AWS EC2 instance allows public ingress access on SSH port 22
SSH (Secure Shell) port - 22 is used to get CLI access to Linux instances. Allowing inbound traffic from all...
Blog
Amazon MQ broker ‘Auto minor version upgrade’ feature disabled
Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that allows setting up and operating message...
AWS EC2 instance allows public ingress access on RDP port 3389
RDP (Remote Desktop Protocol) port - 3389 is used to get remote control access to Windows instances. Allowing inbound traffic...
Classic Load Balancer’s Listener with SSL policy and certificate not from AWS Certificate Manager
Classic Load Balancer (ELB) provides basic load balancing across multiple Amazon EC2 instances and operates at both the request level...
ELB with expired IAM certificate
IAM Certificate ({Listeners.Certificate.Arn}, issuer name:{Listeners.Certificate.IssuerName}) attached to Elb listener ({Listeners}) issued at '{Listeners.Certificate.IssueDate}' has expired at '{Listeners.Certificate.ExpirationDate}' and should be...
Expired ACM certificate
ACM Certificate ('{AwsCertificate}') expired on {AwsCertificate.ExpirationDate} and should be renewed or deleted. Removing expired ssl certificates eliminates the risk that...
Unpatched OS
We discovered {compute.MatchedCVEs} os package vulnerabilities with a fix available (out of {compute.TotalVulnerabilitiesFound} total vulnerabilities). This typically results from an...
Cloud function runtime outdated
GCP cloud function {GcpCloudFunction} was detected running with an outdated runtime ('{FunctionRuntime}')