Assessment - Pre-Launch Assessment

Status:

Failed

Score: 43.40

Assessment Information

Category:	Architecture & Engineering Services
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-07-31 19:16:50.675988

Checkpoint Details

ID:	ARCH-001
Description:	Evaluates the completeness and quality of architecture documentation.

Status:

Failed

Score: 0.47

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:16:59.631548

Checkpoint Details

ID:	SEC-001
Description:	Verifies enrollment in the Operational Risk Compliance Assessment program.

Recommendation: Strengthen account password policy to require longer passwords, symbols, numbers, and expiration. Enable MFA for 1 users with console access. Rotate 2 access keys that are older than 90 days. Review and reduce permissions for 2 users with admin access. Review and reduce permissions for 1 roles with admin access.

Detailed Results

{
  "evaluation_time": "2025-07-31T19:16:51.084725+00:00",
  "password_policy": null,
  "password_policy_strength": 0,
  "roles": [
    {
      "created": "2023-06-16T04:24:48+00:00",
      "has_admin_permissions": false,
      "name": "AmazonSageMaker-ExecutionRole-20230616T095414",
      "policies": [
        "AmazonSageMaker-ExecutionPolicy-20230616T095414",
        "AmazonSageMakerFullAccess"
      ]
    },
    {
      "created": "2023-06-03T01:03:04+00:00",
      "has_admin_permissions": false,
      "name": "aws-ec2-spot-fleet-tagging-role",
      "policies": [
        "AmazonEC2SpotFleetTaggingRole"
      ]
    },
    {
      "created": "2023-06-21T11:53:40+00:00",
      "has_admin_permissions": false,
      "name": "aws-elasticbeanstalk-service-role",
      "policies": [
        "AWSElasticBeanstalkEnhancedHealth",
        "AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:09:50+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKS",
      "policies": [
        "AmazonEKSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:18:49+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKSNodegroup",
      "policies": [
        "AWSServiceRoleForAmazonEKSNodegroup"
      ]
    },
    {
      "created": "2023-06-21T11:29:20+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
      "policies": [
        "AWSApplicationAutoscalingDynamoDBTablePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:19:08+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAutoScaling",
      "policies": [
        "AutoScalingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-11T09:55:38+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForEC2Spot",
      "policies": [
        "AWSEC2SpotServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T07:05:52+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForElasticLoadBalancing",
      "policies": [
        "AWSElasticLoadBalancingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:39+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForOrganizations",
      "policies": [
        "AWSOrganizationsServiceTrustPolicy"
      ]
    },
    {
      "created": "2023-06-21T10:03:53+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForRDS",
      "policies": [
        "AmazonRDSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-12T10:54:12+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForResourceExplorer",
      "policies": [
        "AWSResourceExplorerServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:41+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSSO",
      "policies": [
        "AWSSSOServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-17T20:15:28+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSupport",
      "policies": [
        "AWSSupportServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-19T23:05:11+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForTrustedAdvisor",
      "policies": [
        "AWSTrustedAdvisorServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-13T06:51:14+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForVPCTransitGateway",
      "policies": [
        "AWSVPCTransitGatewayServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-14T14:35:20+00:00",
      "has_admin_permissions": false,
      "name": "ec2_s3_airflow_role",
      "policies": [
        "AmazonEC2FullAccess",
        "AmazonS3FullAccess"
      ]
    },
    {
      "created": "2023-06-14T06:45:43+00:00",
      "has_admin_permissions": true,
      "name": "glue-admin",
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "created": "2023-06-21T10:03:49+00:00",
      "has_admin_permissions": false,
      "name": "rds-monitoring-role",
      "policies": [
        "AmazonRDSEnhancedMonitoringRole"
      ]
    },
    {
      "created": "2023-06-21T12:54:45+00:00",
      "has_admin_permissions": false,
      "name": "StorageGatewayBucketAccessRole16873520845900.017127998258565036",
      "policies": [
        "AllowStorageGatewayAssumeBucketAccessRole16873520845900.4670055199941725"
      ]
    }
  ],
  "roles_with_excessive_permissions": 1,
  "total_roles": 20,
  "total_users": 2,
  "users": [
    {
      "access_keys_count": 1,
      "created": "2023-05-05T05:03:45+00:00",
      "has_admin_permissions": true,
      "has_console_access": false,
      "mfa_enabled": false,
      "name": "potluriteja",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "access_keys_count": 1,
      "created": "2025-04-14T14:59:37+00:00",
      "has_admin_permissions": true,
      "has_console_access": true,
      "mfa_enabled": false,
      "name": "potluriteja1",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    }
  ],
  "users_with_console_access": 1,
  "users_with_excessive_permissions": 2,
  "users_with_old_access_keys": 2,
  "users_without_mfa": 1
}

Status:

Passed

Score: 5.00

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:17:20.999688

Checkpoint Details

ID:	SSL-001
Description:	Verifies that SSL certificates are properly registered and maintained.

