Overview
This report assesses AWS resources against 23 enabled configuration checks across the areas below. It identifies passed and failed checks, unavailable evidence, and affected resources so you can prioritize configuration changes and investigate operational gaps.
AWS Account
- Security Contact Information Configured for the AWS Account
Organization CloudTrail Trails
- Organizations CloudTrail Trail is Enabled
Organizations Delegated Administration
- Access Analyzer Management is Delegated in the Organization
Organizations Backup Policies
- AWS Organizations Backup Policies Configured
Organizations Tag Policies
- AWS Organizations Tag Policies Enabled
AWS Organizations Settings
- Ensure All Features are Enabled for the Organization
Organizations Service Control Policies
- SCP to Deny Root Account Usage
- SCP to Protect CloudTrail
- SCP to Protect GuardDuty
- SCP to Protect Accounts from Leaving Organizations
- SCP to Protect Security Hub
AWS Config Settings
- Ensure that AWS Config is Enabled
- Ensure that AWS Config Records All Supported Resources (Including Global Resources)
- AWS Config should be enabled and use the service-linked role for resource recording
EventBridge Finding Alert Rules
- Real-Time Alerts Configured for Config Compliance Events
Service Quotas Templates
- Service Quota Organizations Request Template is Enabled
- Service Quota Request Template is Configured
AWS Budgets
- AWS Cost Budget Defined
- AWS Budget Notifications Defined
Cost Anomaly Detection
- AWS Cost Anomaly Detection is Enabled
- Cost Anomaly Detection has a Subscription Defined
Resource Access Manager Shares
- Resource Shares Shared Inside Organization Only
Service Catalog Portfolios
- Service Catalog portfolios should be shared within an AWS organization only
The report includes actionable findings and remediation guidance for supported checks.