Assessment - Security Compliance Check

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-08-02 20:22:39.749237

Category:

Global Information Security

Last Run:

2025-04-16 16:29

Notes:

Automated assessment ran on 2025-08-02 20:22:39.749237

ID:	SEC-001
Description:	Verifies enrollment in the Operational Risk Compliance Assessment program.

ID:

SEC-001

Description:

Verifies enrollment in the Operational Risk Compliance Assessment program.

{
  "evaluation_time": "2025-08-02T20:22:31.655576+00:00",
  "password_policy": null,
  "password_policy_strength": 0,
  "roles": [
    {
      "created": "2023-06-16T04:24:48+00:00",
      "has_admin_permissions": false,
      "name": "AmazonSageMaker-ExecutionRole-20230616T095414",
      "policies": [
        "AmazonSageMaker-ExecutionPolicy-20230616T095414",
        "AmazonSageMakerFullAccess"
      ]
    },
    {
      "created": "2023-06-03T01:03:04+00:00",
      "has_admin_permissions": false,
      "name": "aws-ec2-spot-fleet-tagging-role",
      "policies": [
        "AmazonEC2SpotFleetTaggingRole"
      ]
    },
    {
      "created": "2023-06-21T11:53:40+00:00",
      "has_admin_permissions": false,
      "name": "aws-elasticbeanstalk-service-role",
      "policies": [
        "AWSElasticBeanstalkEnhancedHealth",
        "AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:09:50+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKS",
      "policies": [
        "AmazonEKSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:18:49+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKSNodegroup",
      "policies": [
        "AWSServiceRoleForAmazonEKSNodegroup"
      ]
    },
    {
      "created": "2023-06-21T11:29:20+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
      "policies": [
        "AWSApplicationAutoscalingDynamoDBTablePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:19:08+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAutoScaling",
      "policies": [
        "AutoScalingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-11T09:55:38+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForEC2Spot",
      "policies": [
        "AWSEC2SpotServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T07:05:52+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForElasticLoadBalancing",
      "policies": [
        "AWSElasticLoadBalancingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:39+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForOrganizations",
      "policies": [
        "AWSOrganizationsServiceTrustPolicy"
      ]
    },
    {
      "created": "2023-06-21T10:03:53+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForRDS",
      "policies": [
        "AmazonRDSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-12T10:54:12+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForResourceExplorer",
      "policies": [
        "AWSResourceExplorerServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:41+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSSO",
      "policies": [
        "AWSSSOServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-17T20:15:28+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSupport",
      "policies": [
        "AWSSupportServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-19T23:05:11+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForTrustedAdvisor",
      "policies": [
        "AWSTrustedAdvisorServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-13T06:51:14+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForVPCTransitGateway",
      "policies": [
        "AWSVPCTransitGatewayServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-14T14:35:20+00:00",
      "has_admin_permissions": false,
      "name": "ec2_s3_airflow_role",
      "policies": [
        "AmazonEC2FullAccess",
        "AmazonS3FullAccess"
      ]
    },
    {
      "created": "2023-06-14T06:45:43+00:00",
      "has_admin_permissions": true,
      "name": "glue-admin",
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "created": "2023-06-21T10:03:49+00:00",
      "has_admin_permissions": false,
      "name": "rds-monitoring-role",
      "policies": [
        "AmazonRDSEnhancedMonitoringRole"
      ]
    },
    {
      "created": "2023-06-21T12:54:45+00:00",
      "has_admin_permissions": false,
      "name": "StorageGatewayBucketAccessRole16873520845900.017127998258565036",
      "policies": [
        "AllowStorageGatewayAssumeBucketAccessRole16873520845900.4670055199941725"
      ]
    }
  ],
  "roles_with_excessive_permissions": 1,
  "total_roles": 20,
  "total_users": 2,
  "users": [
    {
      "access_keys_count": 1,
      "created": "2023-05-05T05:03:45+00:00",
      "has_admin_permissions": true,
      "has_console_access": false,
      "mfa_enabled": false,
      "name": "potluriteja",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "access_keys_count": 1,
      "created": "2025-04-14T14:59:37+00:00",
      "has_admin_permissions": true,
      "has_console_access": true,
      "mfa_enabled": false,
      "name": "potluriteja1",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    }
  ],
  "users_with_console_access": 1,
  "users_with_excessive_permissions": 2,
  "users_with_old_access_keys": 2,
  "users_without_mfa": 1
}

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-08-02 20:22:48.174544

Category:

Global Information Security

Last Run:

2025-04-16 16:29

Notes:

Automated assessment ran on 2025-08-02 20:22:48.174544

ID:	SEC-002
Description:	Evaluates results from Infrastructure as Code security scans.

