User With Multiple SSH Keys
Identify and deactivate any unnecessary IAM SSH public keys used to authenticate to AWS CodeCommit repositories. Amazon allows you to...
All articles by The Orca Security Team
Access Keys Rotation (90 days)
Access keys consist of an access key ID and secret access key, which are used to sign programmatic requests that...
SSL Certificate Using 1024 Bit Encryption Key
Ensure SSL/TLS Certificates are Using 2048/4096 Bit Encryption Keys
KMS master key rotation disabled
It was found that {AwsKmsKey} could not be rotated. Ensure KMS key rotation feature is enabled for all your Customer...
AWS Secrets Manager secret was not rotated in the last 90 days
AWS Secrets Manager helps you to store and protect secrets needed to access your applications, services, and IT resources. We...
Project with API keys
API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. Project '{CloudAccount}'...
API key was not rotated in 90 days
API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. API key...
API key is not restricted to APIs
API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. API key...
AWS GuardDuty detects suspicious traffic from an instance with malware
Suspicious traffic was found by AWS GuardDuty service on EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) detected with malware by Orca. AWS GuardDuty...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with an Orca ExpertNo Slack account required.