Assets

iam-roles-2026.json

IAM policy document with 4 role definitions (Admin, Manager, Analyst, Viewer). Parsed for RBAC model verification.

Q1-2026-audit.pdf

Quarterly compliance audit report. Page 14 referenced for last access audit date (Mar 15, 2026).

deploys-Q1-2026.csv

Deployment log spreadsheet with 42 entries. Used to calculate deployment frequency (3.2/week) and lead time metrics.

governance-v3.pdf

Data governance policy document (v3). Contains data ownership assignments for all 8 core datasets and retention periods.

gdpr-checklist.xlsx

GDPR compliance checklist. 'Data lineage' field marked as non-compliant, flagged as compliance risk.

it-assets-2026.xlsx

IT asset register with server serial numbers, purchase dates, and warranty status. Used to determine average server age (4.2 years).

support-tickets-Q1.csv

Jira export of support tickets. 3 open tickets reference duplicate data issues across production datasets.

Chat: Rollback procedures

User explained that rollbacks are done manually via git revert with no automation. Confirmed no canary or blue-green deployment setup exists.

Chat: Model retraining schedule

User stated models are retrained 'when someone notices issues'. No SLA on model freshness confirmed.

Chat: Cloud migration status

User provided list of 30 services, confirmed 12 running on AWS. Agent verified via health check probes.

Chat: MFA policy for non-admins

User confirmed MFA is optional for non-admin accounts. Agent cross-referenced with IAM credential report showing 62% adoption.

aws kms describe-key

Executed across all active KMS keys. Confirmed AES-256-GCM algorithm and key rotation enabled with 90-day cycle.

terraform state list + plan

Listed 147 managed resources and ran dry-run plan detecting 12 resources with config drift against actual cloud state.

aws iam generate-credential-report

Generated IAM credential report. Verified 8/8 admin accounts have MFA enabled, 62% of non-admin accounts.

Network discovery (SNMP)

Internal subnet scan via SNMP. Identified 3 Dell PowerEdge R750 physical servers and 2 VMware ESXi 7.0 hosts.

EBS volume encryption audit

Scanned all 12 EBS volumes in the AWS account. All volumes confirmed encrypted at rest with KMS-managed keys.

GitHub Actions API response

Workflow runs for last 30 days: 94.2% success rate, average duration 4m 32s across 14 active workflows.

MLflow model registry query

3 models with 'Production' stage tag. Latest model version dates to December 2025 (3+ months stale).

Airflow DAGs API response

28 active DAGs, 97.3% scheduler uptime, 2 failed runs in 30 days (both auto-retried successfully).

AWS Inspector findings

Latest scan (Mar 20, 2026): 0 critical, 0 high, 3 medium, 8 low findings. Weekly scan schedule confirmed.