ID:

SEC-002

Description:

Evaluates results from Infrastructure as Code security scans.

{
  "evaluation_time": "2025-08-02T20:22:40.164725+00:00",
  "password_policy": null,
  "password_policy_strength": 0,
  "roles": [
    {
      "created": "2023-06-16T04:24:48+00:00",
      "has_admin_permissions": false,
      "name": "AmazonSageMaker-ExecutionRole-20230616T095414",
      "policies": [
        "AmazonSageMaker-ExecutionPolicy-20230616T095414",
        "AmazonSageMakerFullAccess"
      ]
    },
    {
      "created": "2023-06-03T01:03:04+00:00",
      "has_admin_permissions": false,
      "name": "aws-ec2-spot-fleet-tagging-role",
      "policies": [
        "AmazonEC2SpotFleetTaggingRole"
      ]
    },
    {
      "created": "2023-06-21T11:53:40+00:00",
      "has_admin_permissions": false,
      "name": "aws-elasticbeanstalk-service-role",
      "policies": [
        "AWSElasticBeanstalkEnhancedHealth",
        "AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:09:50+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKS",
      "policies": [
        "AmazonEKSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:18:49+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKSNodegroup",
      "policies": [
        "AWSServiceRoleForAmazonEKSNodegroup"
      ]
    },
    {
      "created": "2023-06-21T11:29:20+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
      "policies": [
        "AWSApplicationAutoscalingDynamoDBTablePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:19:08+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAutoScaling",
      "policies": [
        "AutoScalingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-11T09:55:38+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForEC2Spot",
      "policies": [
        "AWSEC2SpotServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T07:05:52+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForElasticLoadBalancing",
      "policies": [
        "AWSElasticLoadBalancingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:39+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForOrganizations",
      "policies": [
        "AWSOrganizationsServiceTrustPolicy"
      ]
    },
    {
      "created": "2023-06-21T10:03:53+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForRDS",
      "policies": [
        "AmazonRDSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-12T10:54:12+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForResourceExplorer",
      "policies": [
        "AWSResourceExplorerServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:41+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSSO",
      "policies": [
        "AWSSSOServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-17T20:15:28+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSupport",
      "policies": [
        "AWSSupportServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-19T23:05:11+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForTrustedAdvisor",
      "policies": [
        "AWSTrustedAdvisorServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-13T06:51:14+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForVPCTransitGateway",
      "policies": [
        "AWSVPCTransitGatewayServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-14T14:35:20+00:00",
      "has_admin_permissions": false,
      "name": "ec2_s3_airflow_role",
      "policies": [
        "AmazonEC2FullAccess",
        "AmazonS3FullAccess"
      ]
    },
    {
      "created": "2023-06-14T06:45:43+00:00",
      "has_admin_permissions": true,
      "name": "glue-admin",
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "created": "2023-06-21T10:03:49+00:00",
      "has_admin_permissions": false,
      "name": "rds-monitoring-role",
      "policies": [
        "AmazonRDSEnhancedMonitoringRole"
      ]
    },
    {
      "created": "2023-06-21T12:54:45+00:00",
      "has_admin_permissions": false,
      "name": "StorageGatewayBucketAccessRole16873520845900.017127998258565036",
      "policies": [
        "AllowStorageGatewayAssumeBucketAccessRole16873520845900.4670055199941725"
      ]
    }
  ],
  "roles_with_excessive_permissions": 1,
  "total_roles": 20,
  "total_users": 2,
  "users": [
    {
      "access_keys_count": 1,
      "created": "2023-05-05T05:03:45+00:00",
      "has_admin_permissions": true,
      "has_console_access": false,
      "mfa_enabled": false,
      "name": "potluriteja",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "access_keys_count": 1,
      "created": "2025-04-14T14:59:37+00:00",
      "has_admin_permissions": true,
      "has_console_access": true,
      "mfa_enabled": false,
      "name": "potluriteja1",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    }
  ],
  "users_with_console_access": 1,
  "users_with_excessive_permissions": 2,
  "users_with_old_access_keys": 2,
  "users_without_mfa": 1
}

Security Compliance Check

Overall Score: 0.47 / 100

Checkpoint Results

Global Information Security

Enrolled in ORCA

IAC Scan