Findings by source

AWS AI Services

AWS · 123456789012 Amazon Web Services · Cloud AI platform · CloudTrail eventSource comprehend.amazonaws.com

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
48
Medium
People
2
IAM identities in CloudTrail
CloudTrail events
35
3 write · 0 denied · 90 days
First seen
Aug 25, 2026
Last seen 19 h ago
awsaccount:123456789012builders
Next steps

Recommended actions

  1. 01AWS AI Services trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
  2. 02Set the AI services opt-out policy in AWS Organizations so AWS AI Services cannot use your content to improve the service, then confirm Q Developer users are on Pro rather than the free tier.
AWS (demo) · account 123456789012

In the AWS account

2026-06-17: 02026-06-18: 02026-06-19: 02026-06-20: 02026-06-21: 02026-06-22: 02026-06-23: 02026-06-24: 02026-06-25: 02026-06-26: 02026-06-27: 02026-06-28: 02026-06-29: 02026-06-30: 02026-07-01: 02026-07-02: 02026-07-03: 02026-07-04: 02026-07-05: 02026-07-06: 02026-07-07: 02026-07-08: 02026-07-09: 02026-07-10: 02026-07-11: 02026-07-12: 02026-07-13: 02026-07-14: 02026-07-15: 02026-07-16: 02026-07-17: 02026-07-18: 02026-07-19: 02026-07-20: 02026-07-21: 02026-07-22: 02026-07-23: 02026-07-24: 02026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 12026-08-26: 12026-08-27: 12026-08-28: 12026-08-29: 12026-08-30: 12026-08-31: 12026-09-01: 22026-09-02: 22026-09-03: 22026-09-04: 22026-09-05: 22026-09-06: 22026-09-07: 22026-09-08: 22026-09-09: 32026-09-10: 32026-09-11: 32026-09-12: 22026-09-13: 12026-09-14: 0
06-1709-14
management events onlyus-east-1
Identities
IdentityTypeEventsDenied
i-0a1b2c3dAssumedRole200
contractor-mlIAMUser150
Top actions
DetectPiiEntities20
AnalyzeDocument12
StartTranscriptionJob3
Resources

No resources of this kind in the regions checked.

Billing · AWS

What it costs

Last 30 days
$240
Previous 30
$181
Change
+33%
2026-06-16: 52026-06-17: 52026-06-18: 52026-06-19: 52026-06-20: 52026-06-21: 52026-06-22: 52026-06-23: 52026-06-24: 52026-06-25: 52026-06-26: 52026-06-27: 52026-06-28: 42026-06-29: 52026-06-30: 52026-07-01: 52026-07-02: 52026-07-03: 52026-07-04: 52026-07-05: 52026-07-06: 52026-07-07: 52026-07-08: 52026-07-09: 52026-07-10: 52026-07-11: 42026-07-12: 52026-07-13: 52026-07-14: 52026-07-15: 52026-07-16: 52026-07-17: 52026-07-18: 52026-07-19: 42026-07-20: 52026-07-21: 52026-07-22: 52026-07-23: 52026-07-24: 52026-07-25: 52026-07-26: 42026-07-27: 52026-07-28: 52026-07-29: 52026-07-30: 52026-07-31: 52026-08-01: 42026-08-02: 52026-08-03: 52026-08-04: 52026-08-05: 92026-08-06: 92026-08-07: 92026-08-08: 62026-08-09: 62026-08-10: 92026-08-11: 92026-08-12: 92026-08-13: 92026-08-14: 92026-08-15: 52026-08-16: 62026-08-17: 92026-08-18: 92026-08-19: 92026-08-20: 102026-08-21: 92026-08-22: 62026-08-23: 62026-08-24: 92026-08-25: 92026-08-26: 92026-08-27: 92026-08-28: 92026-08-29: 62026-08-30: 62026-08-31: 92026-09-01: 92026-09-02: 102026-09-03: 82026-09-04: 92026-09-05: 62026-09-06: 62026-09-07: 102026-09-08: 92026-09-09: 92026-09-10: 102026-09-11: 92026-09-12: 62026-09-13: 6
06-1609-13
123456789012 $146 · 123456789012 $93.99
Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

PersonDepartmentSourceSign-ins · 30 dGranted
contractor-ml
contractor-ml
n/aAWS identity0No direct grant
i-0a1b2c3d via AppServiceRole
i-0a1b2c3d
n/aAWS identity0No direct grant
Why

Evidence

  1. cloudtrail_activity · Sep 13, 2026
    AWS (demo) (123456789012): AWS AI Services, 35 CloudTrail events by 2 identities, 3 write in 90 days across us-east-1
    Detail
    {
      "services": [
        "comprehend.amazonaws.com",
        "textract.amazonaws.com",
        "transcribe.amazonaws.com"
      ],
      "topActions": [
        {
          "name": "DetectPiiEntities",
          "count": 20
        },
        {
          "name": "AnalyzeDocument",
          "count": 12
        },
        {
          "name": "StartTranscriptionJob",
          "count": 3
        }
      ],
      "invocationLogging": null
    }