Overview
This report assesses AWS resources against 27 enabled configuration checks across the areas below. It identifies passed and failed checks, unavailable evidence, and affected resources so you can prioritize configuration changes and investigate operational gaps.
CodeBuild Project Environments
- CodeBuild Environment Variables Do Not Contain Secrets
- CodeBuild Project Environment Privileged Mode Check
CodeBuild Logs
- CodeBuild Project Logging Enabled Check
- CodeBuild S3 Logs Encryption is Enabled
CodeBuild Source Integrations
- CodeBuild Project Source Repository URL Credential Check
CodeBuild Artifacts
- AWS CodeBuild Project Artifact Encryption Check
CodeBuild Report Groups
- CodeBuild Report Group Encryption Check
Source Repository Integrations
- CodeBuild GitHub or Bitbucket Use OAuth
CodeDeploy Deployment Groups
- CodeDeploy Auto Rollback Check
- CodeDeploy Monitoring Configuration Check
CodeDeploy Lambda Deployments
- CodeDeploy Lambda Deployment Group Traffic Shift Check
EC2 Instances
- EC2 Minimum Healthy Hosts Configuration for CodeDeploy
ECR Repositories
- ECR Repositories KMS Encrypted
- No Public ECR Repositories
- ECR Lifecycle Policies Enabled
ECR Registry
- ECR Registry Cross-Account Replication Enabled
- ECR Registry Cross-Region Replication Enabled
EventBridge Event Buses
- Custom EventBridge Event Bus Policy Attachment Check
EventBridge Schema Registries
- Custom Schema Registry Policy Attachment Check
EventBridge Global Endpoints
- EventBridge Global Endpoint Event Replication Enabled Check
CloudFormation Stacks
- CloudFormation Delete Protection Enabled
- CloudFormation Stack Notification Check
- CloudFormation stacks should have associated service roles
- CloudFormation Stack Outputs Do Not Contain Secrets
CloudFormation Drift Detection
- CloudFormation Stack Drift Detection Recent Check (7 Days)
- CloudFormation Stack Drift Detected
Service Catalog Portfolios
- Service Catalog portfolios should be shared within an AWS organization only
The report includes actionable findings and remediation guidance for supported checks.