Assessment - Pre-Launch Assessment

Status:

Failed

Score: 35.12

Assessment Information

Category:	Architecture & Engineering Services
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-08-05 13:37:21.775890

Checkpoint Details

ID:	ARCH-001
Description:	Evaluates the completeness and quality of architecture documentation.

Status:

Failed

Score: 0.47

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-08-05 13:37:30.374111

Checkpoint Details

ID:	SEC-001
Description:	Verifies enrollment in the Operational Risk Compliance Assessment program.

Recommendation: Strengthen account password policy to require longer passwords, symbols, numbers, and expiration. Enable MFA for 1 users with console access. Rotate 2 access keys that are older than 90 days. Review and reduce permissions for 2 users with admin access. Review and reduce permissions for 1 roles with admin access.

Detailed Results

{
  "evaluation_time": "2025-08-05T13:37:22.187864+00:00",
  "password_policy": null,
  "password_policy_strength": 0,
  "roles": [
    {
      "created": "2023-06-16T04:24:48+00:00",
      "has_admin_permissions": false,
      "name": "AmazonSageMaker-ExecutionRole-20230616T095414",
      "policies": [
        "AmazonSageMaker-ExecutionPolicy-20230616T095414",
        "AmazonSageMakerFullAccess"
      ]
    },
    {
      "created": "2023-06-03T01:03:04+00:00",
      "has_admin_permissions": false,
      "name": "aws-ec2-spot-fleet-tagging-role",
      "policies": [
        "AmazonEC2SpotFleetTaggingRole"
      ]
    },
    {
      "created": "2023-06-21T11:53:40+00:00",
      "has_admin_permissions": false,
      "name": "aws-elasticbeanstalk-service-role",
      "policies": [
        "AWSElasticBeanstalkEnhancedHealth",
        "AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:09:50+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKS",
      "policies": [
        "AmazonEKSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:18:49+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKSNodegroup",
      "policies": [
        "AWSServiceRoleForAmazonEKSNodegroup"
      ]
    },
    {
      "created": "2023-06-21T11:29:20+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
      "policies": [
        "AWSApplicationAutoscalingDynamoDBTablePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:19:08+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAutoScaling",
      "policies": [
        "AutoScalingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-11T09:55:38+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForEC2Spot",
      "policies": [
        "AWSEC2SpotServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T07:05:52+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForElasticLoadBalancing",
      "policies": [
        "AWSElasticLoadBalancingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:39+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForOrganizations",
      "policies": [
        "AWSOrganizationsServiceTrustPolicy"
      ]
    },
    {
      "created": "2023-06-21T10:03:53+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForRDS",
      "policies": [
        "AmazonRDSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-12T10:54:12+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForResourceExplorer",
      "policies": [
        "AWSResourceExplorerServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:41+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSSO",
      "policies": [
        "AWSSSOServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-17T20:15:28+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSupport",
      "policies": [
        "AWSSupportServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-19T23:05:11+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForTrustedAdvisor",
      "policies": [
        "AWSTrustedAdvisorServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-13T06:51:14+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForVPCTransitGateway",
      "policies": [
        "AWSVPCTransitGatewayServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-14T14:35:20+00:00",
      "has_admin_permissions": false,
      "name": "ec2_s3_airflow_role",
      "policies": [
        "AmazonEC2FullAccess",
        "AmazonS3FullAccess"
      ]
    },
    {
      "created": "2023-06-14T06:45:43+00:00",
      "has_admin_permissions": true,
      "name": "glue-admin",
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "created": "2023-06-21T10:03:49+00:00",
      "has_admin_permissions": false,
      "name": "rds-monitoring-role",
      "policies": [
        "AmazonRDSEnhancedMonitoringRole"
      ]
    },
    {
      "created": "2023-06-21T12:54:45+00:00",
      "has_admin_permissions": false,
      "name": "StorageGatewayBucketAccessRole16873520845900.017127998258565036",
      "policies": [
        "AllowStorageGatewayAssumeBucketAccessRole16873520845900.4670055199941725"
      ]
    }
  ],
  "roles_with_excessive_permissions": 1,
  "total_roles": 20,
  "total_users": 2,
  "users": [
    {
      "access_keys_count": 1,
      "created": "2023-05-05T05:03:45+00:00",
      "has_admin_permissions": true,
      "has_console_access": false,
      "mfa_enabled": false,
      "name": "potluriteja",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "access_keys_count": 1,
      "created": "2025-04-14T14:59:37+00:00",
      "has_admin_permissions": true,
      "has_console_access": true,
      "mfa_enabled": false,
      "name": "potluriteja1",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    }
  ],
  "users_with_console_access": 1,
  "users_with_excessive_permissions": 2,
  "users_with_old_access_keys": 2,
  "users_without_mfa": 1
}

Status:

Passed

Score: 5.00

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Automated assessment ran on 2025-08-05 13:37:51.747751

Checkpoint Details

ID:	SSL-001
Description:	Verifies that SSL certificates are properly registered and maintained.

