Infrastructure health report

plainfra scanned 3 active accounts (a fourth is intentionally empty) and Sumo Logic. Three owner-level issues need attention.

🔴 Critical

• RabbitMQ management console open to the entire internet (queue account, port 15672) — anyone could reach the message-broker admin panel.
• SSH open to the world on all three tiers — a direct brute-force surface.
• An admin user with no MFA in every account — one stolen password from full control.

🟠 Worth fixing

• The database has encryption at rest disabled and no high-availability standby.
• A publicly-readable storage bucket, and a container running privileged with a hard-coded secret.

🟢 Done right

• The database itself isn't internet-reachable and the queue's data port is correctly locked down — plainfra flags the good as well as the bad.