Azure Key vault without tags
In the context of the cloud, tags are metadata values that contain keys and values to help users organize and...
Cloud Risks
Amazon MQ broker is using Single-instance deployment mode
Amazon MQ is a managed message broker service for Apache ActiveMQ and RabbitMQ that allows setting up and operating message...
Web server configuration is exposed
Web server exposes configuration details through HTTP header, and by doing that the web server is revealing information about the...
Azure PostgreSQL Server Geo-Redundant Backups is Disabled
Azure Database for PostgreSQL provides the flexibility to choose between locally redundant or geo-redundant backup storage in the General Purpose...
Redshift deferred maintenance disabled
Deferred maintenance is disabled for a Redshift cluster. The ""defer maintenance"" attribute of a Redshift configuration allows you to postpone...
Soft delete is disabled for blobs in azure storage account
Soft delete for blobs is disabled for : {AzureStorageAccount}. Erroneously modified or deleted blobs accidentally by an application or other...
Private Endpoints should be used to access Storage Accounts
Azure storage account contains all of your Azure Storage data objects, including blobs, file shares, queues, tables, and disks. It...
Route53 Hosted Zones are not being used
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) web service. Cloud account {CloudAccount} is not...
Users can create security groups in Azure portals, API or PowerShell
'User settings' is default configurations of consent and permissions for all tenant users. It was detected that users can create...