🔐 IAM (Global)
IAM Compliance Findings
12
Total IAM Users
12
Users Without MFA
7
Access Keys >90 Days Old
1
Users with Admin Access
IAM Users
| User Name | MFA Enabled | Access Key ID | Key Status | Key Created |
|---|---|---|---|---|
| casiny_prod_cms_nginx_s3_gateway | No | AKIA6BOPS3EJUKVH3CQ7 | Active | 2025-06-02 |
| casiny_prod_ecs_deploy | No | AKIA6BOPS3EJ34Z6CFG7 | Active | 2025-06-02 |
| casiny_prod_grafana | No | AKIA6BOPS3EJUQACESI6 | Active | 2025-07-07 |
| casiny_prod_infras_watcher | No | AKIA6BOPS3EJRZJ34O6S | Active | 2025-07-07 |
| casiny_prod_s3upload | No | AKIA6BOPS3EJ7GZV2HA5 | Active | 2025-06-02 |
| casiny_prod_sqs | No | AKIA6BOPS3EJ7QRZJJLP | Active | 2025-06-02 |
| daniel_borg | No | - | - | - |
| developers | No | - | - | - |
| jackson | No | - | - | - |
| spintech_bi | No | - | - | - |
| test_canle_casiny | No | - | - | - |
| tfcasinyprod | No | AKIA6BOPS3EJ7SKXWZE6 | Active | 2025-08-20 |
Users with AdministratorAccess Policy
| User Name |
|---|
| tfcasinyprod |
📍 Region: eu-west-2
VPCs & Subnets
| Name | VPC ID | CIDR Block | State | Tenancy | Tags |
|---|---|---|---|---|---|
| aws-controltower-VPC | vpc-0937d923c0c0ef9b4 |
172.31.0.0/16 | available | default | aws:cloudformation:stack-name=StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1aws:cloudformation:logical-id=VPCaws:cloudformation:stack-id=arn:aws:cloudformation:eu-west-2:965192374547:stack/StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1/b5bbb280-2bd9-11f0-94a4-0afdaa6e5089 |
Subnets
| Name | Subnet ID | VPC ID | CIDR Block | AZ | Available IPs | Public IP on Launch | Tags |
|---|---|---|---|---|---|---|---|
| aws-controltower-PrivateSubnet3A | subnet-0e9b24767ff621188 |
vpc-0937d923c0c0ef9b4 | 172.31.80.0/20 | eu-west-2c | 4091 | No | aws:cloudformation:logical-id=PrivateSubnet3ANetwork=Privateaws:cloudformation:stack-id=arn:aws:cloudformation:eu-west-2:965192374547:stack/StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1/b5bbb280-2bd9-11f0-94a4-0afdaa6e5089aws:cloudformation:stack-name=StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1 |
| aws-controltower-PrivateSubnet1A | subnet-05d3ad20b1237ae97 |
vpc-0937d923c0c0ef9b4 | 172.31.64.0/20 | eu-west-2a | 4091 | No | aws:cloudformation:logical-id=PrivateSubnet1ANetwork=Privateaws:cloudformation:stack-id=arn:aws:cloudformation:eu-west-2:965192374547:stack/StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1/b5bbb280-2bd9-11f0-94a4-0afdaa6e5089aws:cloudformation:stack-name=StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1 |
| aws-controltower-PrivateSubnet2A | subnet-07192b942e2ef5654 |
vpc-0937d923c0c0ef9b4 | 172.31.32.0/20 | eu-west-2b | 4091 | No | aws:cloudformation:stack-id=arn:aws:cloudformation:eu-west-2:965192374547:stack/StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1/b5bbb280-2bd9-11f0-94a4-0afdaa6e5089Network=Privateaws:cloudformation:logical-id=PrivateSubnet2Aaws:cloudformation:stack-name=StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1 |
Lambda Functions
| Function Name | Runtime | Memory | Timeout | VPC | Last Modified | Tags |
|---|---|---|---|---|---|---|
| sendBonusEligibility-casiny | python3.10 | 512 MB | 30s | No VPC | 2026-01-06 | Brand=casinyEnvironment=prodManagedBy=TerraformProject=BonusBot |
| aws-controltower-NotificationForwarder | python3.13 | 128 MB | 60s | No VPC | 2025-08-21 | aws:cloudformation:logical-id=ForwardSnsNotificationaws:cloudformation:stack-id=arn:aws:cloudformation:eu-west-2:965192374547:stack/StackSet-AWSControlTowerBP-BASELINE-CLOUDWATCH-e1df95a7-424f-4bdf-ace5-de51c744c343/3c791070-2bd9-11f0-b1d0-060b56d3a3ddaws:cloudformation:stack-name=StackSet-AWSControlTowerBP-BASELINE-CLOUDWATCH-e1df95a7-424f-4bdf-ace5-de51c744c343 |
| getBonusEligibilityResults-casiny | python3.10 | 256 MB | 10s | No VPC | 2026-01-14 | Brand=casinyEnvironment=prodManagedBy=TerraformProject=BonusBot |
CloudWatch Log Groups
Total Log Groups: 4
Without Retention Policy: 0
| Log Group Name | Retention (Days) | Stored Size |
|---|---|---|
/aws/lambda/aws-controltower-NotificationForwarder |
14 | 0 B |
/aws/lambda/getBonusEligibilityResults-casiny |
30 | 12.59 KB |
/aws/lambda/sendBonusEligibility-casiny |
30 | 12.79 KB |
StackSet-AWSControlTowerBP-VPC-ACCOUNT-FACTORY-V1-8f99c55d-fe68-4462-8cd9-ed4ca3bcfee1-VPCFlowLogsLogGroup-Z6UQROiE6g2a |
