AWS Assessment Report

Prepared by KloudCare for AWS account 123456789012 · Assessed 2026-09-23T10:00:00Z · Observation window 14 days (2026-09-09T10:00:00Z → 2026-09-23T10:00:00Z)

This assessment was read-only. No AWS resources were changed. Savings figures are estimates; review the limitations below before acting on them.

Jump to: Cost Backup Security Governance and operations

Executive summary

Results by area

Regions assessed: eu-west-2, ap-southeast-1

Resources by service: ebs: 4, ec2: 8, ecs: 2, elb: 3, lambda: 4, nat-gateway: 2, rds: 2, s3: 4

Savings range covers 9 finding(s) with a price estimate; 3 cost-related finding(s) have no estimate.

High-priority findings

Need help acting on these findings? Book a free 30-minute review with KloudCare (hello@kloudcare.co.uk).

Important limitations

• Utilisation is based on a 14-day observation window (2026-09-09T10:00:00Z to 2026-09-23T10:00:00Z). Monthly or seasonal peaks outside this window are not represented.
• Configuration is a point-in-time snapshot taken at the assessment date.
• Savings are estimates. Approximate on-demand list price for each resource's region; excludes discounts, Savings Plans and Reserved Instances. Confirm against the bill before acting.
• EC2 memory and disk utilisation require the CloudWatch agent and are not assessed.
• Security checks cover common high-risk settings. They are not a full security audit or compliance assessment; AWS Security Hub provides broader continuous checks.
• Not assessed in this version: Classic Load Balancers, Aurora clusters, EKS, DynamoDB, EFS, EBS snapshot storage costs and data transfer costs.
• 6 signal(s) could not be evaluated and are listed as data gaps. Missing metrics are treated as unknown, not zero.

All findings

Cost (12 finding(s))

Unused, underutilised and oversized resources, and other ways to reduce your AWS bill.

Estimated savings: USD 882–1,219 per month across 9 finding(s) with a price estimate.

Last month's spend: USD 4,210.55 (2026-08-01 to 2026-09-01, end exclusive; Cost Explorer GetCostAndUsage (UnblendedCost, MONTHLY, grouped by SERVICE))

Unused resources (5)

{
  "instance_class": "db.m5.large",
  "status": "available",
  "multi_az": false,
  "backup_retention_days": 0,
  "publicly_accessible": false,
  "deletion_protection": false,
  "storage_encrypted": false
}

{
  "size_gb": 500,
  "volume_type": "gp2",
  "state": "available",
  "attached_to": [],
  "encrypted": false,
  "latest_snapshot": ""
}

{
  "type": "application",
  "target_groups": 1,
  "targets_total": 0,
  "targets_healthy": 0
}

{
  "public_ip": "203.0.113.10",
  "associated": false
}

{
  "runtime": "python3.12"
}

Underutilised resources (2)

{
  "instance_class": "db.r5.xlarge",
  "status": "available",
  "multi_az": true,
  "backup_retention_days": 3,
  "publicly_accessible": true,
  "deletion_protection": true,
  "storage_encrypted": true
}

{
  "instance_type": "m5.xlarge",
  "state": "running"
}

Overprovisioned resources (3)

{
  "instance_type": "m5.2xlarge",
  "state": "running"
}

{
  "instance_type": "c5.2xlarge",
  "state": "running"
}

{
  "cluster": "main",
  "desired_count": 6,
  "running_count": 6
}

Cost opportunities (2)

{
  "lifecycle_rules": 0,
  "tags_readable": true,
  "versioning": "Disabled",
  "public_by_policy": false
}

{
  "vpc_id": "vpc-1"
}

Cost checks performed

Backup (7 finding(s))

Whether your servers, databases and files can be recovered after a mistake, failure or attack.

