RDS SQL auditing is disabled
Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. SQL Explorer...
All articles by The Orca Security Team
GKE not using Stackdriver Kubernetes Logging and Monitoring
Exporting logs and metrics to a dedicated, persistent datastore such as Stackdriver ensures availability of audit data following a cluster...
Azure PostgreSQL Server ‘log retention days’ is configured to less than 3 days
Server {AzurePostgresDbServer} does not save logs for more than 3 days. Log Retention for over 3 days is useful to...
VPC with disabled flow logs
The VPC {AwsVpc} does not have Flow Logs enabled. Flow Logs can help monitoring abnormal activity as traffic and overly...
VPC without flow log
Alibaba VPC is a virtual private cloud service that provides an isolated cloud network to operate resources in a secure...
ActionTrail does not export all logs
ActionTrail is a web service that monitors and records actions performed on your cloud through cloud console, API calls, and...
WAF domain without log service enabled
Web Application Firewall (WAF) provides end-to-end security protection for your websites or apps. WAF effectively identifies and filters out malicious...
CloudTrail doesn’t have at least one multi-Region trail without management events exclusions
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. Visibility into...
CloudTrail bucket is publicly accessible
AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail,...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with an Orca ExpertNo Slack account required.