forked from diegoecab/oci-deal-accelerator
b48d155c1b
6 CLI improvements from MCP integration testing + deck bug fixes: - kb_cli.py: --json on search, new arch-search and ecal-score subcommands, _load_yaml handles multi-document YAML (fixes health command on 32 files) - findings_cli.py: --json on search/list/stats, filter flags on search (--product, --severity, --tag, --client, --status, --category) - validate-architecture.py: --profile optional, --output defaults to stdout - common-objections.yaml + ecal-artefacts-catalog.yaml: merge front matter - oci_deck_gen.py: fix slide 9 cost_notes char iteration, fix slide 12 migration field mapping (duration/milestones), dynamic phase spacing - proposal-spec.yaml: replace real name with fictional Carlos Mendoza All 14 skill options validated with generated deliverables. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
175 lines
5.8 KiB
YAML
175 lines
5.8 KiB
YAML
well_architected_scorecard:
|
|
overall_status: GAPS_IDENTIFIED
|
|
generated_date: '2026-04-12T21:26:00.300204'
|
|
architecture_name: examples/meli-kvs-wa-architecture.yaml
|
|
customer: Unknown
|
|
summary:
|
|
total_checks: 23
|
|
total_passed: 18
|
|
total_gaps: 5
|
|
high_severity_gaps: 2
|
|
medium_severity_gaps: 1
|
|
low_severity_gaps: 2
|
|
pillars:
|
|
security_compliance:
|
|
status: GAPS_IDENTIFIED
|
|
checks_passed: 12
|
|
checks_total: 15
|
|
categories:
|
|
identity_access:
|
|
passed: 3
|
|
total: 4
|
|
gaps:
|
|
- check_id: SEC-IAM-003
|
|
area: Identity & Access
|
|
finding: no mention of admin account restrictions
|
|
severity: HIGH
|
|
recommendation: separate admin groups defined for operations
|
|
wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
|
|
resource_isolation:
|
|
passed: 3
|
|
total: 3
|
|
gaps: []
|
|
database_security:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
data_protection:
|
|
passed: 1
|
|
total: 2
|
|
gaps:
|
|
- check_id: SEC-DAT-001
|
|
area: Data Protection
|
|
finding: any storage service without encryption at rest
|
|
severity: HIGH
|
|
recommendation: encryption at rest specified for all storage services
|
|
wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
|
|
network_security:
|
|
passed: 3
|
|
total: 3
|
|
gaps: []
|
|
monitoring_audit:
|
|
passed: 2
|
|
total: 3
|
|
gaps:
|
|
- check_id: SEC-MON-003
|
|
area: Monitoring & Audit
|
|
finding: no VCN Flow Logs configured
|
|
severity: MEDIUM
|
|
recommendation: VCN Flow Logs enabled for critical subnets
|
|
wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
|
|
reliability_resilience:
|
|
status: PASS_WITH_RECOMMENDATIONS
|
|
checks_passed: 0
|
|
checks_total: 1
|
|
categories:
|
|
scalability:
|
|
passed: 0
|
|
total: 1
|
|
gaps:
|
|
- check_id: REL-SCL-002
|
|
area: Scalability
|
|
finding: no service limit review planned
|
|
severity: LOW
|
|
recommendation: service limit review mentioned in deployment plan
|
|
wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/reliable-and-resilient-cloud-topology-practices1.html
|
|
fault_tolerant_networking:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
data_backup:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
data_replication:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
disaster_recovery:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
performance_cost:
|
|
status: PASS
|
|
checks_passed: 2
|
|
checks_total: 2
|
|
categories:
|
|
compute_sizing:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
storage_strategy:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
network_tuning:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
cost_management:
|
|
passed: 2
|
|
total: 2
|
|
gaps: []
|
|
operational_efficiency:
|
|
status: PASS_WITH_RECOMMENDATIONS
|
|
checks_passed: 4
|
|
checks_total: 5
|
|
categories:
|
|
deployment_strategy:
|
|
passed: 1
|
|
total: 1
|
|
gaps: []
|
|
workload_monitoring:
|
|
passed: 2
|
|
total: 2
|
|
gaps: []
|
|
os_management:
|
|
passed: 0
|
|
total: 0
|
|
gaps: []
|
|
operations_support:
|
|
passed: 1
|
|
total: 2
|
|
gaps:
|
|
- check_id: OPS-SUP-001
|
|
area: Operations Support
|
|
finding: no support plan consideration
|
|
severity: LOW
|
|
recommendation: Oracle support plan level specified and matches criticality
|
|
wa_reference: https://docs.oracle.com/en/solutions/oci-best-practices/best-practices-operating-cloud-deployments-efficiency.html
|
|
distributed_cloud:
|
|
status: NOT_APPLICABLE
|
|
checks_passed: 0
|
|
checks_total: 0
|
|
categories: {}
|
|
action_items:
|
|
high_priority:
|
|
- check_id: SEC-IAM-003
|
|
pillar: Identity & Access
|
|
finding: no mention of admin account restrictions
|
|
recommendation: separate admin groups defined for operations
|
|
- check_id: SEC-DAT-001
|
|
pillar: Data Protection
|
|
finding: any storage service without encryption at rest
|
|
recommendation: encryption at rest specified for all storage services
|
|
medium_priority:
|
|
- check_id: SEC-MON-003
|
|
pillar: Monitoring & Audit
|
|
finding: no VCN Flow Logs configured
|
|
recommendation: VCN Flow Logs enabled for critical subnets
|
|
low_priority:
|
|
- check_id: REL-SCL-002
|
|
pillar: Scalability
|
|
finding: no service limit review planned
|
|
recommendation: service limit review mentioned in deployment plan
|
|
- check_id: OPS-SUP-001
|
|
pillar: Operations Support
|
|
finding: no support plan consideration
|
|
recommendation: Oracle support plan level specified and matches criticality
|
|
references:
|
|
framework: https://docs.oracle.com/en/solutions/oci-best-practices/index.html
|
|
security: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-security-and-compliance1.html
|
|
reliability: https://docs.oracle.com/en/solutions/oci-best-practices/reliable-and-resilient-cloud-topology-practices1.html
|
|
operations: https://docs.oracle.com/en/solutions/oci-best-practices/best-practices-operating-cloud-deployments-efficiency.html
|
|
distributed: https://docs.oracle.com/en/solutions/oci-best-practices/effective-strategies-distributed-cloud-implementation1.html
|