CloudFront distributions origin access identity is disabled
We have found that the Cloudfront distribution {AwsCloudFront} OAI is not configured. Amazon CloudFront is a high-performance content delivery network...
Cloud Risks
CloudFront distributions default root object is not configured
We have found that CloudFront Distribution {AwsCloudFront} default root object is not configured. Amazon CloudFront is a high-performance content delivery...
Amazon Kinesis data stream is not encrypted using customer-managed KMS key
Amazon Kinesis is a real-time data streaming service. Kinesis data stream '{AwsKinesisDataStream}' is encrypted using the default AWS-managed KMS key....
Amazon Kinesis data stream does not have server side encryption
Amazon Kinesis is a real-time data streaming service. Kinesis data stream '{AwsKinesisDataStream}' does not have server side encryption enabled. Without...
Amazon ECS task definitions should have secure networking modes and user definitions
Amazon Elastic Container - ECS is a highly scalable, fast container management service that makes running, stopping, and managing containers...
CloudFront distribution has field-level encryption disabled
Amazon CloudFront is a high-performance content delivery network (CDN) service that securely delivers data, videos, apps, and APIs to customers...
VM Image not encrypted with CMEK or CSEK
VM Operating System Image allows you to create boot disks for your instances. The default choice to encrypt an image...
CloudFront distributions don’t have encryption in transit
We have found that CloudFront Distribution {AwsCloudFront} ViewerProtocolPolicy is set to allow-all for: {AwsCloudFront.PublicCacheBehaviors}. Amazon CloudFront is a high-performance content...
Cosmos DB Advanced Threat Protection is Disabled
Azure Cosmos DB is a fully managed NoSQL database for modern app development. The Cosmos DB - {AzureCosmosDb} is configured...