SecurityCenterBuiltIn Permissions Reduced
ASC default policy assignment is set of security recommendations based on best practices. Enabling recommendations in ASC default policy ensures...
Blog
Azure PostgreSQL Flexible Server Not Logging Connections
Azure PostgreSQL flexible server {AzurePostgresFlexibleServer} does not log connections. Logging attempted connections is useful to identify, troubleshoot and repair configuration...
Redshift audit logging is disabled
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...
Unmonitored KMS events
Ensure that KMS configuration changes are monitored correctly in AWS CloudWatch.
OpenSearch (Elasticsearch) error logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
OpenSearch (Elasticsearch) audit logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...
Lambda function environment variables expose secrets
AWS lambda is AWS's serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment...
Service Account Privilege Escalation – Impersonation (Project Scope)
The Service account '{GcpIamServiceAccount}' has an IAM policy containing permissions that allow privilege escalation, at the project level. The existing...
Cloud Function environment variables expose secrets
GCP Cloud Function is a serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution...