Posture

Posture is the page you land on after signing in: an at-a-glance summary of Cloud Posture health across every AWS account you have connected — an overall score, the pillars behind it, your biggest risk drivers, coverage gaps, and the accounts feeding it all.

What it’s for

Posture answers “how are we doing, right now, across everything we’ve connected” without requiring you to open individual findings. Everything else in the product — Findings, Targets, Coverage, Compliance — is one click away from something you see here.

What’s on the page

• Overall posture — a score out of 100 with a letter grade, a 7-day trend (shown as an icon and a word, never colour alone), and a disclaimer that always appears, even at a perfect score. If any findings are excluded from scoring (disputed or pending review), that count is called out here too.
• Posture by pillar — one tile per pillar (Security, Reliability, Cost, Operational Excellence) with its own score and trend.
• Findings by severity — a donut and legend across Critical/High/Medium/Low/Informational, clickable through to the filtered findings list.
• Findings by status — Open, Suppressed and Resolved counts, plus a short note encouraging triage.
• Top drivers — your highest-impact open findings, filterable by severity, each linking straight to its detail page.
• Coverage & gaps — counts of coverage gaps, access errors, stale findings and unverified targets, plus a fixed reminder that access gaps are never scored as passing.
• Connected targets — a compact list of your AWS accounts with verification status and freshness.
• Posture trend — a sparkline you can switch between 7/30/90-day windows.
• Scan usage— how many resources you’ve scanned this period against your plan’s quota, and when it resets.
• Estimated savings and compliance readiness tiles, each shown only when there is real data behind them, each carrying its own not-a-guarantee disclaimer.

What you can do

Run scan

Owner, Admin or Engineer, and only once at least one target exists. With one verified target it starts immediately; with two or more you pick which to scan. Unverified targets can’t be selected.

Export report

Opens the same report generator described in Reports.

Reset scan quota

Owner or Admin only, behind a confirmation dialog that states plainly that it does not undo any scan that already ran.

Everything else on the page is navigation — into Coverage, Findings, Targets, or a specific finding or target.

How to read it

• Coverage gaps and access errors are deliberately kept out of your score — a resource CloudCerta couldn’t read is never counted as compliant, and it’s never counted as a pass either. It just shows up here as something worth a look.
• Compliance readiness tiles only appear once a framework is configured for your tenant, and the percentage shows as — rather than a fabricated 100% when nothing is assessable yet.
• The savings tile only appears when there is a real, calculated figure behind it — never a placeholder range.
• Trend indicators always pair an icon with a word (for example “▲ improving”), so the direction is never conveyed by colour alone.

Before your first scan

• No AWS accounts connected yet: the page shows a single card prompting you to add one, with a link into Targets. Run scan and Export don’t appear yet.
• Accounts connected, but nothing scanned yet: the severity donut and status counts render at zero, and Top drivers says there are no active findings affecting your score.