EBS volume not encrypted by CMK
The EBS volume {AwsEc2EbsVolume} is encrypted using the default AMS managed keys. It is recommended for security reasons to use...
Blog
Azure VM’s disks with more than one snapshot
Azure compute vm ({AzureComputeVm}) is using disks which contain more than one snapshot ({AzureComputeVm.Disks.Snapshots}). A snapshot is a full, read-only...
Backup vault should be configured to send notifications for each failed backup job
AWS Backup is a fully-managed service that protects data across AWS services. Using this service, you can configure backup policies...
Backup vault should have a policy
AWS Backup is a fully-managed service that protects data across AWS services. We identified a Backup vault '{AwsBackupVault}' which does...
Backup vault should be using Customer Master Keys
AWS Backup is a fully-managed service that protects data across AWS services. We identified a Backup vault '{AwsBackupVault}' that uses...
Azure SQL Database with basic sku
Azure SQL Database is a fully managed platform as a service (PaaS) database engine that handles most of the database...
Oslogin feature is disabled
Enabling osLogin ensures that SSH keys used to connect to instances are mapped with IAM users. Revoking access to IAM...
VM instance with ‘Block Project-wide SSH keys’ disabled
Project-wide SSH keys are stored in Compute/Project-meta-data. Project wide SSH keys can be used to login into all the instances...
Privileged user MFA is disabled
Enable multi-factor authentication for all user credentials who have write access to Azure resources. These include roles like Service Co-Administrators,...