Disabled VPC Flow Logs
Flow Logs is a feature that enables users to capture information about the IP traffic going to and from network...
Cloud Risks
API Gateway has CloudWatch metrics disabled
API Gateway {AwsApiGatewayEndpoint} does not have CloudWatch metrics enabled. CloudWatch metrics provide important metric data that helps to monitor the...
CloudWatch alarms not monitoring authorization failure count
AWS CloudWatch alarms feature allows to watch metrics and receive notifications when metrics fall outside the settings you configured. We...
CloudWatch alarms not monitoring console log-in without MFA
AWS CloudWatch alarms feature allows to watch metrics and receive notifications when metrics fall outside the settings you configured. We...
SecurityCenterBuiltIn Permissions Reduced
ASC default policy assignment is set of security recommendations based on best practices. Enabling recommendations in ASC default policy ensures...
Azure PostgreSQL Flexible Server Not Logging Connections
Azure PostgreSQL flexible server {AzurePostgresFlexibleServer} does not log connections. Logging attempted connections is useful to identify, troubleshoot and repair configuration...
Redshift audit logging is disabled
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...
Unmonitored KMS events
Ensure that KMS configuration changes are monitored correctly in AWS CloudWatch.
OpenSearch (Elasticsearch) error logs disabled
Amazon OpenSearch Service (Amazon Elasticsearch Service successor) is a managed service that simplifies the deployment, operation, and scaling of OpenSearch...