Role Can be Assumed by External Identity
Orca has detected a IAM Role which can be assumed by an entity which is not a member of the...
Cloud Risks
Externally Exposed AMI
We found that your Amazon Machine Image (AMI) {AwsEc2Image} is public. A public AMI is available for use by all...
S3 Bucket Allows Public READ Access
Ensure that your S3 buckets content cannot be publicly listed in order to protect against unauthorized access. An S3 bucket...
Unused Credentials Found
AWS IAM users can access AWS resources using different types of credentials, such as passwords or access keys. It is...
Cross-Account Access Without External ID or MFA
Ensure that Amazon IAM roles used to establish a trusted relationship between your AWS account and a third-party entity (also...