Auto Scaling group should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)
Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. IMDS provides data...
Blog
DynamoDB Accelerator(DAX) clusters should be encrypted at rest
Amazon DynamoDB Accelerator(DAX) is a fully managed, highly available, in-memory cache for Amazon DynamoDB. When using DAX clusters, encrypting data...
AWS EC2 Transit Gateways automatically accept VPC attachment requests
A transit gateway enables you to attach VPCs and VPN connections in the same Region and route traffic between them....
Launch-wizard security groups is being used
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Aws Guard Duty Should Be Enabled
AWS GuardDuty is a managed threat detection service that continuously monitors your VPC flow logs, AWS CloudTrail event logs and...
Azure Firewall intrusion detection and prevention system is disabled
A network intrusion detection and prevention system (IDPS) allows you to monitor network activities for malicious activity, log information about...
S3 Bucket not Configured with Public Access Block
Amazon S3 provides Block public access (bucket settings) to help you manage public access to Amazon S3 resources. By default,...
No healthy backend instances in ELB
No healthy backend instances are detected for an Elastic Load Balancer. This points to either a faulty load balancer that...
Ec2 Systems Manager(SSM) non compliant – association
Systems Manager is an AWS service that you can use to view and control your AWS infrastructure as well as...