AWS Dashboard

Dashboard provides a general and holistic view of security posture about scanned AWS environments based on different perspectives.

Risk Pane (AWS Dashboard)

This Risk Pane summarizes key risk metrics from the scan, including the overall Risk and Exposure Scores, Dangerous Paths, Shadow Admins, and severity levels (Critical to Info). It breaks down risks by MITRE ATT&CK Tactics (e.g., Persistence, Privilege Escalation, Initial Access), Tags (e.g., Identity Governance, Account Security, Access Management), Impacts (e.g., Privilege Escalation via Policy Manipulation, Shadow Admin via Dangerous Permissions, Credential Exposure), and AWS Entity Types (e.g., AWSIAMUser, AWSIAMRole, AWSIAMGroup, AWSIAMPolicy, AWSIAMAccount, AWSOrganization). This layout helps quickly identify high-risk areas and prioritize remediation actions within AWS environments.

Risk Pane

Risk Breakdown by Tags, Impacts and Entity Types

Risk Breakdown by Tags, Impacts and Entity Types

Risk Breakdown by Tags: Risk scores based on Tags.

Risk Breakdown by Impacts: Risk scores based on Impacts.

Risk Breakdown by Entity Types: Risk scores based on Entity Types.

AWS Entity Pane

Users Table

Statistic	Description
Privileged Users	The number of inactive user accounts.
Shadow Users	The number of shadow admin user accounts.
Risky Users	The number of user accounts that have a risk score greater than 50.
Inactive Users	The number of inactive user accounts.

Groups Table

Statistic	Description
Shadow Groups	The number of shadow admin groups.
Risky Groups	The number of groups that have a risk score greater than 50.

Roles Table

Statistic	Description
Privileged Roles	The number of privileged roles.
Shadow Roles	The number of shadow admin roles.
Risky Roles	The number of roles that have a risk score greater than 50.
Inactive Roles	The number of inactive roles.

Policies Table

Statistic	Description
Risky Policies	The number of policies that have a risk score greater than 50.

Access Keys Table

Statistic	Description
Inactive Access Keys	The number of inactive access keys.