90 | 0 B |
Compliance Findings
Network & Security (Section 5.2)
0
Open Security Groups (0.0.0.0/0)
0
EC2 Without IMDSv2
Yes
CloudTrail Enabled
Data Protection (Section 5.4)
0
Unencrypted EBS Volumes
0
Unencrypted RDS
0
SQS Without Encryption
Logging & Monitoring (Section 5.3)
0
Log Groups (No Retention)
RDS Standards (Section 7)
0
Public RDS Instances
0
RDS Without Multi-AZ
0
RDS Without Backups
Lambda Standards (Section 7)
0
Lambda Default Timeout (3s)
3
Lambda Without DLQ
SQS Standards (Section 7)
0
SQS Without DLQ
ECS Standards (Section 7)
0
Plaintext Env Vars
0
Privileged Containers
📍 Region: ap-east-1
VPCs & Subnets
| Name | VPC ID | CIDR Block | State | Tenancy | Tags |
|---|---|---|---|---|---|
| casiny-prod-vpc | vpc-001b7db037dcd1b75 |
172.16.0.0/16 | available | default | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
Subnets
| Name | Subnet ID | VPC ID | CIDR Block | AZ | Available IPs | Public IP on Launch | Tags |
|---|---|---|---|---|---|---|---|
| casiny-prod-public-subnet-2 | subnet-0b3385f15e0cca667 |
vpc-001b7db037dcd1b75 | 172.16.4.0/24 | ap-east-1b | 249 | No | Customer=casinymap-migrated=migS0EK6JMBZCEnvironment=prod |
| casiny-prod-public-subnet-1 | subnet-0d17ec2ed28605ded |
vpc-001b7db037dcd1b75 | 172.16.2.0/24 | ap-east-1a | 242 | No | Environment=prodCustomer=casinymap-migrated=migS0EK6JMBZC |
| casiny-prod-private-subnet-1 | subnet-0e45a86607eaf783a |
vpc-001b7db037dcd1b75 | 172.16.1.0/24 | ap-east-1a | 223 | No | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
| casiny-prod-private-subnet-2 | subnet-0bcce37bac1104047 |
vpc-001b7db037dcd1b75 | 172.16.3.0/24 | ap-east-1b | 225 | No | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casiny |
EC2 Instances
| Name | Instance ID | Type | State | Public IP | Private IP | VPC | Security Groups | AMI | Key Pair | IAM Profile | EBS Volumes | IMDSv2 | Tags |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| casiny_prod_mongodb_cms | i-0716c7179f0b1d8e7 |
t3.medium | running | - | 172.16.1.201 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-004544c42ea9eb907 | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| casiny_prod_elk | i-048a91ab8ef96f6aa |
c5a.xlarge | running | 43.199.204.215 | 172.16.2.198 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-004544c42ea9eb907 | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | Environment=prodmap-migrated=migS0EK6JMBZCCustomer=casiny |
| casiny_prod_integration_graylog | i-0d738d61a3574e661 |
t3.xlarge | running | 16.163.101.86 | 172.16.2.6 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-00e533cf72523d460 | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
| casiny_prod_bastion_host | i-08b2d64af59979285 |
t3.micro | running | 43.198.177.123 | 172.16.2.224 | vpc-001b7db037dcd1b75 | sg-04627a305cb6b9a3d | ami-004544c42ea9eb907 | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
| casiny_prod_graylog | i-09312f04fd01502b4 |
r6i.xlarge | running | 43.198.227.41 | 172.16.2.136 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-0b0f1c212471e0cf7 | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casiny |
| ECS Instance - EC2ContainerService-casiny-prod-fe-bo-cms-cdn-websocket-cronjob-ecs-cluster | i-04f335096c1b0a930 |
c5a.2xlarge | running | - | 172.16.3.91 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-035fccda7ffa2f58a | casiny_prod_May2025 | casiny_prod_SSM_EcsInstanceProfile | 1 | required | Customer=casinyaws:autoscaling:groupName=casiny-prod-Asg-fe-bo-cms-cdn-websocket-cronjob-ecs-clustermap-migrated=migS0EK6JMBZCAmazonECSManaged=ECS Cluster managed by Amazonaws:ec2launchtemplate:id=lt-0c68041998650e646Environment=prodaws:ec2launchtemplate:version=2 |
| casiny-prod-fireblocks_cosigner | i-03ed4276814acbffc |
c5a.xlarge | running | - | 172.16.1.27 | vpc-001b7db037dcd1b75 | sg-0cd9aaa751dacaf9f | ami-05cf3340ca3cc2bc9 | casiny_prod_May2025 | casiny_prod_SSMInstanceProfileForFireblocksCoSigner | 1 | required | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| casiny_prod_metabase | i-0d762aebbb9a83d6d |
t3.medium | running | - | 172.16.1.123 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-0911ab83fb2c5486d | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | Environment=prodmap-migrated=migS0EK6JMBZCCustomer=casiny |
| casiny_prod_monitoring | i-0706acb0e789c8f61 |
