Overview
This report assesses AWS resources against 9 enabled configuration checks across the areas below. It identifies passed and failed checks, unavailable evidence, and affected resources so you can prioritize configuration changes and investigate operational gaps.
ECS Clusters
- ECS Container Insights Enabled Check
Elastic Beanstalk Environments
- Elastic Beanstalk Streaming Logs to CloudWatch Enabled
Glue Jobs
- AWS Glue Job Logging Enabled Check
Lambda Logging
- Lambda function Logging is enabled
Step Functions State Machines
- AWS Step Functions State Machine Logging Enabled Check
CodeBuild Logs
- CodeBuild Project Logging Enabled Check
Bedrock AgentCore Browser Sessions
- Bedrock AgentCore custom browsers should have session recording enabled
Systems Manager Automation
- SSM Automation should have CloudWatch logging enabled
Transfer Family Connectors
- Transfer Family connectors should have logging enabled
The report includes actionable findings and remediation guidance for supported checks.