DNSSEC is disabled for Cloud DNS
Domain Name System Security Extensions (DNSSEC) in Cloud DNS enables domain owners to take easy steps to protect their domains...
Blog
Weak algorithm used for zone-signing key in Cloud DNS DNSSEC
DNSSEC algorithm numbers in this registry may be used in CERT RRs. Zone signing (DNSSEC) and transaction security mechanisms (SIG(0)...
Load Balancer with weak cipher suites
Secure Sockets Layer (SSL) policies determine what port Transport Layer Security (TLS) features clients are permitted to use when connecting...
Unencrypted S3 Bucket
Amazon S3 provides a variety of no, or low, cost encryption options to protect data at rest. Encrypting data at...
AWS S3 Bucket Without “”MFA Delete”” Enabled
Using MFA-protected S3 buckets will enable an extra layer of protection to ensure that the S3 objects (files) cannot be...
DynamoDB table has point in time recovery disabled
DynamoDB table {AwsDynamodbTable} does not have point in time recovery enabled. Point in time recovery enables automatic backups of the...
Managed disk is not encrypted with CMK.
{AzureDisk} is not encrypted with customer managed key (CMK). Encrypting managed disks ensures that the entire content is fully unrecoverable...
Codebuild Github or Bitbucket doesnt use OAuth
Codebuild compiles the source code, runs unit tests, and generates deployable artifacts. Using personal access tokens or a user name...
OpenSearch (Elasticsearch) domain does not require TLS 1.2 encryption
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...