Remove status field - all recommendations are considered complete

- Remove status field from all 313 recommendations across 41 service files
- Update schema to remove status property
- Update db-init.py and db-query.py to remove status columns/views
- Update generate.py to remove status from SUMMARY.md
- Add remove-status.py utility script
- Update README to reflect simplified data model

All recommendations in the database are considered production-ready.
No more open/ice/pending/done tracking needed.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: xxyjoel

README.md

@@ -60,7 +60,7 @@ The database is designed with a standardized JSON format, making it ideal for:
 
 - **Total Recommendations**: 313
 - **AWS Services Covered**: 41
-- **Risk Categories**: Security, Cost, Performance, Operations, Reliability
+- **Risk Types**: Operations (189), Cost (80), Performance (21), Security (19), Reliability (4)
 - **Architectural Patterns**: Circuit Breaker, Retry with Exponential Backoff, Cache-Aside, Bulkhead, Queue-Based Load Leveling
 
 See [docs/SUMMARY.md](docs/SUMMARY.md) for detailed statistics.
@@ -179,7 +179,6 @@ Each misconfiguration entry follows this structure:
 ```json
 {
   "id": "a1b2c3d4-e5f6-4789-a012-3456789abcde",
-  "status": "done|ice|open|pending",
   "service_name": "lambda",
   "scenario": "Lambda functions making synchronous calls without circuit breaker implementation",
   "alert_criteria": "Lambda error rate >5% or downstream service timeouts >1000ms",

data/by-service/acm.json

@@ -4,7 +4,6 @@
   "misconfigurations": [
     {
       "id": "9be76839-271a-4733-b947-c4c3705da1f5",
-      "status": "open",
       "service_name": "acm",
       "scenario": "user wants SSL/TLS certificate expiration alert 1 month in advance",
       "alert_criteria": "",
@@ -32,7 +31,6 @@
     },
     {
       "id": "d8163f98-8bb2-4159-bde7-e7668e8ee21d",
-      "status": "open",
       "service_name": "acm",
       "scenario": "user wants SSL/TLS certificate expiration alert 1 week in advance",
       "alert_criteria": "",

data/by-service/alb-elb.json

@@ -4,7 +4,6 @@
   "misconfigurations": [
     {
       "id": "475b24d9-4b5b-4ce4-8161-af25f89bee49",
-      "status": "done",
       "service_name": "alb/elb",
       "scenario": "Idle Load Balancers",
       "alert_criteria": "A load balancer has had less than 100 requests per day for the last 7 days.",
@@ -33,7 +32,6 @@
     },
     {
       "id": "75ba739e-a10d-4233-9d93-233587bf1de5",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "Idle Load Balancers",
       "alert_criteria": "A load balancer has no healthy back-end instances.",
@@ -62,7 +60,6 @@
     },
     {
       "id": "f8873ffb-d1ce-44d2-adf9-50148350fc92",
-      "status": "done",
       "service_name": "alb/elb",
       "scenario": "Idle Load Balancers",
       "alert_criteria": "A load balancer has no active back-end instances.",
@@ -92,7 +89,6 @@
     },
     {
       "id": "eba421cf-bea5-4fa2-982a-c992016bd34f",
-      "status": "pending",
       "service_name": "alb/elb",
       "scenario": "user wants to ensure the availability / performance of their auto scaling group(s)",
       "alert_criteria": "instance that is attached to the autoscaling group has been stopped or hibernated",
@@ -119,7 +115,6 @@
     },
     {
       "id": "b0ee1465-5cd5-4b8e-9ceb-c22ffcbdba88",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "application / load balancers are not detecting failed connections fast enough",
       "alert_criteria": "",
@@ -147,7 +142,6 @@
     },
     {
       "id": "297a0e89-3930-4c98-aaae-108dd7dc6c90",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "Your application load balancer is hosting X target groups with various hostnames; you would like to expose https traffic for each of these host names.",
       "alert_criteria": "",
@@ -175,7 +169,6 @@
     },
     {
       "id": "01e58c92-8f90-4ef0-a438-e35bf01ecfd8",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "users are being routed to instances that are not running (or have performance issues)",
