This template takes the AMI's which are older than 15 days in your AWS account and deregister them. Deleting unused images is a good practice to remove junk from your aws account.

This workflow sends a report of Redshift clusters which does not have tags established by their organisations. Which tags are missing can be found in the report generated.

Send report of all the Network ACL changes in your AWS account i.e. if any operations like create/delete Network ACL or create/delete/replace Network ACL entry is performed in your AWS account then this workflow will generate a report of it and send it to your email.

Send report for all the EC2 Instances without a cloudwatch alarm attached to them.

Send report of all the elasticSearch domains without a cloudwatch alarm attached to them.

Send report of all the S3 bucket policy changes in your AWS account i.e. if any operations like put/delete bucket policy is performed in your AWS account then this workflow will generate a report of it and send it to your email.

Send report of IAM users which does not have "AWSSupportAccess" policy attached.

Having expired ACM certificates lying around is not a AWS best practice and can potentially affect your application, in case they are picked during deployment.

This workflow periodically finds if number of instances in your account are more than the limit set by you (default limit is 50) and sends a Email or Slack notification.

Sends a report of VPC's in your AWS account if the flow logs are not enabled for them.

Send a report of ElastiCache clusters without a cloudwatch alarm attached to them.

Identify Auto Scaling Groups that are not using appropriate cooldown periods, every hour. This helps you to ensure that one scaling event is not initiated before the effects of another are evident.

Send report of all the AWS config changes in your AWS account i.e. if any operations like create/delete config rule is performed in your AWS account then this workflow will generate a report of it and send it to your email.

This workflow enables the MultiAZ for RDS DB instances and then after a delay of 1 hour it forces it to fail over. Again after 1 hour of delay it disables the MultiAZ feature for the RDS DB instances and then sends a report

Sends a report with all the EC2 Instances without a cloudwatch alarm attached to them.