Contents

Account Summary

Accounts reviewed

{% for account in t.accounts %} {% endfor %}
Account nameAccount IDCollection date
{{ account.name }}{{ account.id }}{{ account.collection_date }}

Resources

Resource counts

{% for key in t.resource_names %} {% endfor %} {% for row in t.resource_stats %} {% for k in row %} {% if k == 0 %} {% endfor %} {% endfor %}
{{ key }}
{% elif k is number %} {% else %} {% endif %} {{ k }}

Region usage

This table shows whether a region contains the resources being counted. Currently all S3 buckets, no matter their location, and CloudFronts, are identified as being in us-east-1.

{% for key in t.region_names %} {% endfor %} {% for account in t.accounts %} {% for region in t.region_names %} {% if t.region_stats[account.name][region] == 'N' %} {% else %} {% endif %} {% endfor %} {% endfor %}
{{ key }}
{{ account.name }}
Y{{ t.region_stats_tooltip[account.name][region] }}

IAM

Public network resources

Counts of public resources by type

{% for key in t.public_network_resource_type_names %} {% endfor %} {% for account in t.accounts %} {% for resource_type in t.public_network_resource_type_names %} {% set count = t.public_network_resource_types[account.name][resource_type] %} {% if count == 0 %} {% endfor %} {% endfor %}
{{ key }}
{{ account.name }} {% else %} {% endif %} {{ count }}

Counts of public resources by port ranges


Findings Summary

Counts of finding types by account

Links to findings

{% for severity in t.severities %} {% if t.severities[severity]|length > 0 %} {{ severity }} {% endif %} {% endfor %}

Counts of findings by account


Findings

{% for finding_group in t.findings %}

{{ finding_group }}

{% for issue_id in t.findings[finding_group] %}
{% set finding = t.findings[finding_group][issue_id] %}

{{ finding['title'] }}

Severity: {{finding['severity']}}
Issue ID: {{issue_id}}

{{finding['description']}}


    {% set account_hits = t.findings[finding_group][issue_id]['accounts'] %} {% for account in account_hits %}
  • {{account_hits[account]['account_name']}} ({{account}})
      {% for region in account_hits[account]['regions'] %} {% if not t.findings[finding_group][issue_id]['is_global'] %}
    • {{region}} {% endif %}
        {% set hits = account_hits[account]['regions'][region]['hits'] %} {% for hit in hits %} {% if hit['resource'] is not none%}
      1. {{hit['resource']}}{% endif %} {% if hit['details'] != 'null'%}
        {{hit['details']}}
        {% endif %} {% endfor %}
      {% endfor %}
    {% endfor %}
{% endfor %} {% endfor %}