VM Image not encrypted with CMEK or CSEK
VM Operating System Image allows you to create boot disks for your instances. The default choice to encrypt an image...
Blog
CloudFront distributions don’t have encryption in transit
We have found that CloudFront Distribution {AwsCloudFront} ViewerProtocolPolicy is set to allow-all for: {AwsCloudFront.PublicCacheBehaviors}. Amazon CloudFront is a high-performance content...
Cosmos DB Advanced Threat Protection is Disabled
Azure Cosmos DB is a fully managed NoSQL database for modern app development. The Cosmos DB - {AzureCosmosDb} is configured...
GCP Secret Manager secret encrypted without Customer-Managed Encryption Keys
GCP Secret Manager can store, manage and access secrets, with the appropriate permissions you can view its content. We detected...
Pub/Sub Topic without Customer-Managed Key Encryption
It was detected that the topic {GcpPubSubTopic} is not using CMK (Customer-Managed Key). Google Cloud Pub/Sub topics should be encrypted...
RDS database instance snapshot is not encrypted
RDS database instance snapshot {AwsRdsDbInstanceSnapshot} does not have storage encryption enabled. Snapshots should be encrypted in order to protect the...
API Gateway is publicly accessible
API Gateway {AwsApiGatewayEndpoint} is publicly accessible. API Gateways should only be accessible from known sources in order to prevent unauthorized...
AWS ECR repository is publicly accessible
We have found that the AWS ECR repository - {AwsEcrRepository} is publicly accessible. AWS ECR - Amazon Elastic Container Registry...
S3 Bucket Allows Public GET
Orca has detected that your s3 bucket '{AwsS3Bucket}' can be publicly accessed for GET actions. An S3 bucket that grants...