| 🛡️ AWS CloudTrail Log File Validation is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS CloudTrail S3 Bucket Access Logging is not enabled.🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS EC2 Security Group allows public IPv4 (0.0.0.0/0) access to admin ports🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS EC2 Security Group allows public IPv6 (::/0) access to admin ports🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS EC2 Security Group allows unrestricted traffic to MongoDB🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS EC2 Security Group allows unrestricted traffic to Oracle DBMS🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS IAM User has inline or directly attached policies🟢 | 1 | 🟠 x1, 🟢 x5 | no data |
| 🛡️ AWS S3 Bucket is not configured to block public access🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS S3 Bucket Policy is not set to deny HTTP requests🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS S3 Bucket Server Access Logging is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ AWS VPC Flow Logs are not enabled🟢 | 1 | 🟠 x1, 🟢 x5 | no data |
| 🛡️ Azure Diagnostic Setting for Azure Key Vault is not enabled🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Azure PostgreSQL Flexible Server connection_throttle.enable Parameter is not set to ON🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure PostgreSQL Flexible Server log_checkpoints Parameter is not set to ON🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure PostgreSQL Flexible Server log_retention_days Parameter is less than 4 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure PostgreSQL Single Server log_connections Parameter is not set to ON🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure PostgreSQL Single Server log_disconnections Parameter is not set to ON🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure SQL Server Auditing is not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure SQL Server Auditing Retention is less than 90 days🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Storage Blob Logging is not enabled for Read, Write, and Delete requests🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Storage Queue Logging is not enabled for Read, Write, and Delete requests🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Subscription Activity Log Alert for Create or Update Network Security Group does not exist🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Subscription Activity Log Alert for Create or Update Security Solution does not exist🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Subscription Activity Log Alert for Create Policy Assignment does not exist🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Subscription Activity Log Alert for Delete Network Security Group does not exist🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Subscription Activity Log Alert for Delete Policy Assignment does not exist🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Azure Subscription Activity Log Alert for Delete Security Solution does not exist🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google BigQuery Dataset is anonymously or publicly accessible🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud Audit Logging is not configured properly🟢 | 1 | 🟢 x6 | no data |
🛡️ Google Cloud PostgreSQL Instance Log_error_verbosity Database Flag is not set to DEFAULT or stricter🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud PostgreSQL Instance Log_connections Database Flag is not set to On🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud PostgreSQL Instance Log_disconnections Database Flag is not set to On🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud PostgreSQL Instance Log_min_error_statement Database Flag is not set to Error or stricter🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud PostgreSQL Instance Log_min_messages Database Flag is not set at minimum to Warning🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud PostgreSQL Instance Log_statement Database Flag is not set appropriately🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud SQL Instance External Authorized Networks whitelists all public IP addresses🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google Cloud SQL Instance SSL Connections are not enforced🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Firewall Rule logging is disabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Instance has a public IP address🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted CiscoSecure/WebSM traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted DNS traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted FTP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted HTTP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted LDAP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted NetBIOS traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted POP3 traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted SMTP traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted SSH traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Cassandra🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Directory services"🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Elasticsearch🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Memcached🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to MongoDB🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to MySQL🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to OracleDB🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to PostgreSQL🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted traffic to Redis🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Network allows unrestricted Telnet traffic🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GCE Subnetwork Flow Logs are not enabled🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GKE Cluster Network policy is disabled.🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google GKE Cluster Node Pool uses default Service account🟢 | 1 | 🟢 x6 | no data |
| 🛡️ Google HTTPS or SSL Proxy Load Balancer permits SSL policies with weak cipher suites🟢⚪ | | 🟢 x2, ⚪ x1 | no data |
| 🛡️ Google Storage Bucket is anonymously or publicly accessible🟢 | 1 | 🟢 x6 | no data |