t3.medium | running | - | 172.16.1.196 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-0a2674cde4b5a5964 | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | Environment=prodCustomer=casinymap-migrated=migS0EK6JMBZC |
| ECS Instance - EC2ContainerService-casiny-prod-fe-bo-cms-cdn-websocket-cronjob-ecs-cluster | i-0a033f155fdc3eee4 |
c5a.2xlarge | running | - | 172.16.1.91 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-035fccda7ffa2f58a | casiny_prod_May2025 | casiny_prod_SSM_EcsInstanceProfile | 1 | required | Customer=casinyAmazonECSManaged=ECS Cluster managed by Amazonaws:ec2launchtemplate:id=lt-0c68041998650e646map-migrated=migS0EK6JMBZCEnvironment=prodaws:ec2launchtemplate:version=2aws:autoscaling:groupName=casiny-prod-Asg-fe-bo-cms-cdn-websocket-cronjob-ecs-cluster |
| casiny_prod_bitbucket_runner_1_spotinstance | i-0394b2cbfe8b190d9 |
i4i.large | running | - | 172.16.3.225 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-0d7a3cafc22fd082d | casiny_prod_May2025 | casiny_prod_SSMInstanceProfile | 1 | optional | Customer=casinyEnvironment=prodaws:ec2spot:fleet-request-id=sfr-49d73089-3d4e-4a72-8d54-be18ebbb9f78map-migrated=migS0EK6JMBZC |
| ECS Instance - EC2ContainerService-casiny-prod-fe-bo-cms-cdn-websocket-cronjob-ecs-cluster | i-0af381d7c03a31f69 |
c5a.2xlarge | running | - | 172.16.3.223 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-035fccda7ffa2f58a | casiny_prod_May2025 | casiny_prod_SSM_EcsInstanceProfile | 1 | required | map-migrated=migS0EK6JMBZCCustomer=casinyaws:ec2launchtemplate:id=lt-0c68041998650e646aws:autoscaling:groupName=casiny-prod-Asg-fe-bo-cms-cdn-websocket-cronjob-ecs-clusterEnvironment=prodaws:ec2launchtemplate:version=2AmazonECSManaged=ECS Cluster managed by Amazon |
| ECS Instance - EC2ContainerService-casiny-prod-fe-bo-cms-cdn-websocket-cronjob-ecs-cluster | i-08303e80ff5a14273 |
c5a.2xlarge | running | - | 172.16.3.238 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-035fccda7ffa2f58a | casiny_prod_May2025 | casiny_prod_SSM_EcsInstanceProfile | 1 | required | aws:ec2launchtemplate:id=lt-0c68041998650e646Customer=casinyaws:autoscaling:groupName=casiny-prod-Asg-fe-bo-cms-cdn-websocket-cronjob-ecs-clusterEnvironment=prodaws:ec2launchtemplate:version=2AmazonECSManaged=ECS Cluster managed by Amazonmap-migrated=migS0EK6JMBZC |
| ECS Instance - EC2ContainerService-casiny-prod-fe-bo-cms-cdn-websocket-cronjob-ecs-cluster | i-0d9f82ef0e387972d |
c5a.2xlarge | running | - | 172.16.1.185 | vpc-001b7db037dcd1b75 | sg-00812567619772214 | ami-035fccda7ffa2f58a | casiny_prod_May2025 | casiny_prod_SSM_EcsInstanceProfile | 1 | required | map-migrated=migS0EK6JMBZCEnvironment=prodaws:autoscaling:groupName=casiny-prod-Asg-fe-bo-cms-cdn-websocket-cronjob-ecs-clusterAmazonECSManaged=ECS Cluster managed by Amazonaws:ec2launchtemplate:version=2Customer=casinyaws:ec2launchtemplate:id=lt-0c68041998650e646 |
EBS Volumes
| Name | Volume ID | Size (GiB) | Type | State | Encrypted | IOPS | Attached Instance | Device | AZ | Tags |
|---|---|---|---|---|---|---|---|---|---|---|
| - | vol-00aa86a6f047e025c |
100 | gp3 | in-use | No | 3000 | i-0a033f155fdc3eee4 | /dev/xvda | ap-east-1a | - |
| - | vol-014b89f6e28c2c16e |
100 | gp3 | in-use | No | 3000 | i-03ed4276814acbffc | /dev/xvda | ap-east-1a | Environment=prodmap-migrated=migS0EK6JMBZCCustomer=casiny |
| - | vol-076af4b9c437fd714 |
30 | gp3 | in-use | No | 15000 | i-0394b2cbfe8b190d9 | /dev/sda1 | ap-east-1b | - |
| - | vol-031adc36e5ad07f95 |
100 | gp3 | in-use | No | 3000 | i-0af381d7c03a31f69 | /dev/xvda | ap-east-1b | - |
| - | vol-0445f3810306c6571 |
80 | gp3 | in-use | No | 3000 | i-0706acb0e789c8f61 | /dev/sda1 | ap-east-1a | Environment=prodmap-migrated=migS0EK6JMBZCCustomer=casiny |
| - | vol-0c636eae120d164de |
50 | gp3 | in-use | No | 3000 | i-048a91ab8ef96f6aa | /dev/sda1 | ap-east-1a | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casiny |
| - | vol-0a663f164e80dd114 |
100 | gp3 | in-use | No | 3000 | i-08303e80ff5a14273 | /dev/xvda | ap-east-1b | - |
| - | vol-0c90b95ac9d1f6bd0 |
2000 | gp3 | in-use | No | 3000 | i-09312f04fd01502b4 | /dev/sda1 | ap-east-1a | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| - | vol-089f639ab820392be |
100 | gp3 | in-use | No | 3000 | i-04f335096c1b0a930 | /dev/xvda | ap-east-1b | - |
| - | vol-056e63affcdd7e8b0 |
