Access Keys Rotation (90 days)
Access keys consist of an access key ID and secret access key, which are used to sign programmatic requests that...
All articles by The Orca Security Team
SSL Certificate Using 1024 Bit Encryption Key
Ensure SSL/TLS Certificates are Using 2048/4096 Bit Encryption Keys
KMS master key rotation disabled
It was found that {AwsKmsKey} could not be rotated. Ensure KMS key rotation feature is enabled for all your Customer...
AWS Secrets Manager secret was not rotated in the last 90 days
AWS Secrets Manager helps you to store and protect secrets needed to access your applications, services, and IT resources. We...
Project with API keys
API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. Project '{CloudAccount}'...
API key was not rotated in 90 days
API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. API key...
API key is not restricted to APIs
API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. API key...
AWS GuardDuty detects suspicious traffic from an instance with malware
Suspicious traffic was found by AWS GuardDuty service on EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) detected with malware by Orca. AWS GuardDuty...
AWS GuardDuty detects RDP brute force attempts on an exposed unpatched Windows instance
Brute force attempts were detected by AWS GuardDuty service on the Internet facing Unpatched Windows EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}). AWS...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with Us
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.
Chat with an Orca ExpertNo Slack account required.