EBS snapshot is shared with unknown AWS accounts
Amazon EBS (Elastic Block Storage) provide block level storage service designed to be used with EC2 instances. EBS snapshot is...
Blog
EBS snapshot accessible to public
The snapshot {AwsEc2EbsSnapshot} is exposed to every AWS authenticated user.
S3 Bucket is Accessible to Unmonitored Accounts
{AwsS3Bucket} has a policy that allows external AWS accounts to access it. This means that a malicious actor can also...
SageMaker notebook instance has direct internet access
AWS SageMaker is a service that enables to create, train, and deploy machine-learning models in the cloud. AWS SageMaker notebook...
Sensitive data found – Mailgun API key
Unencrypted sensitive data was found on a cloud asset. If this information is exposed to cybercriminals, it could lead to...
Sensitive data found – PayPal braintree access token
Unencrypted sensitive data was found on a cloud asset. If this information is exposed to cybercriminals, it could lead to...
AWS KMS master key cross-account access
It was found that external account has permissions on the following Key: {AwsKmsKey}. Permission have been given to the following...
Azure Container Registry with Unrestricted Network Access
Azure Container Registry is a managed, private Docker registry service which is used to store and manage your private Docker...
S3 Bucket Policy allows unknown cross account access
Amazon S3 (Simple Storage Service) is a service that provides object storage from anywhere in the world through the AWS...