OSS buckets encryption without BYOK method
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
Blog
EBS account-level default encryption is not enabled
Elastic Compute Cloud (EC2) supports account-level encryption for Elastic Block Store (EBS) service, which uses Key Management Service (KMS) keys....
S3 Bucket Used to Store CloudTrail Logs is Publicly Accessible
CloudTrail logs a record of every API call made in your AWS account. These logs file are stored in an...
Ensure CloudTrail logs are encrypted at rest using KMS CMKs
AWS CloudTrail is a web service that records AWS API calls for an account and makes those logs available to...
Dataproc cluster is not encrypted with customer-managed encryption key (CMEK)
When you use Dataproc, cluster and job data is stored on Persistent Disks (PDs) associated with the Compute Engine VMs...
K8S API server configuration contains insecure bind address
It was found that the API server contains an insecure bind address. Setting an insecure bind address allows anyone to...
FileStore not encrypted using customer-managed encryption keys (CMEK)
Filestore instances are fully managed NFS file servers on Google Cloud for use with applications running on Compute Engine virtual...
DNSSEC is disabled for Cloud DNS
Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners to take easy steps to protect their domains...
Weak algorithm used for zone-signing key in Cloud DNS DNSSEC
DNSSEC algorithm numbers in this registry may be used in CERT RRs. Zone signing (DNSSEC) and transaction security mechanisms (SIG(0)...