Blue Hexagon Documentation

All content
Space settings

Results will update as you type.

•
AWS-Redshift-Redshift-Encryption-Enabled
•
AWS-Redshift-Redshift-Nodes-Count
•
AWS-Redshift-Redshift-Parameter-Group-SSL-Required
•
AWS-Redshift-Redshift-Publicly-Accessible
•
AWS-Redshift-Redshift-Unused-Reserved-Nodes
•
AWS-Redshift-Redshift-User-Activity-Logging-Enabled
•
AWS-Route53-Domain-Auto-Renew
•
AWS-Route53-Domain-Expiry
•
AWS-Route53-Domain-Transfer-Lock
•
AWS-Route53-Foreign-Hosted-Zone
•
AWS-Route53-Route53-Dangling-DNS-Records
•
AWS-AWS-Route53-Zones-are-not-logging-to-Cloudwatch
•
AWS-S3-bucket-block-public-acl-and-uploading-public-object
•
AWS-S3-bucket-enable-remove-access-thru-public-acl
•
AWS-S3-bucket-MFA-delete-enabled
•
AWS-S3-bucket-public-policy-block-cross-account-access
•
AWS-S3-Policies-With-Write-Access
•
AWS-S3-Public
•
AWS-S3-S3-Access-Logging
•
AWS-S3-S3-Bucket-All-Users-Policy
•
AWS-S3-S3-Bucket-Encryption
•
AWS-S3-S3-Bucket-Encryption-Enforcement
•
AWS-S3-S3-Bucket-Encryption-In-Transit
•
AWS-S3-S3-Bucket-Enforce-Object-Encryption
•
AWS-S3-S3-Bucket-Lifecycle-Configuration
•
AWS-S3-S3-Bucket-Logging
•
AWS-S3-S3-Bucket-Policy-CloudFront-OAI
•
AWS-S3-S3-Bucket-Public-Access-Block
•
AWS-S3-S3-Bucket-Versioning
•
AWS-S3-S3-DNS-Compliant-Bucket-Names
•
AWS-S3-S3-Transfer-Acceleration-Enabled
•
AWS-S3-Secure-Transport
•
AWS-S3-Server-Access-Logging-Off
•
AWS-SageMaker-Jobs-Intercontainer-Unencrypted
•
AWS-SageMaker-Jobs-Network-Isolation
•
AWS-SageMaker-Jobs-Volume-Output-Unencrypted
•
AWS-SageMaker-Jobs-VPC-Settings-Configured
•
AWS-SageMaker-Models-Without-Network-Isolation
•
AWS-SageMaker-Models-Without-VPC-Settings
•
AWS-SageMaker-Notebook-Data-Encrypted
•
AWS-SageMaker-Notebook-Direct-Internet-Access
•
AWS-SageMaker-Notebook-Root-Access
•
AWS-SageMaker-Notebook-Without-VPC-Setting
•
AWS-SecretsManager-Secrets-Manager-Secret-Rotation-Enabled
•
AWS-SES-Email-DKIM-Enabled
•
AWS-Shield-Shield-Advanced-Enabled
•
AWS-Shield-Shield-Emergency-Contacts
•
AWS-Shield-Shield-Protections
•
AWS-SM-Secrets-uses-default-KMS-Key-for-encryption
•
AWS-SNS-SNS-Topic-CMK-Encryption
•
AWS-SNS-SNS-Topic-Encrypted
•
AWS-SNS-SNS-Topic-Policies
•
AWS-SQS-SQS-Cross-Account-Access
•
AWS-SQS-SQS-Dead-Letter-Queue
•
AWS-SQS-SQS-Encrypted
•
AWS-SQS-SQS-Public-Access
•
AWS-SQS-SQS-Queue-Unprocessed-Messages
•
AWS-SSM-SSM-Agent-Active-All-Instances
•
AWS-SSM-SSM-Agent-Auto-Update-Enabled
•
AWS-SSM-SSM-Agent-Latest-Version
•
AWS-SSM-SSM-Encrypted-Parameters
•
AWS-Transfer-Transfer-Logging-Enabled
•
AWS-SecurityGroup-Default-Security-Group-Restricts-All-Traffic
•
AWS-VPC-flow-logging-enable-in-all-VPCs
•
AWS-VPC-NACL-allow-ingress-from-all-source-to-port-22
•
AWS-VPC-NACL-allow-ingress-from-all-source-to-port-3389
•
AWS-VPC-No-Trust-Boundaries-in-VPC-Endpoint-Services
•
AWS-VPC-Peering-Route-Table-Least-Access
•
AWS-VPC-Security-Group-CIDR-Unexpected
•
AWS-VPC-Security-Group-CIDR-Unneeded
•
AWS-SecurityGroup-Security-Group-Ingress-Filtering-Missing
•
AWS-VPC-Security-Group-Large-CIDR
•
AWS-SecurityGroup-Security-Group-Unrestricted-Access
•
AWS-SecurityGroup-Security-Groups-With-Large-Rules
•
AWS-SecurityGroup-Security-Groups-With-Wide-Public-Ranges
•
AWS-VPC-SG-allow-ingress-from-all-source-to-port-22
•
AWS-VPC-SG-allow-ingress-from-all-source-to-port-3389
•
AWS-VPC-TransitGw-default-route-table-association-disable
•
AWS-VPC-TransitGw-default-route-table-propagation-disable
•
AWS-SecurityGroup-Unused-Security-Group
•
AWS-VPC-Whitelisted-Principles-in-VPC-Trust-Boundaries
•
AWS-Workspaces-Workspaces-IP-Access-Control
•
AWS-WorkSpaces-WorkSpaces-Volume-Encryption
•
AWS-XRay-XRay-Encryption-Enabled
•
Network_Gateway_Change_Log_Metric
•
Password Requires Symbols
•
AWS-EC2-CVE-2021-44228
•
AWS-EC2-CVE-2021-4034

Blue Hexagon Documentation

/

AWS Misconfiguration Remediations

/

AWS-VPC-Whitelisted-Principles-in-VPC-Trust-Boundaries

AWS-VPC-Whitelisted-Principles-in-VPC-Trust-Boundaries

Owned by naveen

Dec 06, 2021

Loading data...

Severity : Medium

Description : Untrusted account in VPC endpoint service permissio.

Blue Hexagon Proprietary

{"serverDuration": 15, "requestCorrelationId": "53e9538ec9c94c1f8e0a15a03d4b6686"}