Launch-wizard security groups is being used
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Cloud Risks
Aws Guard Duty Should Be Enabled
AWS GuardDuty is a managed threat detection service that continuously monitors your VPC flow logs, AWS CloudTrail event logs and...
Azure Firewall intrusion detection and prevention system is disabled
A network intrusion detection and prevention system (IDPS) allows you to monitor network activities for malicious activity, log information about...
S3 Bucket not Configured with Public Access Block
Amazon S3 provides Block public access (bucket settings) to help you manage public access to Amazon S3 resources. By default,...
No healthy backend instances in ELB
No healthy backend instances are detected for an Elastic Load Balancer. This points to either a faulty load balancer that...
Ec2 Systems Manager(SSM) non compliant – association
Systems Manager is an AWS service that you can use to view and control your AWS infrastructure as well as...
GKE with Alpha features enabled
Alpha clusters are designed for early adopters to experiment with workloads that take advantage of new features before those features...
Cloud function with policy members ‘all authenticated users’
GCP cloud function {GcpCloudFunction} was detected running with policy bindings with 'allAuthenticatedUsers' in Members, allowing access to all authenticated users...
Cloud function with public invoker privileges
GCP cloud function {GcpCloudFunction} was detected running with public invoker privileges, allowing any user on the internet to invoke the...