50 | gp3 | in-use | No | 3000 | i-0716c7179f0b1d8e7 | /dev/sda1 | ap-east-1a | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
| - | vol-06be6bc286a00cab5 |
50 | gp3 | in-use | No | 3000 | i-0d762aebbb9a83d6d | /dev/sda1 | ap-east-1a | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casiny |
| - | vol-00bd1bf7a4da9a6c1 |
100 | gp3 | in-use | No | 3000 | i-0d9f82ef0e387972d | /dev/xvda | ap-east-1a | - |
| - | vol-032d9ba6e23431523 |
1500 | gp3 | in-use | No | 3000 | i-0d738d61a3574e661 | /dev/sda1 | ap-east-1a | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| - | vol-0d51aa59eec82df43 |
30 | gp3 | in-use | No | 3000 | i-08b2d64af59979285 | /dev/sda1 | ap-east-1a | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
ECS Clusters
| Cluster Name | Status | Running Tasks | Pending Tasks | Active Services | Container Instances |
|---|---|---|---|---|---|
| casiny-prod-callback-fargate-ecs-cluster | ACTIVE | 15 | 0 | 1 | 0 |
| casiny-prod-fe-bo-cms-cdn-websocket-cronjob-ecs-cluster | ACTIVE | 20 | 0 | 9 | 5 |
| casiny-prod-queue-fargate-ecs-cluster | ACTIVE | 2 | 0 | 1 | 0 |
| casiny-prod-api-fargate-ecs-cluster | ACTIVE | 15 | 0 | 1 | 0 |
ECS Services
| Service Name | Status | Desired | Running | Launch Type | Task Definition | Load Balancers | Security Groups |
|---|---|---|---|---|---|---|---|
| casiny-prod-callback-service | ACTIVE | 15 | 15 | FARGATE | casiny-prod-callback-fargate-task-definitions:96 | 1 target groups | sg-00812567619772214 |
| casiny-prod-queue-worker-service | ACTIVE | 2 | 2 | FARGATE | casiny-prod-queue-worker-fargate-task-definitions:98 | 0 target groups | sg-00812567619772214 |
| casiny-prod-api-service | ACTIVE | 15 | 15 | FARGATE | casiny-prod-api-fargate-task-definitions:95 | 1 target groups | sg-00812567619772214 |
| casiny-prod-cronjob-service | ACTIVE | 1 | 1 | EC2 | casiny-prod-cronjob-task-definitions:95 | 0 target groups | |
| casiny-prod-websocket-services | ACTIVE | 4 | 4 | EC2 | casiny-prod-websocket-task-definitions:4 | 2 target groups | |
| casiny-prod-seon-proxy-service | ACTIVE | 1 | 1 | EC2 | casiny-prod-seon-proxy-task-definitions:1 | 1 target groups | |
| casiny-prod-cdn-cms-service | ACTIVE | 2 | 2 | EC2 | casiny-prod-cdn-cms-task-definitions:3 | 1 target groups | |
| casiny-prod-fasttrack-proxy-service | ACTIVE | 2 | 2 | EC2 | casiny-prod-fasttrack-proxy-task-definitions:2 | 1 target groups | |
| casiny-prod-cms-service | ACTIVE | 2 | 2 | EC2 | casiny-prod-cms-task-definitions:12 | 2 target groups | |
| casiny-prod-bo-service | ACTIVE | 2 | 2 | EC2 | casiny-prod-bo-task-definitions:95 | 1 target groups | |
| casiny-prod-fe-service | ACTIVE | 3 | 3 | EC2 | casiny-prod-fe-task-definitions:80 | 1 target groups | |
| casiny-prod-fe-1-service | ACTIVE | 3 | 3 | EC2 | casiny-prod-fe-1-task-definitions:14 | 1 target groups |
ECS Task Definitions (Active)
| Family | Rev | CPU | Memory | Containers | Task Role | Privileged | Env Vars | Secrets | Log Config |
|---|---|---|---|---|---|---|---|---|---|
| casiny-prod-api-fargate-task-definitions | 95 | 4096 | 8192 | 2 | Yes | No | 12 | 0 | No logs, awslogs:/ecs/casiny-prod-api |
| casiny-prod-bo-task-definitions | 95 | - | - | 2 | No | No | 12 | 0 | No logs |
| casiny-prod-callback-fargate-task-definitions | 96 | 4096 | 8192 | 2 | Yes | No | 12 | 0 | No logs, awslogs:/ecs/casiny-prod-callback |
| casiny-prod-cdn-cms-task-definitions | 3 | - | - | 1 | No | No | 0 | 0 | json-file |
| casiny-prod-cms-task-definitions | 12 | - | - | 2 | No | No | 1 | 0 | No logs, json-file |
| casiny-prod-cronjob-task-definitions | 95 | - | - | 2 | No | No | 7 | 0 | No logs |
| casiny-prod-fasttrack-proxy-task-definitions | 2 | - | - | 1 | No | No | 1 | 0 | json-file |
| casiny-prod-fe-1-task-definitions | 14 | - | - | 2 | No | No | 1 | 0 | No logs |
| casiny-prod-fe-task-definitions | 80 | - | - | 2 | No | No | 1 | 0 | No logs |
| casiny-prod-queue-worker-fargate-task-definitions | 98 | 16384 | 98304 | 2 | Yes | No | 7 | 0 | No logs |
| casiny-prod-seon-proxy-task-definitions | 1 | - | - | 1 | No | No | 1 | 0 | json-file |
| casiny-prod-websocket-task-definitions | 4 | - | - | 2 | No | No | 0 | 0 | json-file |
Container Configuration Detail
⚠️ Plaintext environment variables should be avoided for sensitive data. Use Secrets Manager or SSM Parameter Store. log_router containers are excluded.
