Assessment - Sample Extended Compliance Assessment for Barometer IT App

Status:

Passed

Score: 75.41

Assessment Information

Category:	Security Configurations
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:13.044159

Checkpoint Details

ID:	AZURE-SEC-001
Description:	Checks for storage accounts that are not configured to use secure transfer

Recommendation: Audit security configurations for potential vulnerabilities.

Detailed Results

{
  "compliant_resources": 19,
  "encryption_status": false,
  "public_access": false,
  "resources_checked": 24,
  "sample_resources": [
    "resource-7281",
    "resource-6811",
    "resource-6464"
  ],
  "vulnerabilities": 2
}

Status:

Failed

Score: 29.18

Assessment Information

Category:	Security Configurations
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:12.280715

Checkpoint Details

ID:	AWS-SEC-001
Description:	Checks for S3 buckets with public read access, which is a security risk

Detailed Results

{
  "compliant_resources": 6,
  "encryption_status": false,
  "public_access": false,
  "resources_checked": 21,
  "sample_resources": [
    "resource-7332",
    "resource-3673",
    "resource-9377"
  ],
  "vulnerabilities": 1
}

Status:

Failed

Score: 36.88

Assessment Information

Category:	Logging & Monitoring
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:13.423414

Checkpoint Details

ID:	AWS-LOG-001
Description:	Checks if CloudTrail logs are not integrated with CloudWatch Logs

Detailed Results

{
  "alerts_configured": 5,
  "coverage_percentage": 70.7695312143095,
  "logging_enabled": 3,
  "resources_checked": 10,
  "retention_days": 365,
  "sample_resources": [
    "resource-8256",
    "resource-2072",
    "resource-9760"
  ]
}

Status:

Passed

Score: 98.06

Assessment Information

Category:	Logging & Monitoring
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:15.353687

Checkpoint Details

ID:	AZURE-LOG-001
Description:	Checks for App Service apps that do not have diagnostic logs enabled

Recommendation: Improve log retention and monitoring coverage.

Detailed Results

{
  "alerts_configured": 3,
  "coverage_percentage": 83.56677585429587,
  "logging_enabled": 15,
  "resources_checked": 11,
  "retention_days": 7,
  "sample_resources": [
    "resource-1266",
    "resource-8800",
    "resource-3286"
  ]
}

Status:

Passed

Score: 80.87

Assessment Information

Category:	Identity & Access Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:11.852954

Checkpoint Details

ID:	AWS-IAM-002
Description:	Checks for IAM users with administrator privileges

Detailed Results

{
  "compliant_resources": 4,
  "issues_found": 0,
  "policy_violations": 2,
  "resources_checked": 19,
  "risk_level": "High",
  "sample_resources": [
    "resource-4147",
    "resource-5162",
    "resource-8292"
  ]
}

Status:

Failed

Score: 45.95

Assessment Information

Category:	Identity & Access Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:12.662935

Checkpoint Details

ID:	AWS-IAM-001
Description:	Checks if AWS root account has active access keys, which is a security risk

Detailed Results

{
  "compliant_resources": 7,
  "issues_found": 1,
  "policy_violations": 0,
  "resources_checked": 11,
  "risk_level": "Medium",
  "sample_resources": [
    "resource-7293",
    "resource-3595",
    "resource-1742"
  ]
}

Status:

Failed

Score: 7.40

Assessment Information

Category:	Resource Configuration & Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:13.835663

Checkpoint Details

ID:	AWS-RES-001
Description:	Checks for EC2 instances that do not have termination protection enabled

Detailed Results

{
  "backup_enabled": false,
  "properly_configured": 12,
  "redundancy_configured": true,
  "resources_checked": 24,
  "sample_resources": [
    "resource-8962",
    "resource-2044",
    "resource-4077"
  ],
  "utilization_percentage": 15.598935958993989
}

Status:

Failed

Score: 32.17

Assessment Information

Category:	Resource Configuration & Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:14.215158

Checkpoint Details

ID:	AZURE-RES-001
Description:	Checks for VMs that do not have backup configured

Recommendation: Validate resource configurations against best practices.

Detailed Results

{
  "backup_enabled": true,
  "properly_configured": 16,
  "redundancy_configured": false,
  "resources_checked": 20,
  "sample_resources": [
    "resource-8954",
    "resource-1644",
    "resource-9591"
  ],
  "utilization_percentage": 59.43744790540828
}

Status:

Warning

Score: 63.67

Assessment Information

Category:	Cost Optimization
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:14.594315

Checkpoint Details

ID:	AWS-COST-001
Description:	Checks for underutilized EC2 instances that may be wasting resources

Detailed Results

{
  "idle_resources": 5,
  "optimizable_resources": 2,
  "potential_savings": "$810/month",
  "resources_checked": 22,
  "sample_resources": [
    "resource-9046",
    "resource-8653",
    "resource-7164"
  ],
  "utilization_percentage": 88.23097998616394
}

Status:

Passed

Score: 93.75

Assessment Information

Category:	Cost Optimization
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-07-27 03:07:14.973289

Checkpoint Details

ID:	AZURE-COST-001
Description:	Checks for unused virtual machines that may be wasting resources

Detailed Results

{
  "idle_resources": 2,
  "optimizable_resources": 10,
  "potential_savings": "$478/month",
  "resources_checked": 16,
  "sample_resources": [
    "resource-2417",
    "resource-1406",
    "resource-2201"
  ],
  "utilization_percentage": 36.14170205096374
}

Sample Extended Compliance Assessment for Barometer IT App

Overall Score: 55.39 / 100

Checkpoint Results

Security Configurations

Azure: Storage accounts not using secure transfer

AWS: S3 buckets with public read access

Logging & Monitoring

AWS: CloudTrail logs not integrated with CloudWatch

Azure: App Service apps without diagnostic logs

Identity & Access Management

AWS: IAM users with administrator privileges

AWS: Root account has active access keys

Resource Configuration & Management

AWS: EC2 instances without termination protection

Azure: Virtual machines without backup configured

Cost Optimization

AWS: Underutilized EC2 instances

Azure: Unused virtual machines