MemoryStore Redis instance AUTH is disabled
GCP MemoryStore is a service that allows you to construct your apps by using open source caching engines: Memcached or...
Cloud Risks
RDS database snapshot is shared with AWS accounts
Amazon Relational Database Service (RDS) allows setting up a relational database instance in the cloud. RDS snapshot is a point-in-time...
EMR Cluster is publicly accessible
The EMR Cluster {AwsEmrCluster} is publicly accessible. Emr cluster should only be accessible from private endpoints in order to prevent...
KMS key is anonymously/publicly accessible
Granting permissions to allUsers or allAuthenticatedUsers allows anyone to access the dataset. Such access might not be desirable if sensitive...
Redshift publicly accessible
A Redshift cluster is publicly accessible. This means that anyone on the internet can connect to it. Malicious actors may...
Connections to Redshift cluster not encrypted in transit
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...
Redshift cluster allows unrestricted inbound traffic
Redshift clusters are associated with security groups in order to allow other users access to them. Redshift cluster ""{AwsRedshiftCluster}"" is...
Publicly accessible BigQuery dataset
We have found that {GcpBigqueryDataset} BigQuery dataset is publicly accessible. Granting permissions to allUsers or allAuthenticatedUsers allows anyone to access...
Redshift clusters do not use enhanced VPC routing
An Amazon Redshift cluster consists of nodes. Each cluster has a leader node and one or more compute nodes. The...