Storage bucket Object Versioning feature is disabled
Google Cloud Storage service allows you to store and retrieve data in a bucket. To support the retrieval of objects...
Blog
API Gateway REST API with stages that have cache data enabled but cache is not encrypted
API Gateway is a service for creating and managing REST, HTTP, and WebSocket APIs. A REST API in API Gateway...
Storage bucket without uniform bucket-level access
We have found a bucket ({GcpStorageBucket}) without uniform bucket-level access enabled. Enabling uniform bucket-level access guarantees that if a Storage...
CloudFront distributions origin access identity is disabled
We have found that the Cloudfront distribution {AwsCloudFront} OAI is not configured. Amazon CloudFront is a high-performance content delivery network...
CloudFront distributions default root object is not configured
We have found that CloudFront Distribution {AwsCloudFront} default root object is not configured. Amazon CloudFront is a high-performance content delivery...
Amazon Kinesis data stream is not encrypted using customer-managed KMS key
Amazon Kinesis is a real-time data streaming service. Kinesis data stream '{AwsKinesisDataStream}' is encrypted using the default AWS-managed KMS key....
Amazon Kinesis data stream does not have server side encryption
Amazon Kinesis is a real-time data streaming service. Kinesis data stream '{AwsKinesisDataStream}' does not have server side encryption enabled. Without...
Amazon ECS task definitions should have secure networking modes and user definitions
Amazon Elastic Container - ECS is a highly scalable, fast container management service that makes running, stopping, and managing containers...
CloudFront distribution has field-level encryption disabled
Amazon CloudFront is a high-performance content delivery network (CDN) service that securely delivers data, videos, apps, and APIs to customers...