Assessment - Sample Extended Compliance Assessment for Barometer IT App

Status:

Failed

Score: 2.07

Assessment Information

Category:	Logging & Monitoring
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:55.162268

Checkpoint Details

ID:	AWS-LOG-001
Description:	Checks if CloudTrail logs are not integrated with CloudWatch Logs

Detailed Results

{
  "alerts_configured": 5,
  "coverage_percentage": 70.7695312143095,
  "logging_enabled": 3,
  "resources_checked": 10,
  "retention_days": 365,
  "sample_resources": [
    "resource-8256",
    "resource-2072",
    "resource-9760"
  ]
}

Status:

Failed

Score: 47.87

Assessment Information

Category:	Logging & Monitoring
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:58.418095

Checkpoint Details

ID:	AZURE-LOG-001
Description:	Checks for App Service apps that do not have diagnostic logs enabled

Recommendation: Improve log retention and monitoring coverage.

Detailed Results

{
  "alerts_configured": 3,
  "coverage_percentage": 83.56677585429587,
  "logging_enabled": 15,
  "resources_checked": 11,
  "retention_days": 7,
  "sample_resources": [
    "resource-1266",
    "resource-8800",
    "resource-3286"
  ]
}

Status:

Failed

Score: 25.92

Assessment Information

Category:	Identity & Access Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:55.569631

Checkpoint Details

ID:	AWS-IAM-002
Description:	Checks for IAM users with administrator privileges

Detailed Results

{
  "compliant_resources": 4,
  "issues_found": 0,
  "policy_violations": 2,
  "resources_checked": 19,
  "risk_level": "High",
  "sample_resources": [
    "resource-4147",
    "resource-5162",
    "resource-8292"
  ]
}

Status:

Failed

Score: 13.15

Assessment Information

Category:	Identity & Access Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:56.382267

Checkpoint Details

ID:	AWS-IAM-001
Description:	Checks if AWS root account has active access keys, which is a security risk

Detailed Results

{
  "compliant_resources": 7,
  "issues_found": 1,
  "policy_violations": 0,
  "resources_checked": 11,
  "risk_level": "Medium",
  "sample_resources": [
    "resource-7293",
    "resource-3595",
    "resource-1742"
  ]
}

Status:

Failed

Score: 41.02

Assessment Information

Category:	Security Configurations
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:55.975659

Checkpoint Details

ID:	AWS-SEC-001
Description:	Checks for S3 buckets with public read access, which is a security risk

Detailed Results

{
  "compliant_resources": 6,
  "encryption_status": false,
  "public_access": false,
  "resources_checked": 21,
  "sample_resources": [
    "resource-7332",
    "resource-3673",
    "resource-9377"
  ],
  "vulnerabilities": 1
}

Status:

Warning

Score: 59.38

Assessment Information

Category:	Security Configurations
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:54.750454

Checkpoint Details

ID:	AZURE-SEC-001
Description:	Checks for storage accounts that are not configured to use secure transfer

Recommendation: Audit security configurations for potential vulnerabilities.

Detailed Results

{
  "compliant_resources": 19,
  "encryption_status": false,
  "public_access": false,
  "resources_checked": 24,
  "sample_resources": [
    "resource-7281",
    "resource-6811",
    "resource-6464"
  ],
  "vulnerabilities": 2
}

Status:

Warning

Score: 50.46

Assessment Information

Category:	Resource Configuration & Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:56.790856

Checkpoint Details

ID:	AWS-RES-001
Description:	Checks for EC2 instances that do not have termination protection enabled

Detailed Results

{
  "backup_enabled": false,
  "properly_configured": 12,
  "redundancy_configured": true,
  "resources_checked": 24,
  "sample_resources": [
    "resource-8962",
    "resource-2044",
    "resource-4077"
  ],
  "utilization_percentage": 15.598935958993989
}

Status:

Passed

Score: 76.78

Assessment Information

Category:	Resource Configuration & Management
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:57.197279

Checkpoint Details

ID:	AZURE-RES-001
Description:	Checks for VMs that do not have backup configured

Recommendation: Validate resource configurations against best practices.

Detailed Results

{
  "backup_enabled": true,
  "properly_configured": 16,
  "redundancy_configured": false,
  "resources_checked": 20,
  "sample_resources": [
    "resource-8954",
    "resource-1644",
    "resource-9591"
  ],
  "utilization_percentage": 59.43744790540828
}

Status:

Failed

Score: 28.67

Assessment Information

Category:	Cost Optimization
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:57.604684

Checkpoint Details

ID:	AWS-COST-001
Description:	Checks for underutilized EC2 instances that may be wasting resources

Detailed Results

{
  "idle_resources": 5,
  "optimizable_resources": 2,
  "potential_savings": "$810/month",
  "resources_checked": 22,
  "sample_resources": [
    "resource-9046",
    "resource-8653",
    "resource-7164"
  ],
  "utilization_percentage": 88.23097998616394
}

Status:

Warning

Score: 67.71

Assessment Information

Category:	Cost Optimization
Last Run:	2025-04-23 16:49
Notes:	Simulated assessment ran on 2025-08-03 11:00:58.012045

Checkpoint Details

ID:	AZURE-COST-001
Description:	Checks for unused virtual machines that may be wasting resources

Detailed Results

{
  "idle_resources": 2,
  "optimizable_resources": 10,
  "potential_savings": "$478/month",
  "resources_checked": 16,
  "sample_resources": [
    "resource-2417",
    "resource-1406",
    "resource-2201"
  ],
  "utilization_percentage": 36.14170205096374
}

Sample Extended Compliance Assessment for Barometer IT App

Overall Score: 41.54 / 100

Checkpoint Results

Logging & Monitoring

AWS: CloudTrail logs not integrated with CloudWatch

Azure: App Service apps without diagnostic logs

Identity & Access Management

AWS: IAM users with administrator privileges

AWS: Root account has active access keys

Security Configurations

AWS: S3 buckets with public read access

Azure: Storage accounts not using secure transfer

Resource Configuration & Management

AWS: EC2 instances without termination protection

Azure: Virtual machines without backup configured

Cost Optimization

AWS: Underutilized EC2 instances

Azure: Unused virtual machines