| Task Definition | Container | Image | Log Config | Plaintext Env Vars | Secrets (SSM/SM) |
|---|---|---|---|---|---|
| casiny-prod-api-fargate-task-definitions:95 | terragon-api | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-api:230fdaf-812-master | awslogs:/ecs/casiny-prod-api | SERVER_PORTSERVICE_NAMESERVER_NAMECADDY_SERVER_WORKER_COUNTFRANKENPHP_WORKER_PATH | - |
| casiny-prod-api-fargate-task-definitions:95 | filebeat | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-filebeat:4.2 | No logs | LOGSTASH_LISTEN_PORTLOGSTASH_HOSTGRAYLOG_INTEGRATION_HOSTGRAYLOG_HOSTGRAYLOG_INTEGRATION_LISTEN_PORTGRAYLOG_LISTEN_PORTFILEBEAT_CONTAINER_NAME | - |
| casiny-prod-bo-task-definitions:95 | terragon-bo | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-bo:230fdaf-812-master | No logs | SERVER_PORTSERVICE_NAMESERVER_NAMECADDY_SERVER_WORKER_COUNTFRANKENPHP_WORKER_PATH | - |
| casiny-prod-bo-task-definitions:95 | filebeat | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-filebeat:4.2 | No logs | LOGSTASH_LISTEN_PORTLOGSTASH_HOSTGRAYLOG_INTEGRATION_HOSTGRAYLOG_HOSTGRAYLOG_INTEGRATION_LISTEN_PORTGRAYLOG_LISTEN_PORTFILEBEAT_CONTAINER_NAME | - |
| casiny-prod-callback-fargate-task-definitions:96 | terragon-callback | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-callback:230fdaf-812-master | awslogs:/ecs/casiny-prod-callback | SERVER_PORTSERVICE_NAMESERVER_NAMECADDY_SERVER_WORKER_COUNTFRANKENPHP_WORKER_PATH | - |
| casiny-prod-callback-fargate-task-definitions:96 | filebeat | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-filebeat:4.2 | No logs | LOGSTASH_LISTEN_PORTLOGSTASH_HOSTGRAYLOG_INTEGRATION_HOSTGRAYLOG_HOSTGRAYLOG_INTEGRATION_LISTEN_PORTGRAYLOG_LISTEN_PORTFILEBEAT_CONTAINER_NAME | - |
| casiny-prod-cdn-cms-task-definitions:3 | nginx-s3-gateway | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-nginx-base:s3-gateway-1.0 | json-file | None | - |
| casiny-prod-cms-task-definitions:12 | nginx-cms | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-nginx-base:3.0 | json-file | NGINX_DEFAULT_CONF_FILE | - |
| casiny-prod-cms-task-definitions:12 | terragon-cms | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-cms:5fe4326-12-develop | No logs | None | - |
| casiny-prod-cronjob-task-definitions:95 | cronjob | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-cronjob:230fdaf-812-master | No logs | None | - |
| casiny-prod-cronjob-task-definitions:95 | filebeat | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-filebeat:4.2 | No logs | LOGSTASH_LISTEN_PORTLOGSTASH_HOSTGRAYLOG_INTEGRATION_HOSTGRAYLOG_HOSTGRAYLOG_INTEGRATION_LISTEN_PORTGRAYLOG_LISTEN_PORTFILEBEAT_CONTAINER_NAME | - |
| casiny-prod-fasttrack-proxy-task-definitions:2 | nginx-fasttrack-proxy | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-nginx-base:3.0-fasttrack | json-file | NGINX_DEFAULT_CONF_FILE | - |
| casiny-prod-fe-1-task-definitions:14 | nginx-fe | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-nginx-base:3.0 | No logs | NGINX_DEFAULT_CONF_FILE | - |
| casiny-prod-fe-1-task-definitions:14 | app | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-fe-1:a36fb7e-20703700804-master | No logs | None | - |
| casiny-prod-fe-task-definitions:80 | nginx-fe | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-nginx-base:3.0 | No logs | NGINX_DEFAULT_CONF_FILE | - |
| casiny-prod-fe-task-definitions:80 | app | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-fe:a36fb7e-20703700804-master | No logs | None | - |
| casiny-prod-queue-worker-fargate-task-definitions:98 | queue-worker | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-queue-worker:230fdaf-812-master | No logs | None | - |
| casiny-prod-queue-worker-fargate-task-definitions:98 | filebeat | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-filebeat:4.2 | No logs | LOGSTASH_LISTEN_PORTLOGSTASH_HOSTGRAYLOG_INTEGRATION_HOSTGRAYLOG_HOSTGRAYLOG_INTEGRATION_LISTEN_PORTGRAYLOG_LISTEN_PORTFILEBEAT_CONTAINER_NAME | - |
| casiny-prod-seon-proxy-task-definitions:1 | nginx-seon-proxy | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-nginx-base:3.0-seon | json-file | NGINX_DEFAULT_CONF_FILE | - |
| casiny-prod-websocket-task-definitions:4 | nginx-websocket | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-nginx-base:3.0 | json-file | None | - |
