AWS Support Access Policy Not In Use
AWS provides a support center that can be used for incident notification and response, as well as technical support and...
Blog
GKE has auto node upgrade disabled
Node auto-upgrades help you keep the nodes in your cluster up-to-date with the cluster control plane (master) version when your...
GKE cluster has an unsupported master node version
Google Kubernetes Engine (GKE) let you Deploy, manage, and scale containerized applications on Kubernetes. Orca has detected that {GcpGkeCluster} is...
Pub/Sub subscription without dead letter topic
It was detected that the subscription {GcpPubSubSubscription} is not using a dead letter topic. When a message can't be acknowledged,...
Route 53 Domain has Privacy Protection disabled
Route 53 domain {AwsRoute53Domain} does not have privacy protection enabled. Without privacy protection all contact information for the domain will...
KMS default keys in use
It was found that {AwsKmsKey} is an AWS-managed key, which is the default. Check AWS services to ensure the default...
DynamoDB table is not encrypted using customer-managed KMS key
DynamoDB table {AwsDynamodbTable} is encrypted using AWS-managed KMS key, instead of customer-managed KMS key
K8S API server configuration request-timeout is more the 60 seconds
Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection...
Security Hub is not enabled in all regions
AWS Security Hub provides you with a comprehensive view of your security state in AWS and helps you check your...