| 🧠 wip.logic.yaml 🔴🟠 | 📝 AWS Account Has No IAM Users 🔴🟠 | 🔴 x1, 🟠 x1 |
| 🧠 prod.logic.yaml 🟠🟢 | 📝 AWS Account Security Hub is not enabled 🟢 | 🟠 x1, 🟢 x2 |
| 🧠 prod.logic.yaml 🟠🟢 | 📝 AWS API Gateway API Access Logging in CloudWatch is not enabled 🟢 | 🟠 x1, 🟢 x2 |
| 🧠 wip.logic.yaml 🔴🟠 | 📝 AWS IAM Policy (Customer Managed) Contains Potential Credentials Exposure 🔴🟠 | 🔴 x1, 🟠 x1 |
| 🧠 prod.logic.yaml 🟠🟢 | 📝 AWS IAM User has inline or directly attached policies 🟢 | 🟠 x1, 🟢 x2 |
| 🧠 prod.logic.yaml 🟠🟢 | 📝 AWS VPC Flow Logs are not enabled 🟢 | 🟠 x1, 🟢 x2 |
| 🧠 prod.logic.yaml 🟠🟢 | 📝 Azure Subscription Application Insights are not configured 🟢 | 🟠 x1, 🟢 x2 |
| 🧠 prod.logic.yaml 🟠🟢 | 📝 Azure Subscription Bastion Host does not exist 🟢 | 🟠 x1, 🟢 x2 |
| 🧠 prod.logic.yaml 🟠🟢 | 📝 Google Project has API Keys 🟢 | 🟠 x1, 🟢 x2 |