| casiny-prod-websocket-task-definitions:4 | app | 965192374547.dkr.ecr.ap-east-1.amazonaws.com/casiny-prod-soketi:1.0-16-debian | json-file | None | - |
RDS Instances
| DB Identifier | Engine | Class | Status | Storage | Encrypted | Multi-AZ | Public | Backup | Delete Prot. | Tags |
|---|---|---|---|---|---|---|---|---|---|---|
| casiny-prod-aurora-primary-cluster-instance-0 | aurora-mysql 8.0.mysql_aurora.3.08.2 | db.r7g.8xlarge | available | 1 GiB | Yes | No | No | 7d | No | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| casiny-prod-source-db-dms | mysql 8.0.35 | db.m6g.2xlarge | storage-optimization | 1774 GiB | Yes | No | No | 7d | Yes | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casinyName=casiny-prod-database-master |
Lambda Functions
| Function Name | Runtime | Memory | Timeout | VPC | Last Modified | Tags |
|---|---|---|---|---|---|---|
| casiny-prod-duplication-redshift-checker | python3.13 | 512 MB | 600s | vpc-001b7db037dcd1b75 | 2025-10-20 | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
| casiny-prod-upload-s3-objects-to-sftp | python3.13 | 128 MB | 30s | No VPC | 2025-07-14 | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
SQS Queues
Total Queues: 58
Without Encryption: 58
Without DLQ: 58
| Queue Name | Type | Encrypted | DLQ Configured | Visibility Timeout | Messages | Tags |
|---|---|---|---|---|---|---|
| accumulate_bonus_programs_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| accumulate_bonus_programs_casiny_prod.fifo | FIFO | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| accumulate_bonus_programs_ref_casiny_prod | Standard | No | No | 300s | 20 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| accumulate_bonus_programs_referral_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| accumulate_bonus_programs_settle_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| ad_checks_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| assign_new_game_to_bonus_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| assign_new_game_to_game_segment_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| assign_new_game_to_game_tag_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| audit_logs_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| automatic_withdrawal_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| betting_limit_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| bonuses_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| broadcast_balance_casiny_prod | Standard | No | No | 300s | 58 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| broadcast_casiny_prod | Standard | No | No | 300s | 22 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| calendar_bonus_programs_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| campaign_message_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| casino_bet_detail_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| challenges_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| compliance_actions_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| compliances_casiny_prod.fifo | FIFO | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| crm_casiny_prod | Standard | No | No | 300s | 1 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| crm_high_casiny_prod | Standard | No | No | 300s | 71 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| default_casiny_prod | Standard | No | No | 300s | 50 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| emails_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| export_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| game_log_locks_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| game_logs_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| game_logs_casiny_prod.fifo | FIFO | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| import_batches_casiny_prod | Standard | No | No | 3600s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| loyalty_programs_casiny_prod | Standard | No | No | 300s | 28 