optimize_report', 'metadata': ['ResourceId']}] + + +@patch('boto3.client') +def test_get_trusted_advisor_reports(mock_client): + """ + This method tests the get_trusted_advisor_reports method + :param mock_client: + :type mock_client: + :return: + :rtype: + """ + mock_client.return_value.describe_trusted_advisor_checks.return_value = { + 'checks': [ + { + 'id': 'test_report', + 'name': 'Test Report', + 'category': 'test_optimize_report', + 'metadata': [ + 'ResourceId', + ] + }, + ] + } + mock_client.return_value.describe_trusted_advisor_check_result.return_value = { + 'result': { + 'checkId': 'test_report', + 'resourcesSummary': { + 'resourcesProcessed': 123, + }, + 'flaggedResources': [ + { + 'metadata': [ + 'test-123', + ] + }, + ] + } + } + support_operations = SupportOperations() + response = support_operations.get_trusted_advisor_reports() + assert response == {'test_optimize_report': {'test_report': {'metadata': {'id': 'test_report', 'name': 'Test Report', 'category': 'test_optimize_report', 'metadata': ['ResourceId']}, 'reports': {'checkId': 'test_report', 'resourcesSummary': {'resourcesProcessed': 123}, 'flaggedResources': [{'metadata': ['test-123']}]}}}} diff --git a/tests/unittest/cloud_governance/policy/aws/test_optimize_resources_report.py b/tests/unittest/cloud_governance/policy/aws/test_optimize_resources_report.py new file mode 100644 index 000000000..874b33250 --- /dev/null +++ b/tests/unittest/cloud_governance/policy/aws/test_optimize_resources_report.py @@ -0,0 +1,49 @@ +from unittest.mock import patch + +from cloud_governance.policy.aws.optimize_resources_report import OptimizeResourcesReport + + +@patch('boto3.client') +def test_get_optimization_reports(mock_client): + """ + This method tests the methods returns the data + :return: + :rtype: + """ + optimize_reports = OptimizeResourcesReport() + mock_client.return_value.describe_trusted_advisor_checks.return_value = { + 'checks': [ + { + 'id': 'test_report', + 'name': 'Test Report', + 'category': 'test_optimize_report', + 'metadata': [ + 'ResourceId', + ] + }, + ] + } + mock_client.return_value.describe_trusted_advisor_check_result.return_value = { + 'result': { + 'checkId': 'test_report', + 'resourcesSummary': { + 'resourcesProcessed': 123, + 'resourcesFlagged': 123, + 'resourcesIgnored': 123, + 'resourcesSuppressed': 123 + }, + 'flaggedResources': [ + { + 'status': 'string', + 'region': 'string', + 'resourceId': 'string', + 'isSuppressed': True, + 'metadata': [ + 'test-123', + ] + }, + ] + } + } + response = optimize_reports.run() + assert response == [{'ResourceId': 'test-123', 'ReportName': 'Test Report', 'Report': 'test_optimize_report'}]