ECS cluster without active services
Amazon ECS service allows you to run and maintain a specified number of instances of a task definition simultaneously in...
Blog
AWS CloudFormation stack notifications are disabled
AWS CloudFormation is a service that provides infrastructure as code (IaC), which practically means writing code using a descriptive language...
K8s controller-manager configuration file permissions are too permissive
It was found that the K8s controller-manager configuration file's permissions are too broad. Setting the file's permissions to be permissive...
IP address is reserved but not in use
An IP address enables machines to communicate with each other. GCP IP address type can be ephemeral or static (fixed...
SQL Server instance with ‘external scripts enabled’ flag set to ‘on’
We have found that {GcpSQLInstance} has 'external scripts enabled' flag set to 'on'. 'external scripts enabled' allows the execution of...
Etcd directory ownership is not set to etcd:etcd
It was found that the etcd directory file's owner is not set to etcd:etcd. Setting the file's owner to a...
RDS database instance has copy tags to snapshots disabled
The ""Copy Tags to Snapshots"" feature of the RDS instance {AwsRdsDbInstance} is disabled. This feature allows you to automatically copy...
Unattached Azure disk
Azure disk ({AzureDisk}) is not attached to any instance. Please be advised that when you delete a virtual machine (VM)...
Azure Storage account without tags
In the context of the cloud, tags are metadata values that contain keys and values to help users organize and...