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| payment_integration_logs_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| player_activities_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| player_flagged_computing_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| player_tips_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| player_transaction_summary_realtime_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| player_transactional_summary_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| player_vip_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| post_wagered_bonus_programs_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| prune_open_bets_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| quests_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| rebate_programs_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| recent_games_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| referral_plans_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| risk_fraud_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| segments_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| segments_casiny_prod.fifo | FIFO | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| segments_computing_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| segments_computing_casiny_prod.fifo | FIFO | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| sms_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| sportbook_bet_detail_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| spotlight-search_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| sync_game_to_ec_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| telescope_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| tournaments_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| tournaments_casiny_prod.fifo | FIFO | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| wagering_requirements_casiny_prod | Standard | No | No | 300s | 10 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| webhook_call_casiny_prod | Standard | No | No | 300s | 0 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
Secrets Manager
Total Secrets: 3
Without Rotation: 3
| Secret Name | Description | KMS Key | Rotation | Last Rotated | Last Accessed | Tags |
|---|---|---|---|---|---|---|
| casiny-prod-rds-admin-password | - | secretsmanager |
Disabled | - | 2026-01-15 | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casiny |
| casiny-prod-redshift-admin-password | - | secretsmanager |
Disabled | - | 2026-01-15 | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casiny |
| casiny-prod-other-credentials | - | secretsmanager |
Disabled | - | 2026-01-16 | map-migrated=migS0EK6JMBZCEnvironment=prodCustomer=casiny |
CloudWatch Log Groups
Total Log Groups: 10
Without Retention Policy: 4
| Log Group Name | Retention (Days) | Stored Size |
|---|---|---|
/aws/lambda/casiny-prod-duplication-redshift-checker |
30 | 45.87 KB |
/aws/lambda/casiny-prod-upload-s3-objects-to-sftp |
30 | 37.09 MB |
/aws/rds/cluster/casiny-prod-primary-cluster/error |
Never Expire | 834.84 MB |
/aws/rds/instance/casiny-prod-source-db-dms/error |
Never Expire | 1.61 MB |
/ecs/casiny-prod-api |
365 | 1.39 MB |
/ecs/casiny-prod-callback |
365 | 1.24 MB |
/ecs/casiny-prod-queue-worker |
365 | 0 B |
RDSOSMetrics |
30 | 162.16 MB |
casiny-prod-backend-redis-slowlog |
Never Expire | 11.5 KB |
dms-tasks-casiny-prod-dms-replication-instance |
Never Expire | 28.38 MB |
Application & Network Load Balancers
| Name | Type | Scheme | State | DNS Name | VPC | AZs | Listeners | Target Groups | Tags |
|---|---|---|---|---|---|---|---|---|---|
| casiny-prod-ecs-alb | APPLICATION | internet-facing | active | casiny-prod-ecs-alb-1791088052.ap-east-1.elb.amazonaws.com | vpc-001b7db037dcd1b75 | 2 | HTTPS:443, HTTP:80 | 15 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
| casiny-prod-ecs-internal-alb | APPLICATION | internal | active | internal-casiny-prod-ecs-internal-alb-1018250825.ap-east-1.elb.amazonaws.com | vpc-001b7db037dcd1b75 | 2 | HTTPS:443, HTTP:80 | 2 | map-migrated=migS0EK6JMBZCCustomer=casinyEnvironment=prod |
Target Groups
| Load Balancer | Target Group Name | Protocol | Port | Target Type | Health Check |
|---|---|---|---|---|---|
| casiny-prod-ecs-alb | casiny-prod-api-fg-tg-441 | HTTPS | 441 | ip | HTTPS:/robots.txt |
| casiny-prod-ecs-alb | casiny-prod-bo-tg-443 | HTTPS | 440 | instance | HTTPS:/player/api/v1/ping |
| casiny-prod-ecs-alb | casiny-prod-callbck-fg-tg-442 | HTTPS | 442 | ip | HTTPS:/player/api/v1/ping |
| casiny-prod-ecs-alb | casiny-prod-cdn-cms-tg-449 | HTTPS | 449 | instance | HTTPS:/health |
| casiny-prod-ecs-alb | casiny-prod-cms-tg-444 | HTTPS | 444 | instance | HTTPS:/ |
