API Gateway REST API with stages that have cache data enabled but cache is not encrypted
API Gateway is a service for creating and managing REST, HTTP, and WebSocket APIs. A REST API in API Gateway...
Blog
Storage bucket without uniform bucket-level access
We have found a bucket ({GcpStorageBucket}) without uniform bucket-level access enabled. Enabling uniform bucket-level access guarantees that if a Storage...
CloudFront distributions origin access identity is disabled
We have found that the Cloudfront distribution {AwsCloudFront} OAI is not configured. Amazon CloudFront is a high-performance content delivery network...
CloudFront distributions default root object is not configured
We have found that CloudFront Distribution {AwsCloudFront} default root object is not configured. Amazon CloudFront is a high-performance content delivery...
Amazon Kinesis data stream is not encrypted using customer-managed KMS key
Amazon Kinesis is a real-time data streaming service. Kinesis data stream '{AwsKinesisDataStream}' is encrypted using the default AWS-managed KMS key....
Amazon Kinesis data stream does not have server side encryption
Amazon Kinesis is a real-time data streaming service. Kinesis data stream '{AwsKinesisDataStream}' does not have server side encryption enabled. Without...
Amazon ECS task definitions should have secure networking modes and user definitions
Amazon Elastic Container - ECS is a highly scalable, fast container management service that makes running, stopping, and managing containers...
CloudFront distribution has field-level encryption disabled
Amazon CloudFront is a high-performance content delivery network (CDN) service that securely delivers data, videos, apps, and APIs to customers...
VM Image not encrypted with CMEK or CSEK
VM Operating System Image allows you to create boot disks for your instances. The default choice to encrypt an image...