SSL/TLS Certificate is Vulnerable to Heartbleed
Ensure that none of the server certificates managed by AWS IAM were compromised by the Heartbleed bug, meaning that none...
Blog
DynamoDB table auto scaling is disabled
Amazon DynamoDB auto scaling uses the AWS Application Auto Scaling service to dynamically alter provisioned throughput capacity, instead of the...
Amazon EC2 instances launched using Auto Scaling group launch configurations should not have public IP addresses
Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. Amazon EC2 instances...
Auto Scaling group should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)
Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. IMDS provides data...
DynamoDB Accelerator(DAX) clusters should be encrypted at rest
Amazon DynamoDB Accelerator(DAX) is a fully managed, highly available, in-memory cache for Amazon DynamoDB. When using DAX clusters, encrypting data...
AWS EC2 Transit Gateways automatically accept VPC attachment requests
A transit gateway enables you to attach VPCs and VPN connections in the same Region and route traffic between them....
Launch-wizard security groups is being used
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Aws Guard Duty Should Be Enabled
AWS GuardDuty is a managed threat detection service that continuously monitors your VPC flow logs, AWS CloudTrail event logs and...
Azure Firewall intrusion detection and prevention system is disabled
A network intrusion detection and prevention system (IDPS) allows you to monitor network activities for malicious activity, log information about...