AWS S3 Bucket Without “”MFA Delete”” Enabled
Using MFA-protected S3 buckets will enable an extra layer of protection to ensure that the S3 objects (files) cannot be...
Blog
DynamoDB table has point in time recovery disabled
DynamoDB table {AwsDynamodbTable} does not have point in time recovery enabled. Point in time recovery enables automatic backups of the...
Managed disk is not encrypted with CMK.
{AzureDisk} is not encrypted with customer managed key (CMK). Encrypting managed disks ensures that the entire content is fully unrecoverable...
Codebuild Github or Bitbucket doesnt use OAuth
Codebuild compiles the source code, runs unit tests, and generates deployable artifacts. Using personal access tokens or a user name...
OpenSearch (Elasticsearch) domain does not require TLS 1.2 encryption
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
AWS SageMaker notebook instance not configured with data encryption at rest using KMS key
AWS SageMaker is a service that enables to create, train, and deploy machine-learning models in the cloud. AWS SageMaker notebook...
S3 Bucket Should Enforce HTTPS
By default, Amazon S3 allows both HTTP and HTTPS requests. In order to allow access to Amazon S3 objects only...
Storage bucket Object Versioning feature is disabled
Google Cloud Storage service allows you to store and retrieve data in a bucket. To support the retrieval of objects...
API Gateway REST API with stages that have cache data enabled but cache is not encrypted
API Gateway is a service for creating and managing REST, HTTP, and WebSocket APIs. A REST API in API Gateway...