well_architected_scorecard:
  overall_status: GAPS_IDENTIFIED
  generated_date: '2026-04-12T21:26:00.300204'
  architecture_name: examples/meli-kvs-wa-architecture.yaml
  customer: Unknown
  summary:
    total_checks: 23
    total_passed: 18
    total_gaps: 5
    high_severity_gaps: 2
    medium_severity_gaps: 1
    low_severity_gaps: 2
  pillars:
    security_compliance:
      status: GAPS_IDENTIFIED
      checks_passed: 12
      checks_total: 15
      categories:
        identity_access:
          passed: 3
          total: 4
          gaps:
          - check_id: SEC-IAM-003
            area: Identity & Access
            finding: no mention of admin account restrictions
            severity: HIGH
            recommendation: separate admin groups defined for operations
            wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
        resource_isolation:
          passed: 3
          total: 3
          gaps: []
        database_security:
          passed: 0
          total: 0
          gaps: []
        data_protection:
          passed: 1
          total: 2
          gaps:
          - check_id: SEC-DAT-001
            area: Data Protection
            finding: any storage service without encryption at rest
            severity: HIGH
            recommendation: encryption at rest specified for all storage services
            wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
        network_security:
          passed: 3
          total: 3
          gaps: []
        monitoring_audit:
          passed: 2
          total: 3
          gaps:
          - check_id: SEC-MON-003
            area: Monitoring & Audit
            finding: no VCN Flow Logs configured
            severity: MEDIUM
            recommendation: VCN Flow Logs enabled for critical subnets
            wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
    reliability_resilience:
      status: PASS_WITH_RECOMMENDATIONS
      checks_passed: 0
      checks_total: 1
      categories:
        scalability:
          passed: 0
          total: 1
          gaps:
          - check_id: REL-SCL-002
            area: Scalability
            finding: no service limit review planned
            severity: LOW
            recommendation: service limit review mentioned in deployment plan
            wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/reliable-and-resilient-cloud-topology-practices1.html
        fault_tolerant_networking:
          passed: 0
          total: 0
          gaps: []
        data_backup:
          passed: 0
          total: 0
          gaps: []
        data_replication:
          passed: 0
          total: 0
          gaps: []
        disaster_recovery:
          passed: 0
          total: 0
          gaps: []
    performance_cost:
      status: PASS
      checks_passed: 2
      checks_total: 2
      categories:
        compute_sizing:
          passed: 0
          total: 0
          gaps: []
        storage_strategy:
          passed: 0
          total: 0
          gaps: []
        network_tuning:
          passed: 0
          total: 0
          gaps: []
        cost_management:
          passed: 2
          total: 2
          gaps: []
    operational_efficiency:
      status: PASS_WITH_RECOMMENDATIONS
      checks_passed: 4
      checks_total: 5
      categories:
        deployment_strategy:
          passed: 1
          total: 1
          gaps: []
        workload_monitoring:
          passed: 2
          total: 2
          gaps: []
        os_management:
          passed: 0
          total: 0
          gaps: []
        operations_support:
          passed: 1
          total: 2
          gaps:
          - check_id: OPS-SUP-001
            area: Operations Support
            finding: no support plan consideration
            severity: LOW
            recommendation: Oracle support plan level specified and matches criticality
            wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/best-practices-operating-cloud-deployments-efficiency.html
    distributed_cloud:
      status: NOT_APPLICABLE
      checks_passed: 0
      checks_total: 0
      categories: {}
  action_items:
    high_priority:
    - check_id: SEC-IAM-003
      pillar: Identity & Access
      finding: no mention of admin account restrictions
      recommendation: separate admin groups defined for operations
    - check_id: SEC-DAT-001
      pillar: Data Protection
      finding: any storage service without encryption at rest
      recommendation: encryption at rest specified for all storage services
    medium_priority:
    - check_id: SEC-MON-003
      pillar: Monitoring & Audit
      finding: no VCN Flow Logs configured
      recommendation: VCN Flow Logs enabled for critical subnets
    low_priority:
    - check_id: REL-SCL-002
      pillar: Scalability
      finding: no service limit review planned
      recommendation: service limit review mentioned in deployment plan
    - check_id: OPS-SUP-001
      pillar: Operations Support
      finding: no support plan consideration
      recommendation: Oracle support plan level specified and matches criticality
  references:
    framework: https://docs.oracle.com/en/solutions/oci-best-practices/index.html
    security: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
    reliability: https://docs.oracle.com/en/solutions/oci-best-practices/reliable-and-resilient-cloud-topology-practices1.html
    operations: https://docs.oracle.com/en/solutions/oci-best-practices/best-practices-operating-cloud-deployments-efficiency.html
    distributed: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-distributed-cloud-implementation1.html