Recommendation: All SSL certificates are valid and not near expiry.

Detailed Results

{
  "certificates": [
    {
      "days_remaining": 163,
      "domain": "example.com",
      "error": null,
      "issuer": "DigiCert Inc",
      "subject": "*.example.com",
      "valid": true,
      "valid_from": "2025-01-15T00:00:00",
      "valid_until": "2026-01-15T23:59:59"
    },
    {
      "days_remaining": 76,
      "domain": "replit.com",
      "error": null,
      "issuer": "Google Trust Services",
      "subject": "replit.com",
      "valid": true,
      "valid_from": "2025-07-23T05:02:14",
      "valid_until": "2025-10-21T06:01:53"
    }
  ],
  "evaluation_time": "2025-08-05T13:37:31.195073+00:00",
  "expired_certificates": 0,
  "invalid_certificates": 0,
  "near_expiry_certificates": 0,
  "total_certificates": 2
}

Status:

Failed

Score: 0.47

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Individual checkpoint assessment ran on 2025-08-05 13:44:40.447236

Checkpoint Details

ID:	SEC-002
Description:	Evaluates results from Infrastructure as Code security scans.

Recommendation: Strengthen account password policy to require longer passwords, symbols, numbers, and expiration. Enable MFA for 1 users with console access. Rotate 2 access keys that are older than 90 days. Review and reduce permissions for 2 users with admin access. Review and reduce permissions for 1 roles with admin access.

Detailed Results

{
  "evaluation_time": "2025-08-05T13:44:31.969688+00:00",
  "password_policy": null,
  "password_policy_strength": 0,
  "roles": [
    {
      "created": "2023-06-16T04:24:48+00:00",
      "has_admin_permissions": false,
      "name": "AmazonSageMaker-ExecutionRole-20230616T095414",
      "policies": [
        "AmazonSageMaker-ExecutionPolicy-20230616T095414",
        "AmazonSageMakerFullAccess"
      ]
    },
    {
      "created": "2023-06-03T01:03:04+00:00",
      "has_admin_permissions": false,
      "name": "aws-ec2-spot-fleet-tagging-role",
      "policies": [
        "AmazonEC2SpotFleetTaggingRole"
      ]
    },
    {
      "created": "2023-06-21T11:53:40+00:00",
      "has_admin_permissions": false,
      "name": "aws-elasticbeanstalk-service-role",
      "policies": [
        "AWSElasticBeanstalkEnhancedHealth",
        "AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:09:50+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKS",
      "policies": [
        "AmazonEKSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:18:49+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAmazonEKSNodegroup",
      "policies": [
        "AWSServiceRoleForAmazonEKSNodegroup"
      ]
    },
    {
      "created": "2023-06-21T11:29:20+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
      "policies": [
        "AWSApplicationAutoscalingDynamoDBTablePolicy"
      ]
    },
    {
      "created": "2023-05-05T06:19:08+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForAutoScaling",
      "policies": [
        "AutoScalingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-11T09:55:38+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForEC2Spot",
      "policies": [
        "AWSEC2SpotServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T07:05:52+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForElasticLoadBalancing",
      "policies": [
        "AWSElasticLoadBalancingServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:39+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForOrganizations",
      "policies": [
        "AWSOrganizationsServiceTrustPolicy"
      ]
    },
    {
      "created": "2023-06-21T10:03:53+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForRDS",
      "policies": [
        "AmazonRDSServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-12T10:54:12+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForResourceExplorer",
      "policies": [
        "AWSResourceExplorerServiceRolePolicy"
      ]
    },
    {
      "created": "2023-05-05T04:51:41+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSSO",
      "policies": [
        "AWSSSOServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-17T20:15:28+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForSupport",
      "policies": [
        "AWSSupportServiceRolePolicy"
      ]
    },
    {
      "created": "2018-08-19T23:05:11+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForTrustedAdvisor",
      "policies": [
        "AWSTrustedAdvisorServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-13T06:51:14+00:00",
      "has_admin_permissions": false,
      "name": "AWSServiceRoleForVPCTransitGateway",
      "policies": [
        "AWSVPCTransitGatewayServiceRolePolicy"
      ]
    },
    {
      "created": "2023-06-14T14:35:20+00:00",
      "has_admin_permissions": false,
      "name": "ec2_s3_airflow_role",
      "policies": [
        "AmazonEC2FullAccess",
        "AmazonS3FullAccess"
      ]
    },
    {
      "created": "2023-06-14T06:45:43+00:00",
      "has_admin_permissions": true,
      "name": "glue-admin",
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "created": "2023-06-21T10:03:49+00:00",
      "has_admin_permissions": false,
      "name": "rds-monitoring-role",
      "policies": [
        "AmazonRDSEnhancedMonitoringRole"
      ]
    },
    {
      "created": "2023-06-21T12:54:45+00:00",
      "has_admin_permissions": false,
      "name": "StorageGatewayBucketAccessRole16873520845900.017127998258565036",
      "policies": [
        "AllowStorageGatewayAssumeBucketAccessRole16873520845900.4670055199941725"
      ]
    }
  ],
  "roles_with_excessive_permissions": 1,
  "total_roles": 20,
  "total_users": 2,
  "users": [
    {
      "access_keys_count": 1,
      "created": "2023-05-05T05:03:45+00:00",
      "has_admin_permissions": true,
      "has_console_access": false,
      "mfa_enabled": false,
      "name": "potluriteja",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    },
    {
      "access_keys_count": 1,
      "created": "2025-04-14T14:59:37+00:00",
      "has_admin_permissions": true,
      "has_console_access": true,
      "mfa_enabled": false,
      "name": "potluriteja1",
      "old_access_keys": true,
      "policies": [
        "AdministratorAccess"
      ]
    }
  ],
  "users_with_console_access": 1,
  "users_with_excessive_permissions": 2,
  "users_with_old_access_keys": 2,
  "users_without_mfa": 1
}

