Users with Inline or Directly Attached Policies Found
IAM users are granted access to services, functions, and data through IAM policies. There are three ways to define policies...
Blog
Mysql instance with ‘skip_show_database’ flag disabled
'skip_show_database' database flag prevents people from using the SHOW DATABASES statement if they do not have the SHOW DATABASES privilege....
AWS Support Access Policy Not In Use
AWS provides a support center that can be used for incident notification and response, as well as technical support and...
GKE has auto node upgrade disabled
Node auto-upgrades help you keep the nodes in your cluster up-to-date with the cluster control plane (master) version when your...
GKE cluster has an unsupported master node version
Google Kubernetes Engine (GKE) let you Deploy, manage, and scale containerized applications on Kubernetes. Orca has detected that {GcpGkeCluster} is...
Pub/Sub subscription without dead letter topic
It was detected that the subscription {GcpPubSubSubscription} is not using a dead letter topic. When a message can't be acknowledged,...
Route 53 Domain has Privacy Protection disabled
Route 53 domain {AwsRoute53Domain} does not have privacy protection enabled. Without privacy protection all contact information for the domain will...
KMS default keys in use
It was found that {AwsKmsKey} is an AWS-managed key, which is the default. Check AWS services to ensure the default...
DynamoDB table is not encrypted using customer-managed KMS key
DynamoDB table {AwsDynamodbTable} is encrypted using AWS-managed KMS key, instead of customer-managed KMS key