π AWS Account Config is not enabled in all regions π’ | 1 | π’ x6 |
π AWS Account IAM Access Analyzer is not enabled for all regions π’ | 1 | π’ x6 |
π AWS Athena Workgroup CloudWatch Metrics are not enabled π’ | 1 | π’ x6 |
π AWS EC2 Auto Scaling Group behind ELB doesn't use ELB health check π’ | 1 | π’ x6 |
π AWS EC2 Instance Detailed Monitoring is not enabled π’ | 1 | π’ x6 |
π AWS RDS Aurora Cluster access is not consistent π’ | 1 | π’ x6 |
π AWS RDS Instance Multi-AZ Deployment is not enabled π’ | 1 | π’ x6 |
π AWS S3 Bucket Object Lock is not enabled π π’ | 1 | π x1, π’ x6 |
π AWS S3 Bucket Versioning is not enabled π’ | 1 | π’ x6 |
π Azure App Service Authentication is disabled and Basic Authentication is enabled π’ | 1 | π’ x6 |
π Azure Subscription Resources Basic SKU is used for production workloads π’ | | π’ x3 |
π Azure Virtual Machine is not utilizing Managed Disks π’ | 1 | π’ x6 |
π Google Cloud Asset Inventory API is not enabled π’ | 1 | π’ x6 |
π Google Cloud DNS Managed Zone DNSSEC is not enabled π’ | 1 | π’ x6 |
π Google Cloud MySQL Instance Local_infile Database Flag is not set to off π’ | 1 | π’ x6 |
π Google Cloud PostgreSQL Instance Log_error_verbosity Database Flag is not set to DEFAULT or stricter π’ | 1 | π’ x6 |
π Google Cloud PostgreSQL Instance cloudsql.enable_pgaudit Database Flag is not set to on π’ | 1 | π’ x6 |
π Google Cloud PostgreSQL Instance Log_connections Database Flag is not set to On π’ | 1 | π’ x6 |
π Google Cloud PostgreSQL Instance Log_disconnections Database Flag is not set to On π’ | 1 | π’ x6 |
π Google Cloud PostgreSQL Instance Log_min_error_statement Database Flag is not set to Error or stricter π’ | 1 | π’ x6 |
π Google Cloud PostgreSQL Instance Log_min_messages Database Flag is not set at minimum to Warning π’ | 1 | π’ x6 |
π Google Cloud SQL Instance Automated Backups are not configured π’ | 1 | π’ x6 |
π Google Cloud SQL Server Instance cross db ownership chaining Database Flag is not set to off π’ | 1 | π’ x6 |
π Google Cloud SQL Server Instance user connections Database Flag is set to a limiting (other than 0) value π’ | 1 | π’ x6 |