       "alert_criteria": "",
@@ -203,7 +196,6 @@
     },
     {
       "id": "be4fc192-947d-4012-aeb5-54bec0d07873",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "You are creating an application that is going to expose an HTTP REST API. There is a need to provide request routing rules at the HTTP level. Due to security requirements, your application can only be exposed through the use of two static IPs.",
       "alert_criteria": "",
@@ -231,7 +223,6 @@
     },
     {
       "id": "71534f32-7b63-4d9b-8c41-9328ea305e23",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to remove weak ciphers for ELB",
       "alert_criteria": "",
@@ -259,7 +250,6 @@
     },
     {
       "id": "00b372b2-8825-4bdf-834f-b10742dc715b",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to ensure that elb has a recommended ssl/tls protocol version",
       "alert_criteria": "",
@@ -287,7 +277,6 @@
     },
     {
       "id": "8ac617e8-5a7a-4da8-8084-7ef5e5cbc74c",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to ensure ELB are created with access logs enabled",
       "alert_criteria": "",
@@ -315,7 +304,6 @@
     },
     {
       "id": "b5337466-a827-460e-873e-613c28a101e4",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to ensure ELB is setup with SSL for secure communication",
       "alert_criteria": "",
@@ -343,7 +331,6 @@
     },
     {
       "id": "a3e36ea7-b611-4706-bc1f-40f09a17dc70",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to be notified when ELB securied listener certificate expires in 1 month",
       "alert_criteria": "",
@@ -371,7 +358,6 @@
     },
     {
       "id": "b70a15dd-4b86-4345-ab46-a3e02c6abfea",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to be notified when ELB securied listener certificate expires in 1 week",
       "alert_criteria": "",
@@ -399,7 +385,6 @@
     },
     {
       "id": "38ef673f-016f-4b10-ba8c-e0ab9d15494a",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to be notified when ALB securied listener certificate expires in 1 month",
       "alert_criteria": "",
@@ -427,7 +412,6 @@
     },
     {
       "id": "255365fe-3007-414f-85b6-713846173847",
-      "status": "open",
       "service_name": "alb/elb",
       "scenario": "user wants to be notified when ALB securied listener certificate expires in 1 week",
       "alert_criteria": "",

data/by-service/all.json

@@ -4,7 +4,6 @@
   "misconfigurations": [
     {
       "id": "6ba41fc1-7084-4ae2-a0ee-aa50d85f1cea",
-      "status": "ice",
       "service_name": "ALL",
       "scenario": "user wants to associate user groups & roles to projects, teams, and other business units",
       "alert_criteria": "check if resoruce has ANY tags, if no tags send recommendation",
@@ -31,7 +30,6 @@
     },
     {
       "id": "6abe56fe-881d-404c-81e3-a87ed491685b",
-      "status": "ice",
       "service_name": "ALL",
       "scenario": "user wants to associate costs to cost centers, projects, teams, and other business units",
       "alert_criteria": "check if resoruce has ANY tags, if no tags send recommendation",
@@ -58,7 +56,6 @@
     },
     {
       "id": "277608d6-b89d-459a-ab2d-e2c05ac47af3",
-      "status": "open",
       "service_name": "ALL",
       "scenario": "user needs to have an index of resources across regions they can search for",
       "alert_criteria": "resource explorer is not enabled",
@@ -85,7 +82,6 @@
     },
     {
       "id": "3360f1f0-c035-4fc1-93d0-1b6afe58d609",
-      "status": "open",
       "service_name": "ALL",
       "scenario": "user requires immutable resource tags",
       "alert_criteria": "immutable aws tags have not been enabled",

data/by-service/api-gateway.json

@@ -4,7 +4,6 @@
   "misconfigurations": [
     {
       "id": "c54ea650-2481-4d0d-a61c-9f08443c7cd1",
-      "status": "open",
       "service_name": "api-gateway",
       "scenario": "user wants to use api gateway with edge locations AND cares about performance",
       "alert_criteria": "",

data/by-service/aws-config.json

