All articles by The Orca Security Team

The root user account is the most privileged user in an AWS account. MFA adds an extra layer of protection...

An auth token is an Oracle-generated token string that you can use to authenticate with third-party APIs that do not...

Identify and deactivate any unnecessary IAM SSH public keys used to authenticate to AWS CodeCommit repositories. Amazon allows you to...

Access keys consist of an access key ID and secret access key, which are used to sign programmatic requests that...

Ensure SSL/TLS Certificates are Using 2048/4096 Bit Encryption Keys

It was found that {AwsKmsKey} could not be rotated. Ensure KMS key rotation feature is enabled for all your Customer...

AWS Secrets Manager helps you to store and protect secrets needed to access your applications, services, and IT resources. We...

API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. Project '{CloudAccount}'...

API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. API key...