Recommendation: All SSL certificates are valid and not near expiry.

Detailed Results

{
  "certificates": [
    {
      "days_remaining": 168,
      "domain": "example.com",
      "error": null,
      "issuer": "DigiCert Inc",
      "subject": "*.example.com",
      "valid": true,
      "valid_from": "2025-01-15T00:00:00",
      "valid_until": "2026-01-15T23:59:59"
    },
    {
      "days_remaining": 81,
      "domain": "replit.com",
      "error": null,
      "issuer": "Google Trust Services",
      "subject": "replit.com",
      "valid": true,
      "valid_from": "2025-07-23T05:02:14",
      "valid_until": "2025-10-21T06:01:53"
    }
  ],
  "evaluation_time": "2025-07-31T19:17:00.449922+00:00",
  "expired_certificates": 0,
  "invalid_certificates": 0,
  "near_expiry_certificates": 0,
  "total_certificates": 2
}

Status:

Failed

Score: 17.12

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-07-31 19:17:30.299128

Checkpoint Details

ID:	NET-001
Description:	Assesses the results of network perimeter security testing.

Status:

Failed

Score: 0.47

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:17:29.892167

Checkpoint Details

ID:	SEC-002
Description:	Evaluates results from Infrastructure as Code security scans.

Recommendation: Strengthen account password policy to require longer passwords, symbols, numbers, and expiration. Enable MFA for 1 users with console access. Rotate 2 access keys that are older than 90 days. Review and reduce permissions for 2 users with admin access. Review and reduce permissions for 1 roles with admin access.

Detailed Results

{
  "evaluation_time": "2025-07-31T19:17:21.406851+00:00",
  "password_policy": null,
  "password_policy_strength": 0,
  "roles": [
    {
      "created": "2023-06-16T04:24:48+00:00",
      "has_admin_permissions": false,
      "name": "AmazonSageMaker-ExecutionRole-20230616T095414",
      "policies": [
        "AmazonSageMaker-ExecutionPolicy-20230616T095414",
        "AmazonSageMakerFullAccess"
      ]
    },
    {
      "created": "2023-06-03T01:03:04+00:00",
      "has_admin_permissions": false,
      "name": "aws-ec2-spot-fleet-tagging-role",
      "policies": [
        "AmazonEC2SpotFleetTaggingRole"
      ]
    },
    {
      "created": "2023-06-21T11:53:40+00:00",
      "has_admin_permissions": false,
      "name": "aws-elasticbeanstalk-service-role",
      "policies": [
        "AWSElasticBeanstalkEnhancedHealth",
        "AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:09:50+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKS",
      "policies": [
        "AmazonEKSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:18:49+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKSNodegroup",
      "policies": [
        "AWSServiceRoleForAmazonEKSNodegroup"
      ]
    },
    {
      "created": "2023-06-21T11:29:20+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
      "policies": [
        "AWSApplicationAutoscalingDynamoDBTablePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:19:08+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAutoScaling",
      "policies": [
        "AutoScalingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-11T09:55:38+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForEC2Spot",
      "policies": [
        "AWSEC2SpotServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T07:05:52+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForElasticLoadBalancing",
      "policies": [
        "AWSElasticLoadBalancingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:39+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForOrganizations",
      "policies": [
        "AWSOrganizationsServiceTrustPolicy"
      ]
    },
    {
      "created": "2023-06-21T10:03:53+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForRDS",
      "policies": [
        "AmazonRDSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-12T10:54:12+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForResourceExplorer",
      "policies": [
        "AWSResourceExplorerServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:41+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSSO",
      "policies": [
        "AWSSSOServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-17T20:15:28+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSupport",
      "policies": [
        "AWSSupportServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-19T23:05:11+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForTrustedAdvisor",
      "policies": [
        "AWSTrustedAdvisorServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-13T06:51:14+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForVPCTransitGateway",
      "policies": [
        "AWSVPCTransitGatewayServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-14T14:35:20+00:00",
      "has_admin_permissions": false,
      "name": "ec2_s3_airflow_role",
      "policies": [
        "AmazonEC2FullAccess",
        "AmazonS3FullAccess"
      ]
    },
    {
      "created": "2023-06-14T06:45:43+00:00",
      "has_admin_permissions": true,
      "name": "glue-admin",
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "created": "2023-06-21T10:03:49+00:00",
      "has_admin_permissions": false,
      "name": "rds-monitoring-role",
      "policies": [
        "AmazonRDSEnhancedMonitoringRole"
      ]
    },
    {
      "created": "2023-06-21T12:54:45+00:00",
      "has_admin_permissions": false,
      "name": "StorageGatewayBucketAccessRole16873520845900.017127998258565036",
      "policies": [
        "AllowStorageGatewayAssumeBucketAccessRole16873520845900.4670055199941725"
      ]
    }
  ],
  "roles_with_excessive_permissions": 1,
  "total_roles": 20,
  "total_users": 2,
  "users": [
    {
      "access_keys_count": 1,
      "created": "2023-05-05T05:03:45+00:00",
      "has_admin_permissions": true,
      "has_console_access": false,
      "mfa_enabled": false,
      "name": "potluriteja",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "access_keys_count": 1,
      "created": "2025-04-14T14:59:37+00:00",
      "has_admin_permissions": true,
      "has_console_access": true,
      "mfa_enabled": false,
      "name": "potluriteja1",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    }
  ],
  "users_with_console_access": 1,
  "users_with_excessive_permissions": 2,
  "users_with_old_access_keys": 2,
  "users_without_mfa": 1
}

