OpenSearch (Elasticsearch) error logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
Blog
OpenSearch (Elasticsearch) audit logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
Lambda function environment variables expose secrets
AWS lambda is AWS's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Service Account Privilege Escalation – Impersonation (Project Scope)
The Service account '{GcpIamServiceAccount}' has an IAM policy containing permissions that allow privilege escalation, at the project level. The existing...
Cloud Function environment variables expose secrets
GCP Cloud Function is a serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution...
User Privilege Escalation – Authentication Key Management (Project Scope)
The User '{GcpUser}' has an IAM policy containing permissions that allow privilege escalation, at the project level. One or more...
Service Account Privilege Escalation – Service Update (Resource Scope)
The Service account '{GcpIamServiceAccount}' has an IAM policy containing permissions that allow privilege escalation, at the resource level ({GcpIamServiceAccount.PolicyBindings.Policy.Scope}). One...
Group Policy Preferences with cpassword
We have found Group Policy Preferences file '{CpasswordFile}' with cpassword for {CpasswordFile.Cpasswords}. A cpassword is used for setting passwords from...
Controller creating pods with hostNetwork enabled
hostNetwork when set to true allows the pod to use the network namespace and network resources of the node. In...