Load Balancer with weak cipher suites
Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting...
Blog
Unencrypted S3 Bucket
Amazon S3 provides a variety of no, or low, cost encryption options to protect data at rest. Encrypting data at...
AWS S3 Bucket Without “”MFA Delete”” Enabled
Using MFA-protected S3 buckets will enable an extra layer of protection to ensure that the S3 objects (files) cannot be...
DynamoDB table has point in time recovery disabled
DynamoDB table {AwsDynamodbTable} does not have point in time recovery enabled. Point in time recovery enables automatic backups of the...
Managed disk is not encrypted with CMK.
{AzureDisk} is not encrypted with customer managed key (CMK). Encrypting managed disks ensures that the entire content is fully unrecoverable...
Codebuild Github or Bitbucket doesnt use OAuth
Codebuild compiles the source code, runs unit tests, and generates deployable artifacts. Using personal access tokens or a user name...
OpenSearch (Elasticsearch) domain does not require TLS 1.2 encryption
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
AWS SageMaker notebook instance not configured with data encryption at rest using KMS key
AWS SageMaker is a service that enables to create, train, and deploy machine-learning models in the cloud. AWS SageMaker notebook...
S3 Bucket Should Enforce HTTPS
By default, Amazon S3 allows both HTTP and HTTPS requests. In order to allow access to Amazon S3 objects only...