{
  "size_gb": 100,
  "volume_type": "gp3",
  "state": "in-use",
  "attached_to": [
    "i-busy"
  ],
  "encrypted": true,
  "latest_snapshot": ""
}

{
  "instance_class": "db.m5.large",
  "status": "available",
  "multi_az": false,
  "backup_retention_days": 0,
  "publicly_accessible": false,
  "deletion_protection": false,
  "storage_encrypted": false
}

{}

{
  "size_gb": 50,
  "volume_type": "gp3",
  "state": "in-use",
  "attached_to": [
    "i-oversized"
  ],
  "encrypted": true,
  "latest_snapshot": "2026-08-01T00:00:00Z"
}

{
  "instance_class": "db.m5.large",
  "status": "available",
  "multi_az": false,
  "backup_retention_days": 0,
  "publicly_accessible": false,
  "deletion_protection": false,
  "storage_encrypted": false
}

{
  "instance_class": "db.r5.xlarge",
  "status": "available",
  "multi_az": true,
  "backup_retention_days": 3,
  "publicly_accessible": true,
  "deletion_protection": true,
  "storage_encrypted": true
}

{
  "lifecycle_rules": 0,
  "tags_readable": true,
  "versioning": "Disabled",
  "public_by_policy": false
}

Backup checks performed

Security (13 finding(s))

Common high-risk settings: account access, internet exposure, public data, encryption and threat detection.

{}

{}

{}

{
  "console_access": true,
  "mfa_devices": 0,
  "access_keys": []
}

{
  "lifecycle_rules": 1,
  "tags_readable": true,
  "versioning": "Enabled",
  "public_by_policy": true
}

{
  "group_name": "legacy-admin",
  "vpc_id": "vpc-1",
  "open_rules": [
    {
      "protocol": "tcp",
      "from_port": 22,
      "to_port": 22,
      "sources": [
        "0.0.0.0/0"
      ],
      "exposed": [
        "SSH (22)"
      ]
    }
  ]
}

{}

{}

{
  "console_access": false,
  "mfa_devices": 0,
  "access_keys": [
    {
      "id_suffix": "ABCD",
      "status": "Active",
      "created": "2025-01-15T00:00:00Z"
    },
    {
      "id_suffix": "EFGH",
      "status": "Inactive",
      "created": "2024-01-15T00:00:00Z"
    }
  ]
}

{
  "instance_class": "db.r5.xlarge",
  "status": "available",
  "multi_az": true,
  "backup_retention_days": 3,
  "publicly_accessible": true,
  "deletion_protection": true,
  "storage_encrypted": true
}

{
  "instance_class": "db.m5.large",
  "status": "available",
  "multi_az": false,
  "backup_retention_days": 0,
  "publicly_accessible": false,
  "deletion_protection": false,
  "storage_encrypted": false
}

{}

{
  "size_gb": 500,
  "volume_type": "gp2",
  "state": "available",
  "attached_to": [],
  "encrypted": false,
  "latest_snapshot": ""
}

Security checks performed

Governance and operations (5 finding(s))

Monitoring, reliability and tagging that keep the account manageable.

Monitoring and reliability (3)

{
  "instance_type": "t3.medium",
  "state": "running"
}

{
  "type": "application",
  "target_groups": 1,
  "targets_total": 2,
  "targets_healthy": 0
}

{}

Tagging and governance (2)

{
  "runtime": "python3.12"
}

{
  "runtime": "python3.12"
}

Governance and operations checks performed

Data gaps (6)

Signals that could not be evaluated. These are unknown, not zero, and no utilisation claim is made for them.

Resource inventory (29)

Recommended next steps

1. Address 8 critical/high security and backup finding(s) first: KC-001, KC-003, KC-004, KC-005, KC-006….
2. Confirm ownership of 4 unused resource(s) and remove them after snapshots where relevant.
3. Review 5 sizing finding(s) with workload owners and test changes outside production.
4. Agree a tagging standard and enforce it through IaC and AWS Organizations Tag Policies.
5. Agree an owner and target date for each accepted finding, then re-run the assessment to confirm.

Methodology

Approximate on-demand list price for each resource's region; excludes discounts, Savings Plans and Reserved Instances. Price-table estimates are shown as +/-20% ranges.

Required tags: Owner, Environment · Expected regions: eu-west-2 · Compute Optimizer: Active

Collection errors (0)

None.