Elastic Beanstalk environment is not configured for enhanced health reporting
Elastic Beanstalk (EB) allows you to deploy and manage an application without having to deal with the infrastructure that runs...
Blog
Amazon Kinesis data stream does not have shard level monitoring enabled
Amazon Kinesis is a real-time data streaming service. Each Kinesis data stream is divided into one or more shards, which...
Disabled VPC Flow Logs
Flow Logs is a feature that enables users to capture information about the IP traffic going to and from network...
API Gateway has CloudWatch metrics disabled
API Gateway {AwsApiGatewayEndpoint} does not have CloudWatch metrics enabled. CloudWatch metrics provide important metric data that helps to monitor the...
CloudWatch alarms not monitoring authorization failure count
AWS CloudWatch alarms feature allows to watch metrics and receive notifications when metrics fall outside the settings you configured. We...
CloudWatch alarms not monitoring console log-in without MFA
AWS CloudWatch alarms feature allows to watch metrics and receive notifications when metrics fall outside the settings you configured. We...
SecurityCenterBuiltIn Permissions Reduced
ASC default policy assignment is set of security recommendations based on best practices. Enabling recommendations in ASC default policy ensures...
Azure PostgreSQL Flexible Server Not Logging Connections
Azure PostgreSQL flexible server {AzurePostgresFlexibleServer} does not log connections. Logging attempted connections is useful to identify, troubleshoot and repair configuration...
Redshift audit logging is disabled
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...