Privileged User – Group Management
An IAM User is an entity that you create in AWS. The IAM User represents the person or service that...
Cloud Risks
Privileged User – Policy Version
An IAM User is an entity that you create in AWS. The IAM User represents the person or service that...
Amazon ECS container runs as privileged
Amazon Elastic Container - ECS is a highly scalable, fast container management service that makes running, stopping, and managing containers...
AWS Guard Duty: Ec2 with UnauthorizedAccess:EC2/SSHBruteForce on an exposed instance with lateral movement risks
Brute force attempts were detected by AWS GuardDuty service on the Internet facing EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) with lateral movement...
GCP VM Instance with secrets in Metadata
Instance metadata can be used to access user data that was specified when launching the instance. For example, a parameter...
Insecure Private Key
We have found that the asset contains a private certificate key that is part of a pair (private and public)...
AWS Systems Manager Parameter Exposes AWS Secret
AWS Systems Manager Parameter Store provides a centralized store to manage your configuration data. It was detected that the Systems...
Unused IAM Role Can be Assumed by External Identity
Orca has found that the role {AwsIamRole}, which can be assumed by an AWS identity which is not part of...
User with Admin and standard user roles
Service Account admin Role allows the user/identity to create, delete, and manage service accounts. Service Account User Role allows the...