Brute force attempts were detected by AWS GuardDuty service on the Internet facing EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) with lateral movement...
Instance metadata can be used to access user data that was specified when launching the instance. For example, a parameter...
We have found that the asset contains a private certificate key that is part of a pair (private and public)...
AWS Systems Manager Parameter Store provides a centralized store to manage your configuration data. It was detected that the Systems...
Orca has found that the role {AwsIamRole}, which can be assumed by an AWS identity which is not part of...
Service Account admin Role allows the user/identity to create, delete, and manage service accounts. Service Account User Role allows the...
Granting the 'iam.serviceAccountUser' or 'iam.serviceAserviceAccountTokenCreatorccountUser' roles to a user for a project gives the user access to all service accounts...
Removing orphaned and unused IAM groups eliminates the risk that a forgotten group will be used accidentally to allow unauthorized...
IAM group '{AwsIamGroup}' is using inline policies. Ensure that your IAM groups are using managed policies instead of inline policies...
Personalized Demo
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
No Slack account required.
Chat with an Orca Expert