VMware Virtual Machine with host information feature enabled
A VMware virtual machine is a software-based emulation of a physical computer. By enabling a VM to get detailed information...
Cloud Risks
Kubernetes node’s kubelet make-iptables-util-chains is set false
The kubelet reads various parameters, including security settings, from a config file. Kubelets can automatically manage the required changes to...
Kubernetes node’s kubelet eventRecordQPS is greater than 5
The kubelet reads various parameters, including security settings, from a config file. The --eventRecordQPS flag on the Kubelet can be...
SSL/TLS Certificate is Vulnerable to Heartbleed
Ensure that none of the server certificates managed by AWS IAM were compromised by the Heartbleed bug, meaning that none...
DynamoDB table auto scaling is disabled
Amazon DynamoDB auto scaling uses the AWS Application Auto Scaling service to dynamically alter provisioned throughput capacity, instead of the...
Amazon EC2 instances launched using Auto Scaling group launch configurations should not have public IP addresses
Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. Amazon EC2 instances...
Auto Scaling group should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)
Auto Scaling group is a logical grouping of instances for the purposes of automatic scaling and management. IMDS provides data...
DynamoDB Accelerator(DAX) clusters should be encrypted at rest
Amazon DynamoDB Accelerator(DAX) is a fully managed, highly available, in-memory cache for Amazon DynamoDB. When using DAX clusters, encrypting data...
AWS EC2 Transit Gateways automatically accept VPC attachment requests
A transit gateway enables you to attach VPCs and VPN connections in the same Region and route traffic between them....