Security Dashboard
Notifications
Inbox
12%
247
Total IAM Users
Active users across all AWS accounts
3
18
Critical Risk Users
Immediate attention required
5%
42
Medium Risk Users
Review recommended within 7 days
8%
187
Low Risk Users
Compliant with security policies
Risk Distribution
Critical
Medium
Low
Risk Trend (30 Days)
Critical
Medium
User Risk Analysis
| User | Status | Risk Level | Risk Score | Attached Policies | Last Activity | Actions |
|---|
Security Alerts
Critical: Overprivileged Admin User
User john.doe has AdministratorAccess with no MFA and 127 days of inactivity
2 minutes ago
Warning: Access Keys Not Rotated
12 users have access keys older than 90 days. Rotation recommended immediately.
15 minutes ago
Warning: MFA Not Enabled
18 users do not have MFA enabled on their AWS accounts.
1 hour ago
Info: Policy Optimization Available
AWS IAM Access Analyzer found 3 policies that can be reduced in scope.
3 hours ago
AWS Security Insights
IAM Credential Report Generated
Latest credential report shows 89% compliance rate across all AWS accounts.
30 minutes ago
Root Account Activity Detected
Root account was used 2 times in the last 7 days. Minimize root usage.
2 hours ago
Security Group Audit Complete
All security groups scanned. 2 groups have overly permissive inbound rules.
5 hours ago
Suspicious API Activity
Unusual API call patterns detected from IP 203.0.113.45. Investigate immediately.
6 hours ago
Generate Security Report
Export a comprehensive security assessment report including all IAM user risk analysis, policy evaluations, and compliance status for your AWS infrastructure.
IAM Policies
4
28
Total Policies
Managed and custom policies
2
8
High Risk Policies
Overprivileged or wildcard
1
12
Medium Risk
Broad permissions
3%
71.4%
Compliance Score
Least-privilege adherence
Policy Permission Breakdown
| Policy | Type | Risk | Effect | Actions | Resources | Conditions | Attached |
|---|
Compliance Center
3%
87%
CIS Benchmark Score
Level 1 & 2 controls
2%
73%
MFA Compliance
18 users missing MFA
5%
91%
Password Policy
Strong policy enforced
1%
78%
IAM Security
Least privilege adherence
CIS Controls Status
Compliance Distribution
Compliance Findings
| Control | Framework | Status | Affected | Severity | Last Check |
|---|---|---|---|---|---|
| CIS 1.5 – MFA for all IAM users | CIS v1.4 | Non-Compliant | 18 users | Critical | 2 min ago |
| CIS 1.14 – Access key rotation | CIS v1.4 | Partial | 12 users | High | 15 min ago |
| SOC2 CC6.1 – Least Privilege | SOC 2 | Review | 8 policies | High | 1 hr ago |
| CIS 1.1 – Root account not used | CIS v1.4 | Compliant | 0 | Low | 30 min ago |
| ISO 27001 A.9.4 – Password Policy | ISO 27001 | Compliant | 0 | Low | 1 hr ago |
Audit Logs
| Timestamp | Event Type | User/Principal | Action | Resource | Source IP | Outcome |
|---|
GitHub Security Integration
2
14
Connected Repos
Actively monitored
1
6
Secrets Detected
AWS keys, tokens, passwords
3
23
Vulnerabilities
Dependencies & code
8
91
Scans Passed
Clean repositories
Connected Repositories
Security Findings
| Repository | Finding Type | Severity | File | Detected | Status |
|---|---|---|---|---|---|
| infra-terraform | AWS Access Key Exposed | Critical | vars.tf:42 | 5 min ago | Open |
| api-gateway | Hardcoded Secret | Critical | config.js:18 | 1 hr ago | Open |
| lambda-functions | Dependency CVE-2024-21 | High | package.json | 3 hr ago | In Review |
| data-pipeline | Overpermissive IAM Role | High | iam.tf:77 | 6 hr ago | Open |
| auth-service | Missing TLS Validation | Medium | http.go:91 | 1 day ago | Resolved |
Configuration
Appearance
Dark Mode
Toggle between dark and light interface themes
Compact Mode
Reduce card padding and spacing for more data density
Animated Scan Line
Show the scanning animation on the dashboard
Notifications
Critical Alerts
Receive real-time critical security alerts
Daily Digest
Receive a daily security summary email
Slack Integration
Push alerts to configured Slack channels
Security
Enforce MFA
Require MFA for all dashboard users
Auto-lock on Idle
Lock session after 15 minutes of inactivity
IP Allowlist
Restrict access to approved IP ranges only
API Keys