EMR Cluster At Rest S3 Encryption Disabled
EMR, Elastic MapReduce, is a managed cluster platform that simplifies running big data frameworks. EMR cluster is a collection of...
All articles by The Orca Security Team
SQS queue with public access
Amazon Simple Queue Service (Amazon SQS) offers a secure, durable, and available hosted queue that lets you integrate and decouple...
SNS topics are not encrypted at rest using AWS KMS
Simple Notification Service (SNS) is a managed service that provides message delivery from publishers to subscribers (also known as producers...
EBS unencrypted attached volume
The EBS volume {AwsEc2EbsVolume} which is currently attached to an instance is not encrypted. It is important to encrypt volumes...
Internet Facing EC2 Instance with Broad S3 Access
The internet-facing asset {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) was found to have broad access to S3 via its Instance Profile ({AwsEc2Instance.InstanceProfile}). Access is...
Subdomain supports deprecated TLS encryption
A server under this domain supports a deprecated TLS version. TLS 1.0 and 1.1 have been deprecated by the Internet...
QLDB Ledger encryption not using customer managed key
QLDB is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log owned by a...
Public access to a known tool in debug mode
The public web page contains a tool running in debug mode and might expose sensitive information. By allowing public access...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with an Orca ExpertNo Slack account required.