KMS key with public access policy
AWS Key Management Service (AWS KMS) is a managed service that allows you to create and control the cryptographic keys...
Blog
S3 Glacier vault with public access
Amazon S3 Glacier is a secure, durable, and extremely low-cost Amazon S3 storage class for data archiving and long-term backup....
IAM inline policies allow decryption on all KMS keys
An inline policy is a policy in AWS that is embedded in an IAM identity (a user, group, or role)....
OSS buckets encryption without BYOK method
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
EBS account-level default encryption is not enabled
Elastic Compute Cloud (EC2) supports account-level encryption for Elastic Block Store (EBS) service, which uses Key Management Service (KMS) keys....
S3 Bucket Used to Store CloudTrail Logs is Publicly Accessible
CloudTrail logs a record of every API call made in your AWS account. These logs file are stored in an...
Ensure CloudTrail logs are encrypted at rest using KMS CMKs
AWS CloudTrail is a web service that records AWS API calls for an account and makes those logs available to...
Dataproc cluster is not encrypted with customer-managed encryption key (CMEK)
When you use Dataproc, cluster and job data is stored on Persistent Disks (PDs) associated with the Compute Engine VMs...
K8S API server configuration contains insecure bind address
It was found that the API server contains an insecure bind address. Setting an insecure bind address allows anyone to...