RDS PostgreSQL doesn’t have duration log
Alibaba Cloud ApsaraDB for RDS is an online database service for easy operation, manage and scale relational databases. Enabling 'log_duration'...
All articles by Orca Security
Elasticsearch error logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
Elasticsearch audit logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
Security Center High Severity Alerts Not Notified
Enabling security alert emails to subscription owners ensures that they receive security alert emails from Microsoft. This ensures that they...
Security Center Email Notification Not Configured
Azure Security Center emails the Subscription Owner to notify them about security alerts. Adding your Security Contact's email address to...
Service principal application with IAM privilege escalation permissions
Application is not part of your tenant but has IAM role assignment.
EC2 Elastic IP address not associated
An Elastic IP address is a public IP that is reachable from the internet. You can associate an Elastic IP...
Old version of Kubernetes installed on EKS cluster
An EKS cluster is running an old version of Kubernetes, which may be missing new features, bug fixes, security patches,...
Network security group flow log retention period is less than 90 days or disabled
Logs can be used to check for anomalies and give insight into suspected breaches. Flow logs on network watcher {AzureNetworkFlowLog}...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.