Route53 Hosted Zones are not being used
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web service. Cloud account {CloudAccount} is not...
Blog
Users can create security groups in Azure portals, API or PowerShell
'User settings' is default configurations of consent and permissions for all tenant users. It was detected that users can create...
Application load balancer without invalid HTTP header drop
Application Load Balancers (ALB) are used to route HTTP and HTTPS traffic of web applications. HTTP headers contain information about...
EC2 Elastic IP address not associated with an instance
An Elastic IP address is a public IP that is reachable from the internet. You can associate an Elastic IP...
Cosmos DB Automatic Failover feature is Disabled
Azure Cosmos DB is a fully managed NoSQL database for modern app development. The Cosmos DB - {AzureCosmosDb} is configured...
ELB Connection Draining Disabled
In order to prevent existing connections from breaking while taking instances out of service, Enable Connection Draining
Bigtable instance encryption not using Customer-Managed Keys
Cloud Bigtable is a managed NoSQL Big Data database service. Bigtable stores very large amounts of single-keyed data with very...
Firestore security rules with public database access
We have found that Firestore Database {GcpFirestoreDatabase} is configured with overly permissive security rules, allowing public database access. Cloud Firestore...
EBS volume not encrypted by CMK
The EBS volume {AwsEc2EbsVolume} is encrypted using the default AMS managed keys. It is recommended for security reasons to use...