Unmonitored KMS events
Ensure that KMS configuration changes are monitored correctly in AWS CloudWatch.
Blog
OpenSearch (Elasticsearch) error logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
OpenSearch (Elasticsearch) audit logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
Lambda function environment variables expose secrets
AWS lambda is AWS's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Service Account Privilege Escalation – Impersonation (Project Scope)
The Service account '{GcpIamServiceAccount}' has an IAM policy containing permissions that allow privilege escalation, at the project level. The existing...
Cloud Function environment variables expose secrets
GCP Cloud Function is a serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution...
User Privilege Escalation – Authentication Key Management (Project Scope)
The User '{GcpUser}' has an IAM policy containing permissions that allow privilege escalation, at the project level. One or more...
Service Account Privilege Escalation – Service Update (Resource Scope)
The Service account '{GcpIamServiceAccount}' has an IAM policy containing permissions that allow privilege escalation, at the resource level ({GcpIamServiceAccount.PolicyBindings.Policy.Scope}). One...
Group Policy Preferences with cpassword
We have found Group Policy Preferences file '{CpasswordFile}' with cpassword for {CpasswordFile.Cpasswords}. A cpassword is used for setting passwords from...