KMS key is anonymously/publicly accessible
Granting permissions to allUsers or allAuthenticatedUsers allows anyone to access the dataset. Such access might not be desirable if sensitive...
Blog
Redshift publicly accessible
A Redshift cluster is publicly accessible. This means that anyone on the internet can connect to it. Malicious actors may...
Connections to Redshift cluster not encrypted in transit
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...
Redshift cluster allows unrestricted inbound traffic
Redshift clusters are associated with security groups in order to allow other users access to them. Redshift cluster ""{AwsRedshiftCluster}"" is...
Publicly accessible BigQuery dataset
We have found that {GcpBigqueryDataset} BigQuery dataset is publicly accessible. Granting permissions to allUsers or allAuthenticatedUsers allows anyone to access...
Redshift clusters do not use enhanced VPC routing
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...
OSS Bucket is Public
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
BigQuery table without CMEK encryption
We have found BigQuery table ({GcpBigqueryTable}) without customer managed encryption key. For greater control over the encryption, customer-managed encryption keys...
Cosmos DB Accounts Unrestricted Network Access
Azure Cosmos DB is a fully managed NoSQL database for modern app development. The default network access for Azure Cosmos...