Status:

Failed

Score: 22.24

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-07-31 19:17:00.043901

Checkpoint Details

ID:	MONITOR-001
Description:	Evaluates the effectiveness of automated monitoring systems based on coverage, alert quality, and response times.

Status:

Warning

Score: 0.00

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:17:32.180003

Checkpoint Details

ID:	EC2-001
Description:	Checks the operational health of EC2 instances and their monitoring configuration.

Recommendation: No EC2 instances found in this AWS account or region.

Detailed Results

{
  "evaluation_time": "2025-07-31T19:17:31.112071+00:00",
  "instances": [],
  "instances_without_monitoring": 0,
  "instances_without_tags": 0,
  "running_instances": 0,
  "stopped_instances": 0,
  "total_instances": 0,
  "unpatched_instances": 0
}

Status:

Failed

Score: 0.00

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-07-31 19:17:32.585846

Checkpoint Details

ID:	DR-001
Description:	Evaluates disaster recovery readiness based on plan compliance, testing frequency, and recovery objectives.

Recommendation: Update DR plan to ensure it meets compliance requirements. Establish a regular testing schedule of at least annually (every 3-12 months). Conduct a DR review as soon as possible. Improve RPO to be under 24 hours. Improve RTO to be under 4 hours. Enhance system availability and resiliency measures. Improve site disaster recovery capabilities. Review and enhance hosting vendor alternatives.

Detailed Results

{
  "criteria_details": {
    "dr_plan_compliance_status": {
      "message": "Missing required data: dr_plan_compliance_status",
      "status": "failed"
    },
    "dr_testing_frequency": {
      "message": "Missing required data: dr_testing_frequency",
      "status": "failed"
    },
    "hosting_vendor_score": {
      "message": "Missing required data: hosting_vendor_score",
      "status": "failed"
    },
    "last_dr_review_date": {
      "message": "Missing required data: last_dr_review_date",
      "status": "failed"
    },
    "overall_dr_rpo": {
      "message": "Missing required data: overall_dr_rpo",
      "status": "failed"
    },
    "overall_dr_rto": {
      "message": "Missing required data: overall_dr_rto",
      "status": "failed"
    },
    "site_dr_score": {
      "message": "Missing required data: site_dr_score",
      "status": "failed"
    },
    "system_availability_score": {
      "message": "Missing required data: system_availability_score",
      "status": "failed"
    }
  },
  "scores": {
    "dr_plan_compliance_status": 0,
    "dr_testing_frequency": 0,
    "hosting_vendor_score": 0,
    "last_dr_review_date": 0,
    "overall_dr_rpo": 0,
    "overall_dr_rto": 0,
    "site_dr_score": 0,
    "system_availability_score": 0
  }
}

Status:

Failed

Score: 3.74

Assessment Information

Category:	Global Hosting
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-07-31 19:17:30.706077

Checkpoint Details

ID:	HOST-001
Description:	Verifies that local load balancers conform to standards.

Pre-Launch Assessment

Overall Score: 9.59 / 100

Checkpoint Results

Architecture & Engineering Services

Architecture Documents

Global Information Security

Enrolled in ORCA

SSL Certificates Registered

Network Perimeter Testing

IAC Scan

Infrastructure Portfolio Management

Automated Monitoring

EC2 Instances Monitoring

DR Readiness

Global Hosting

Local Load Balancer Conformance