OpenSearch (Elasticsearch) data at rest encryption disabled
It was found that OpenSearch (Elasticsearch) encryption data at rest feature is disabled. That could lead to potential data leakage.
Cloud Risks
SQL Server missing BYOK encryption
In {AzureSqlDbServer} BYOK is missing. TDE with Customer-managed key support provides increased transparency and control over the TDE Protector, increased...
OpenSearch (Elasticsearch) node to node encryption disabled
It was found that OpenSearch (Elasticsearch) is not using node to node encryption. There is a risk for data leakage...
Azure Data Factory is not encrypted with a CMK
Azure Data Factory is Azure's cloud ETL service for scale-out serverless data integration and data transformation.{AzureDataFactory} is not encrypted with...
SES Identity has DomainKeys Identified Mail (DKIM) feature disabled
Amazon Simple Email Service (SES) is an email service that enables developers to send mail from within any application. DomainKeys...
OSS buckets without SSE-KMS encryption
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
OSS Bucket allows public internet access
Alibaba Cloud OSS (Object Storage Service) provides storage service to your files and data in the account. The files are...
EMR Cluster At Rest S3 Encryption Disabled
EMR, Elastic MapReduce, is a managed cluster platform that simplifies running big data frameworks. EMR cluster is a collection of...
SQS queue with public access
Amazon Simple Queue Service (Amazon SQS) offers a secure, durable, and available hosted queue that lets you integrate and decouple...