Azure Storage account’s Customer-Managed Keys encryption is disabled
Configuring the storage account to use BYOK (Use Your Own Key) provides additional confidentiality controls on data as a given...
Blog
OpenSearch (Elasticsearch) data at rest encryption disabled
It was found that OpenSearch (Elasticsearch) encryption data at rest feature is disabled. That could lead to potential data leakage.
SQL Server missing BYOK encryption
In {AzureSqlDbServer} BYOK is missing. TDE with Customer-managed key support provides increased transparency and control over the TDE Protector, increased...
OpenSearch (Elasticsearch) node to node encryption disabled
It was found that OpenSearch (Elasticsearch) is not using node to node encryption. There is a risk for data leakage...
Azure Data Factory is not encrypted with a CMK
Azure Data Factory is Azure's cloud ETL service for scale-out serverless data integration and data transformation.{AzureDataFactory} is not encrypted with...
SES Identity has DomainKeys Identified Mail (DKIM) feature disabled
Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application. DomainKeys...
OSS buckets without SSE-KMS encryption
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
OSS Bucket allows public internet access
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
EMR Cluster At Rest S3 Encryption Disabled
EMR, Elastic MapReduce, is a managed cluster platform that simplifies running big data frameworks. EMR cluster is a collection of...