Subdomain supports deprecated TLS encryption
A server under this domain supports a deprecated TLS version. TLS 1.0 and 1.1 have been deprecated by the Internet...
Blog
QLDB Ledger encryption not using customer managed key
QLDB is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log owned by a...
Public access to a known tool in debug mode
The public web page contains a tool running in debug mode and might expose sensitive information. By allowing public access...
QLDB Ledger using allow all permissions mode
QLDB Ledgers are typically used to record sensitive information of an organization. By using permissions mode you can control the...
QLDB Ledger has deletion protection disabled
QLDB Ledgers are typically used to record sensitive information of an organization. Enabling Ledger deletion protection is an additional layer...
Glue job bookmarks encryption disabled
Ensure that encryption at rest is enabled for Amazon Glue job bookmarks
Glue Dev Endpoint is public
It was found that {AwsGlueDevEndpoint} has public address. Ensure that your AWS Glue Dev Endpoint is not public. Dev Endpoint...
Oracle Analytics Cloud (OAC) is publicly accessible
Oracle Analytics Cloud (OAC) is a scalable and secure public cloud service that provides a full set of capabilities to...
IAM customer managed policies allow decryption on all KMS keys
An IAM Managed Policy is an object in AWS that, when associated with an identity or resource, defines its permissions....