AWS Health Check: cost and security

Account Acme Retail (synthetic demo) · one read-only role · 02 Nov 2026
Estimated savings
$616/mo
$7,396 a year · 20 findings
Security baseline
31/100 (F)
15 of 25 controls failing
Fix first
8
critical/high security gaps · 1 low-risk cost fixes

Top savings

  1. Unattached EBS volume vol-61b83803386704d04 — $208.10/mo
  2. Unattached EBS volume vol-d5ad5396436612ce5 — $100.00/mo
  3. Instance looks idle i-1222cd8a252d8edc1 — $72.42/mo
  4. Database has had no connections analytics-copy — $63.96/mo
  5. Unattached EBS volume vol-8f632793cccc4eedc — $45.60/mo
Full cost report →

Top security risks

  1. critical No bucket is public
  2. critical No SSH, RDP or database port is open to the whole internet
  3. critical No secrets in Lambda variables, EC2 user data or launch templates
  4. high Every console user has MFA
  5. high Full administrator rights are limited to a break-glass role
Full security report →

What happens next

  1. 45-minute walkthrough: we go through both reports and agree what to fix first.
  2. You apply the fixes (Terraform fix pack, commands or console steps); nothing is ever changed with the audit role.
  3. Retest one to two weeks later: a new scan shows the new score and the savings that held.
  4. You delete the audit role. Scan files are deleted after the agreed retention period.