Bigtable instance encryption not using Customer-Managed Keys
Cloud Bigtable is a managed NoSQL Big Data database service. Bigtable stores very large amounts of single-keyed data with very...
Blog
Firestore security rules with public database access
We have found that Firestore Database {GcpFirestoreDatabase} is configured with overly permissive security rules, allowing public database access. Cloud Firestore...
EBS volume not encrypted by CMK
The EBS volume {AwsEc2EbsVolume} is encrypted using the default AMS managed keys. It is recommended for security reasons to use...
Azure VM’s disks with more than one snapshot
Azure compute vm ({AzureComputeVm}) is using disks which contain more than one snapshot ({AzureComputeVm.Disks.Snapshots}). A snapshot is a full, read-only...
Backup vault should be configured to send notifications for each failed backup job
AWS Backup is a fully-managed service that protects data across AWS services. Using this service, you can configure backup policies...
Backup vault should have a policy
AWS Backup is a fully-managed service that protects data across AWS services. We identified a Backup vault '{AwsBackupVault}' which does...
Backup vault should be using Customer Master Keys
AWS Backup is a fully-managed service that protects data across AWS services. We identified a Backup vault '{AwsBackupVault}' that uses...
Azure SQL Database with basic sku
Azure SQL Database is a fully managed platform as a service (PaaS) database engine that handles most of the database...
Oslogin feature is disabled
Enabling osLogin ensures that SSH keys used to connect to instances are mapped with IAM users. Revoking access to IAM...