| casiny-prod-ecs-alb | casiny-prod-elk-tg-443 | HTTPS | 443 | instance | HTTPS:/ |
| casiny-prod-ecs-alb | casiny-prod-fasttrckproxy-tg-445 | HTTPS | 445 | instance | HTTPS:/healthcheck |
| casiny-prod-ecs-alb | casiny-prod-fe-1-tg-443 | HTTPS | 443 | instance | HTTPS:/robots.txt |
| casiny-prod-ecs-alb | casiny-prod-fe-tg-443 | HTTPS | 443 | instance | HTTPS:/robots.txt |
| casiny-prod-ecs-alb | casiny-prod-graylog-tg-443 | HTTPS | 443 | instance | HTTPS:/ |
| casiny-prod-ecs-alb | casiny-prod-intglog-tg-443 | HTTPS | 443 | instance | HTTPS:/ |
| casiny-prod-ecs-alb | casiny-prod-metbase-tg-443 | HTTPS | 443 | instance | HTTPS:/ |
| casiny-prod-ecs-alb | casiny-prod-mon-tg-443 | HTTPS | 443 | instance | HTTPS:/ |
| casiny-prod-ecs-alb | casiny-prod-seonproxy-tg-450 | HTTPS | 450 | instance | HTTPS:/healthcheck |
| casiny-prod-ecs-alb | casiny-prod-ws-tg-6002 | HTTPS | 6002 | instance | HTTPS:/ |
| casiny-prod-ecs-internal-alb | casiny-prod-cms-internal-444 | HTTPS | 444 | instance | HTTPS:/ |
| casiny-prod-ecs-internal-alb | casiny-prod-websocket-int-6002 | HTTPS | 6002 | instance | HTTPS:/ |
Security Groups (In Use)
| Name | Group ID | VPC | Used By | Inbound Ports | Outbound Ports | Open to Internet | Tags |
|---|---|---|---|---|---|---|---|
| casiny-prod-fireblocks_cosigner | sg-0cd9aaa751dacaf9f |
vpc-001b7db037dcd1b75 | EC2(1) | None | All | No | Environment=prodCustomer=casinymap-migrated=migS0EK6JMBZC |
| casiny-prod-allow-local | sg-00812567619772214 |
vpc-001b7db037dcd1b75 | APPLICATION(1), EC2(12), ECS(3) | All | All | No | Environment=prodmap-migrated=migS0EK6JMBZCCustomer=casiny |
| casiny-prod-allow-http-https | sg-08f5758c00dc0b3c7 |
vpc-001b7db037dcd1b75 | APPLICATION(1) | tcp:443, tcp:80 | All | Yes | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
| casiny-prod-lambda-duplication-redshift-checker-sg | sg-03cb009a3aa1f18cd |
vpc-001b7db037dcd1b75 | Lambda(1) | None | All | No | Environment=prodCustomer=casinymap-migrated=migS0EK6JMBZC |
| casiny-prod-allow-ssh | sg-04627a305cb6b9a3d |
vpc-001b7db037dcd1b75 | EC2(1) | tcp:22 | All | No | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
| casiny-prod-allow-local-port-3306 | sg-0ff7e1489d996a594 |
vpc-001b7db037dcd1b75 | RDS(2) | tcp:3306 | All | No | Customer=casinyEnvironment=prodmap-migrated=migS0EK6JMBZC |
Security Group Rules Detail
| Security Group | Direction | Protocol | Port Range | Source/Destination |
|---|---|---|---|---|
casiny-prod-allow-local sg-00812567619772214 |
Inbound | All | All | 172.16.4.0/24, 172.16.1.0/24, 172.16.2.0/24, 172.16.3.0/24 |
casiny-prod-allow-http-https sg-08f5758c00dc0b3c7 |
Inbound | tcp | 80 | 0.0.0.0/0 |
casiny-prod-allow-http-https sg-08f5758c00dc0b3c7 |
Inbound | tcp | 443 | 0.0.0.0/0 |
casiny-prod-allow-ssh sg-04627a305cb6b9a3d |
Inbound | tcp | 22 | 14.161.16.211/32, 115.79.29.29/32, 92.251.112.229/32, 43.218.68.91/32, 3.108.12.97/32, 38.54.33.217/32, 84.252.112.3/32, 115.78.100.17/32, 119.93.179.143/32, 93.36.220.74/32, 18.132.4.226/32, 118.69.133.85/32 |
casiny-prod-allow-local-port-3306 sg-0ff7e1489d996a594 |
Inbound | tcp | 3306 | 172.16.3.0/24, 172.16.1.0/24, 172.16.2.224/32, 10.0.2.5/32 |
casiny-prod-fireblocks_cosigner sg-0cd9aaa751dacaf9f |
Outbound | All | All | 0.0.0.0/0 |
casiny-prod-allow-local sg-00812567619772214 |
Outbound | All | All | 0.0.0.0/0 |
casiny-prod-allow-http-https sg-08f5758c00dc0b3c7 |
Outbound | All | All | 0.0.0.0/0 |
casiny-prod-lambda-duplication-redshift-checker-sg sg-03cb009a3aa1f18cd |
Outbound | All | All | 0.0.0.0/0 |
casiny-prod-allow-ssh sg-04627a305cb6b9a3d |
Outbound | All | All | 0.0.0.0/0 |
casiny-prod-allow-local-port-3306 sg-0ff7e1489d996a594 |
Outbound | All | All | 0.0.0.0/0 |
Compliance Findings
Network & Security (Section 5.2)
1
Open Security Groups (0.0.0.0/0)
8
EC2 Without IMDSv2
Yes
CloudTrail Enabled
Data Protection (Section 5.4)
14
Unencrypted EBS Volumes
0
Unencrypted RDS
58
SQS Without Encryption
Logging & Monitoring (Section 5.3)
4
Log Groups (No Retention)
RDS Standards (Section 7)
0
Public RDS Instances
2
RDS Without Multi-AZ
0
RDS Without Backups
Lambda Standards (Section 7)
0
Lambda Default Timeout (3s)
2
Lambda Without DLQ
SQS Standards (Section 7)
58
SQS Without DLQ
ECS Standards (Section 7)
55
Plaintext Env Vars
0
Privileged Containers