Redshift audit logging is disabled
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...
Blog
Unmonitored KMS events
Ensure that KMS configuration changes are monitored correctly in AWS CloudWatch.
OpenSearch (Elasticsearch) error logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
OpenSearch (Elasticsearch) audit logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
Lambda function environment variables expose secrets
AWS lambda is AWS's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Service Account Privilege Escalation – Impersonation (Project Scope)
The Service account '{GcpIamServiceAccount}' has an IAM policy containing permissions that allow privilege escalation, at the project level. The existing...
Cloud Function environment variables expose secrets
GCP Cloud Function is a serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution...
User Privilege Escalation – Authentication Key Management (Project Scope)
The User '{GcpUser}' has an IAM policy containing permissions that allow privilege escalation, at the project level. One or more...
Service Account Privilege Escalation – Service Update (Resource Scope)
The Service account '{GcpIamServiceAccount}' has an IAM policy containing permissions that allow privilege escalation, at the resource level ({GcpIamServiceAccount.PolicyBindings.Policy.Scope}). One...