Key Vault secret without expiration time
Expiration time is not set for {AzureKeyVaultSecret}. It is recommended that secrets be rotated in the key vault and set...
Cloud Risks
Root User without Hardware MFA
The root user account is the most privileged user in an AWS account. MFA adds an extra layer of protection...
User auth tokens are not rotated in the last 90 days
An auth token is an Oracle-generated token string that you can use to authenticate with third-party APIs that do not...
User With Multiple SSH Keys
Identify and deactivate any unnecessary IAM SSH public keys used to authenticate to AWS CodeCommit repositories. Amazon allows you to...
Access Keys Rotation (90 days)
Access keys consist of an access key ID and secret access key, which are used to sign programmatic requests that...
SSL Certificate Using 1024 Bit Encryption Key
Ensure SSL/TLS Certificates are Using 2048/4096 Bit Encryption Keys
KMS master key rotation disabled
It was found that {AwsKmsKey} could not be rotated. Ensure KMS key rotation feature is enabled for all your Customer...
AWS Secrets Manager secret was not rotated in the last 90 days
AWS Secrets Manager helps you to store and protect secrets needed to access your applications, services, and IT resources. We...
Project with API keys
API keys are used for authentication, they are simple encrypted strings that identify an application without any principal. Project '{CloudAccount}'...