@@ -4,7 +4,6 @@
   "misconfigurations": [
     {
       "id": "e6001001-cf01-4001-a001-001000000001",
-      "status": "done",
       "service_name": "aws-config",
       "scenario": "Continuous AWS Config Recording in Non-Production Environments",
       "alert_criteria": "AWS Config continuously recording all resource types in development, test, or staging environments",
@@ -39,7 +38,6 @@
     },
     {
       "id": "e6001002-cf02-4002-a002-002000000002",
-      "status": "done",
       "service_name": "aws-config",
       "scenario": "Excessive AWS Config Costs from Spot Instances",
       "alert_criteria": "AWS Config recording configuration changes for frequently provisioned/terminated Spot instances or Auto Scaling groups with high churn",
@@ -75,7 +73,6 @@
     },
     {
       "id": "e6001003-cf03-4003-a003-003000000003",
-      "status": "done",
       "service_name": "aws-config",
       "scenario": "Unfiltered Recording of High-Churn Resource Types in AWS Config",
       "alert_criteria": "AWS Config recording all resource types including those with frequent state changes (CloudWatch alarms, Lambda invocations, ECS tasks)",
@@ -111,7 +108,6 @@
     },
     {
       "id": "e6001004-cf04-4004-a004-004000000004",
-      "status": "done",
       "service_name": "aws-config",
       "scenario": "Unnecessarily High Recording Granularity in AWS Config",
       "alert_criteria": "AWS Config using continuous recording when periodic recording would suffice for compliance requirements",
@@ -147,7 +143,6 @@
     },
     {
       "id": "6e839f06-4474-45c8-82a9-84003aade522",
-      "status": "open",
       "service_name": "aws-config",
       "scenario": "user wants to ensure AWS config is enabled in all regions",
       "alert_criteria": "",

data/by-service/bedrock.json

@@ -4,7 +4,6 @@
   "misconfigurations": [
     {
       "id": "a1382001-fbbe-4001-b001-001000000001",
-      "status": "done",
       "service_name": "bedrock",
       "scenario": "Suboptimal Bedrock Custom Model Configuration",
       "alert_criteria": "Custom models using older architectures, oversized GPU/accelerators, full-precision weights, or unoptimized model artifacts",
@@ -46,7 +45,6 @@
     },
     {
       "id": "a1382002-08c0-4002-b002-002000000002",
-      "status": "done",
       "service_name": "bedrock",
       "scenario": "Suboptimal Bedrock Inference Profile Model Selection",
       "alert_criteria": "Inference profiles using models with higher compute requirements than necessary for the use case, or using on-demand when provisioned throughput would be more cost-effective",
@@ -82,7 +80,6 @@
     },
     {
       "id": "a1382003-6144-4003-b003-003000000003",
-      "status": "done",
       "service_name": "bedrock",
       "scenario": "Suboptimal Bedrock Model Type for Use Case",
       "alert_criteria": "Using large foundation models for tasks that smaller, specialized models could handle, or using general-purpose models when fine-tuned models would be more efficient",
@@ -118,7 +115,6 @@
     },
     {
       "id": "a1382004-5e31-4004-b004-004000000004",
-      "status": "done",
       "service_name": "bedrock",
       "scenario": "Missing Caching Layer for Repetitive Bedrock Inference Workloads",
       "alert_criteria": "High volume of identical or similar inference requests, applications repeatedly invoking models with deterministic prompts, or no semantic caching layer implemented",
@@ -162,7 +158,6 @@
     },
     {
       "id": "a1382005-734c-4005-b005-005000000005",
-      "status": "done",
       "service_name": "bedrock",
       "scenario": "Using High-Cost Bedrock Models for Low-Complexity Tasks",
       "alert_criteria": "Using Claude 3 Opus/Sonnet or similar high-tier models for simple classification, extraction, or templated generation tasks that could use Haiku or smaller models",
@@ -197,4 +192,4 @@
       ]
     }
   ]
-}
+}

data/by-service/cloudfront.json

@@ -4,7 +4,6 @@
   "misconfigurations": [
     {
