Cloud Security
Multi-cloud security posture management
Findings by Service
Cloud Security Findings
critical
S3 Bucket Publicly Accessible
aws路S3路logs-backup-prod
Enable Block Public Access on the bucket
critical
Root Account MFA Not Enabled
aws路IAM路root
Enable MFA on root account immediately
critical
Security Group Open SSH to Internet
aws路EC2路sg-0x1234abcd
Restrict port 22 to specific IPs
critical
RDS Instance Publicly Accessible
aws路RDS路prod-mysql-01
Disable public accessibility
high
IAM Users Without MFA (12 users)
aws路IAM路multiple
Enforce MFA policy for all IAM users
high
EKS API Endpoint Publicly Accessible
aws路EKS路prod-cluster
Restrict EKS endpoint to VPN CIDR
high
Storage Account Public Access Enabled
azure路Storage路prodstorageaccount
Disable public network access
high
CloudTrail Logging Disabled in Region
aws路CloudTrail路us-west-2
Enable CloudTrail in all regions