Application load balancer without invalid HTTP header drop
Application Load Balancers (ALB) are used to route HTTP and HTTPS traffic of web applications. HTTP headers contain information about...
Cloud Risks
EC2 Elastic IP address not associated with an instance
An Elastic IP address is a public IP that is reachable from the internet. You can associate an Elastic IP...
Cosmos DB Automatic Failover feature is Disabled
Azure Cosmos DB is a fully managed NoSQL database for modern app development. The Cosmos DB - {AzureCosmosDb} is configured...
ELB Connection Draining Disabled
In order to prevent existing connections from breaking while taking instances out of service, Enable Connection Draining
Bigtable instance encryption not using Customer-Managed Keys
Cloud Bigtable is a managed NoSQL Big Data database service. Bigtable stores very large amounts of single-keyed data with very...
Firestore security rules with public database access
We have found that Firestore Database {GcpFirestoreDatabase} is configured with overly permissive security rules, allowing public database access. Cloud Firestore...
EBS volume not encrypted by CMK
The EBS volume {AwsEc2EbsVolume} is encrypted using the default AMS managed keys. It is recommended for security reasons to use...
Azure VM’s disks with more than one snapshot
Azure compute vm ({AzureComputeVm}) is using disks which contain more than one snapshot ({AzureComputeVm.Disks.Snapshots}). A snapshot is a full, read-only...
Backup vault should be configured to send notifications for each failed backup job
AWS Backup is a fully-managed service that protects data across AWS services. Using this service, you can configure backup policies...