Status:

Passed

Score: 93.75

Assessment Information

Category:	Global Information Security
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-08-05 13:37:52.158320

Checkpoint Details

ID:	NET-001
Description:	Assesses the results of network perimeter security testing.

Status:

Passed

Score: 88.80

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-08-05 13:37:30.784659

Checkpoint Details

ID:	MONITOR-001
Description:	Evaluates the effectiveness of automated monitoring systems based on coverage, alert quality, and response times.

Status:

Warning

Score: 0.00

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Individual checkpoint assessment ran on 2025-08-05 13:41:58.020945

Checkpoint Details

ID:	EC2-001
Description:	Checks the operational health of EC2 instances and their monitoring configuration.

Recommendation: No EC2 instances found in this AWS account or region.

Detailed Results

{
  "evaluation_time": "2025-08-05T13:41:56.679400+00:00",
  "instances": [],
  "instances_without_monitoring": 0,
  "instances_without_tags": 0,
  "running_instances": 0,
  "stopped_instances": 0,
  "total_instances": 0,
  "unpatched_instances": 0
}

Status:

Passed

Score: 10000.00

Assessment Information

Category:	Infrastructure Portfolio Management
Last Run:	2025-04-16 16:29
Notes:	Individual checkpoint assessment ran on 2025-08-05 13:43:23.459740

Checkpoint Details

ID:	DR-001
Description:	Evaluates disaster recovery readiness based on plan compliance, testing frequency, and recovery objectives.

Recommendation: DR readiness is at acceptable levels. Continue regular testing and maintenance of DR plans.

Detailed Results

{
  "criteria_details": {
    "dr_plan_compliance_status": {
      "message": "dr_plan_compliance_status: In Compliance (required: In Compliance)",
      "status": "passed"
    },
    "dr_testing_frequency": {
      "message": "dr_testing_frequency: Annual or better (3-12 Months) (required: Annual or better (3-12 Months))",
      "status": "passed"
    },
    "hosting_vendor_score": {
      "message": "hosting_vendor_score: 3.8 (minimum: 3.0)",
      "status": "passed"
    },
    "last_dr_review_date": {
      "message": "last_dr_review_date: 141 days ago (maximum: 365 days)",
      "status": "passed"
    },
    "overall_dr_rpo": {
      "message": "overall_dr_rpo: 12h:00m (maximum: 24 hours)",
      "status": "passed"
    },
    "overall_dr_rto": {
      "message": "overall_dr_rto: 1h:11m (maximum: 4 hours)",
      "status": "passed"
    },
    "site_dr_score": {
      "message": "site_dr_score: 3.2 (minimum: 3.0)",
      "status": "passed"
    },
    "system_availability_score": {
      "message": "system_availability_score: 3.5 (minimum: 3.0)",
      "status": "passed"
    }
  },
  "scores": {
    "dr_plan_compliance_status": 100,
    "dr_testing_frequency": 100,
    "hosting_vendor_score": 100,
    "last_dr_review_date": 100,
    "overall_dr_rpo": 100,
    "overall_dr_rto": 100,
    "site_dr_score": 100,
    "system_availability_score": 100
  }
}

Status:

Warning

Score: 68.45

Assessment Information

Category:	Global Hosting
Last Run:	2025-04-16 16:29
Notes:	Simulated assessment ran on 2025-08-05 13:37:52.569928

Checkpoint Details

ID:	HOST-001
Description:	Verifies that local load balancers conform to standards.

Pre-Launch Assessment

Overall Score: 100.00 / 100

Checkpoint Results

Architecture & Engineering Services

Architecture Documents

Global Information Security

Enrolled in ORCA

SSL Certificates Registered

IAC Scan

Network Perimeter Testing

Infrastructure Portfolio Management

Automated Monitoring

EC2 Instances Monitoring

DR Readiness

Global Hosting

Local Load Balancer Conformance