Public access to a known tool in debug mode
The public web page contains a tool running in debug mode and might expose sensitive information. By allowing public access...
Blog
QLDB Ledger using allow all permissions mode
QLDB Ledgers are typically used to record sensitive information of an organization. By using permissions mode you can control the...
QLDB Ledger has deletion protection disabled
QLDB Ledgers are typically used to record sensitive information of an organization. Enabling Ledger deletion protection is an additional layer...
Glue job bookmarks encryption disabled
Ensure that encryption at rest is enabled for Amazon Glue job bookmarks
Glue Dev Endpoint is public
It was found that {AwsGlueDevEndpoint} has public address. Ensure that your AWS Glue Dev Endpoint is not public. Dev Endpoint...
Oracle Analytics Cloud (OAC) is publicly accessible
Oracle Analytics Cloud (OAC) is a scalable and secure public cloud service that provides a full set of capabilities to...
IAM customer managed policies allow decryption on all KMS keys
An IAM Managed Policy is an object in AWS that, when associated with an identity or resource, defines its permissions....
AWS Secrets Manager secret with public access
AWS Secrets Manager helps you to store and protect secrets needed to access your applications, services, and IT resources. It...
Block volume is not encrypted with a customer managed key (CMK)
Oracle Cloud Infrastructure Block Volume service lets you dynamically provision and manage block storage volumes. By default, the Oracle service...