S3 Bucket Used to Store CloudTrail Logs is Publicly Accessible
CloudTrail logs a record of every API call made in your AWS account. These logs file are stored in an...
Blog
Ensure CloudTrail logs are encrypted at rest using KMS CMKs
AWS CloudTrail is a web service that records AWS API calls for an account and makes those logs available to...
Dataproc cluster is not encrypted with customer-managed encryption key (CMEK)
When you use Dataproc, cluster and job data is stored on Persistent Disks (PDs) associated with the Compute Engine VMs...
K8S API server configuration contains insecure bind address
It was found that the API server contains an insecure bind address. Setting an insecure bind address allows anyone to...
FileStore not encrypted using customer-managed encryption keys (CMEK)
Filestore instances are fully managed NFS file servers on Google Cloud for use with applications running on Compute Engine virtual...
DNSSEC is disabled for Cloud DNS
Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners to take easy steps to protect their domains...
Weak algorithm used for zone-signing key in Cloud DNS DNSSEC
DNSSEC algorithm numbers in this registry may be used in CERT RRs. Zone signing (DNSSEC) and transaction security mechanisms (SIG(0)...
Load Balancer with weak cipher suites
Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting...
Unencrypted S3 Bucket
Amazon S3 provides a variety of no, or low, cost encryption options to protect data at rest. Encrypting data at...