       "id": "937fff55-6361-4546-a3be-9b4769c904e4",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "CloudFront Header Forwarding and Cache Hit Ratio",
       "alert_criteria": "One or more request headers that CloudFront forwards to your origin might significantly reduce your cache hit ratio.",
@@ -33,7 +32,6 @@
     },
     {
       "id": "915cc2d1-9ea7-4fab-83ad-92b623cb163b",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "CloudFront Alternate Domain Names",
       "alert_criteria": "Yellow: A CloudFront distribution includes alternate domain names, but the DNS configuration is not correctly set up with a CNAME record or an Amazon Route 53 alias resource record.",
@@ -63,7 +61,6 @@
     },
     {
       "id": "4769bb75-f7b8-4604-8ad1-2fbdabd7420d",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "CloudFront Content Delivery Optimization",
       "alert_criteria": "The amount of data transferred out of the bucket to your users by GET requests in the 30 days preceding the check is at least 25 times greater than the average amount of data stored in the bucket.",
@@ -93,7 +90,6 @@
     },
     {
       "id": "cc4250bc-4065-4a12-8fa8-74f386b45702",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "CloudFront Content Delivery Optimization",
       "alert_criteria": "The amount of data transferred out of the bucket to your users by GET requests in the 30 days preceding the check is at least 10 TB and at least 25 times greater than the average amount of data stored in the bucket.",
@@ -123,7 +119,6 @@
     },
     {
       "id": "327f7304-6e47-4eff-93b2-e070afcfc180",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "streaming service needs to reduce latency for its users",
       "alert_criteria": "",
@@ -150,7 +145,6 @@
     },
     {
       "id": "ef6b202e-cb88-4f1b-aadb-a2f17804a8e5",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "CloudFront Alternate Domain Names",
       "alert_criteria": "Yellow: A CloudFront distribution includes alternate domain names, but Trusted Advisor could not evaluate the DNS configuration because there were too many redirects.",
@@ -180,7 +174,6 @@
     },
     {
       "id": "0d84ee37-e841-4b16-ae87-5b0ec720c927",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "CloudFront Alternate Domain Names",
       "alert_criteria": "Yellow: A CloudFront distribution includes alternate domain names, but Trusted Advisor could not evaluate the DNS configuration for some other reason, most likely because of a timeout.",
@@ -210,7 +203,6 @@
     },
     {
       "id": "15ac6ce0-cfab-4e25-87dd-ff769faec385",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "user wants their application optimized based on the command types (e,g, GET vs POST)",
       "alert_criteria": "",
@@ -237,7 +229,6 @@
     },
     {
       "id": "a9f10db4-5c47-4865-8b9f-648f09a81605",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "cloudfront distributions are too expensive",
       "alert_criteria": "",
@@ -265,7 +256,6 @@
     },
     {
       "id": "f9b6e58a-21cb-47b1-92af-1841391713ff",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "user wants to restrict users from accessing their content from a particular country",
       "alert_criteria": "",
@@ -293,7 +283,6 @@
     },
     {
       "id": "19e6e1a5-3569-460a-8be6-582246d05090",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "You would like to provide your users access to hundreds of private files in your CloudFront distribution, which is fronting an HTTP web server behind an application load balancer",
       "alert_criteria": "",
@@ -321,7 +310,6 @@
     },
     {
       "id": "12f2d76b-5c61-403a-bcbe-71c1a4d3ec61",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "user wants to ensure his CDN is secure",
       "alert_criteria": "When TLS is <= x",
@@ -351,7 +339,6 @@
     },
     {
       "id": "fa2ba14d-f984-4efb-a5ae-6a7da7f4257a",
-      "status": "open",
       "service_name": "cloudfront",
       "scenario": "user wants an encrypted connection between cloudfront and origin server",
       "alert_criteria": "",