Cloud Advisor Reference
Rule list
Security
| Rule | Priority | Detection criteria |
|---|---|---|
| MFA on tenant owner | Action recommended | MFA not enabled on the root account of the Tenant |
| MFA should be enabled for all IAM users | Action recommended | One or more IAM users do not have MFA enabled |
| Security groups - specific ports unrestricted | Action recommended | Security Group has an IPv4 inbound rule allowing 0.0.0.0/0 to specific ports. Red = highest risk, Yellow = lower risk, Green = typically required by applications (HTTP/SMTP) |
| Security Groups - Specific Ports Unrestricted to a resource | Action recommended | User-created Security Group has an IPv4 inbound rule allowing unrestricted access to a specific resource |
Cost optimization
| Rule | Priority | Detection criteria |
|---|---|---|
| Low utilization instances | Investigation recommended | CPU utilization ≤ 10% AND network I/O ≤ 5 MB for at least 4 days in the past 14 days |
| Underutilized storage disk | Investigation recommended | Storage disk is unattached or has very low write activity (excluding boot disk) for a period of time |
| Instances stopped | Investigation recommended | Instance has been stopped for more than 30 days |
| Unassociated IP addresses | Investigation recommended | IP address (Floating IP) is not associated with any resource |
Fault tolerance
| Rule | Priority | Detection criteria |
|---|---|---|
| Storage disk snapshot | Action recommended | Snapshot of a storage disk (available or in-use) is outdated or missing |
| Instance snapshot | Action recommended | Snapshot of an instance (available or in-use) is outdated or missing |
Rule display structure
Each rule on the Dashboard and Recommendations pages displays:
[Priority icon] Rule name Last updated: DD MMM YYYY, HH:MM [🔄] [⬇]
Rule description
X violation items / Y total items | Z items have been excluded
- X violation items — resources currently violating the rule
- Y total items — total resources evaluated by the rule
- Z items have been excluded — resources excluded from this check
Email notification fields
| Field | Required | Description |
|---|---|---|
| Enable toggle | — | Enable/disable all email notifications |
| Emails | No | Recipient email addresses, comma-separated |
| Frequency | Yes | Send frequency: Daily |
| Time | Yes | Day and time to send the email based on the chosen frequency |
| Notification language | Yes | Language of the email content |
Priority levels
| Value | Icon | Meaning |
|---|---|---|
| Action recommended | 🔴 | Act immediately — high risk or significant cost impact |
| Investigation recommended | 🟡 | Review before deciding — further investigation recommended |