Takes all the EC2 server and calculates the average CPUUtilization of last one month for all the Servers. Using this average CPUUtilization as threshold, new alarms are being created for the servers that doesn't have an alarm already.

To determine if your Amazon RDS database instances are using Performance Insights feature, AWS Relational Database Service (RDS) Performance Insights feature provides you instant visibility into the nature of the workloads on your Amazon RDS databases and helps you find the cause of any performance issue found on those databases.

To determine if your RDS clusters are using Multi-AZ configuration for high availability.

Ensure that your RDS database instances have automated backups enabled for point-in-time recovery. To back up your database instances, AWS RDS take automatically a full daily snapshot of your data.

This template takes the AMI's which are older than 15 days in your AWS account and deregister them. Deleting unused images is a good practice to remove junk from your aws account.

This workflow sends a report of Redshift clusters which does not have tags established by their organisations. Which tags are missing can be found in the report generated.

Send report of all the Network ACL changes in your AWS account i.e. if any operations like create/delete Network ACL or create/delete/replace Network ACL entry is performed in your AWS account then this workflow will generate a report of it and send it to your email.

Send report for all the EC2 Instances without a cloudwatch alarm attached to them.

Send report of all the elasticSearch domains without a cloudwatch alarm attached to them.

Send report of all the S3 bucket policy changes in your AWS account i.e. if any operations like put/delete bucket policy is performed in your AWS account then this workflow will generate a report of it and send it to your email.

Send report of IAM users which does not have "AWSSupportAccess" policy attached.

Having expired ACM certificates lying around is not a AWS best practice and can potentially affect your application, in case they are picked during deployment.

This workflow periodically finds if number of instances in your account are more than the limit set by you (default limit is 50) and sends a Email or Slack notification.

Sends a report of VPC's in your AWS account if the flow logs are not enabled for them.

Send a report of ElastiCache clusters without a cloudwatch alarm attached to them.