All articles by The Orca Security Team

Amazon Elastic Container - ECS is a highly scalable, fast container management service that makes running, stopping, and managing containers...

Brute force attempts were detected by AWS GuardDuty service on the Internet facing EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) with lateral movement...

Instance metadata can be used to access user data that was specified when launching the instance. For example, a parameter...

We have found that the asset contains a private certificate key that is part of a pair (private and public)...

AWS Systems Manager Parameter Store provides a centralized store to manage your configuration data. It was detected that the Systems...

Orca has found that the role {AwsIamRole}, which can be assumed by an AWS identity which is not part of...

Service Account admin Role allows the user/identity to create, delete, and manage service accounts. Service Account User Role allows the...

Granting the 'iam.serviceAccountUser' or 'iam.serviceAserviceAccountTokenCreatorccountUser' roles to a user for a project gives the user access to all service accounts...

Removing orphaned and unused IAM groups eliminates the risk that a forgotten group will be used accidentally to allow unauthorized...