AWS bots

Checks whether a service is stuck at its replica ceiling and whether the database, not the app, is the bottleneck. Uses only the telemetry in the input.

Walks supplied code and infrastructure text for public exposure, wildcard identity, privileged containers, secret handling, and dependency risk. It does not connect to a cloud account.

Reviews a pasted IAM policy for wildcard actions, broad resources, and missing conditions. It does not call AWS or attach a policy.

Reviews pasted Terraform, security groups, and bucket or load balancer config for unintended public access. It does not connect to AWS.