Azure Container Registry with Unrestricted Network Access
Azure Container Registry is a managed, private Docker registry service which is used to store and manage your private Docker...
Blog
S3 Bucket Policy allows unknown cross account access
Amazon S3 (Simple Storage Service) is a service that provides object storage from anywhere in the world through the AWS...
KMS CMK is exposed
It was found that {AwsKmsKey} is exposed. A master key is considered exposed when one of the statements in the...
Elasticsearch is publicly accessible
The Elasticsearch - {AwsElasticSearch} is publicly accessible. Elastic search should only be accessible from private endpoints in order to prevent...
S3 Bucket Policy allows cross account access via AWS service
Orca has detected a misconfigured S3 Bucket ({AwsS3Bucket}) policy which allows the service: {AwsS3Bucket.BucketPolicy.PolicyStatements.Principal|[Service]} to access the files in the...
S3 Bucket Policy allows cross account access
Amazon S3 (Simple Storage Service) is a service that provides object storage from anywhere in the world through the AWS...
Sensitive data found – SendGrid API key
Unencrypted sensitive data was found on a cloud asset. If this information is exposed to cybercriminals, it could lead to...
S3 Bucket Allows Authenticated READ Access
Ensure that your S3 buckets content cannot be listed by AWS authenticated accounts or IAM users in order to protect...
S3 Bucket Allows Authenticated WRITE Access
Ensure that your S3 buckets cannot be accessed for write actions by AWS authenticated accounts or IAM users in order...