S3 Bucket Object-Level Logging for Write Events is Disabled
S3 object-level API operations such as GetObject, DeleteObject, and PutObject are called data events. By default, CloudTrail trails don't log...
All articles by The Orca Security Team
Cloudtrail Not Delivering Logs to CloudWatch
AWS CloudTrail is a web service that records AWS API calls made in a given AWS account. CloudTrail uses Amazon...
Ensure CloudTrail log file validation is enabled
CloudTrail log file validation creates a digitally signed digest file containing a hash of each log that CloudTrail writes to...
An RDS event subscription for critical security group events does not exist
RDS event subscription resource allows you to receive notifications for RDS events through an Amazon Simple Notification Service (SNS). RDS...
An RDS event subscription for critical cluster events does not exist
RDS event subscription resource allows you to receive notifications for RDS events through an Amazon Simple Notification Service (SNS). RDS...
ACK cluster with log service disabled
Alibaba Cloud Container Service for Kubernetes (ACK) is a managed service compatible with Kubernetes to help users manage their containerized...
Logs Container Publicly Accessible
Ensure the storage container storing the activity logs is not publicly accessible
Storage Bucket Logging is Disabled
GCP Storage Buckets are containers that store data. Storage Bucket {GcpStorageBucket} does not have bucket logging enabled. Storage buckets offer...
Lambda function with disabled tracing
The function {AwsLambdaFunction} is not configured to enable tracing
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with an Orca ExpertNo Slack account required.