logo

Database

Security

Rules

Security Rules define automated logic and checks across code, cloud, applications, and binaries. They provide a structured approach to identifying vulnerabilities, strengthening secure development practices, and aligning with compliance and risk-management standards.

Total rules

795

Targets covered

47

Mapped standards

91

0.6

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-250

Last update time: November 27, 2025

1.8

Low

Target: AWS

Technology: ELASTICACHE

CWE ID(s):

CWE-732

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: KAFKA

CWE ID(s):

CWE-778

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: RDS

CWE ID(s):

CWE-327

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: S3

CWE ID(s):

CWE-778

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: ELBV2

CWE ID(s):

CWE-306

Last update time: November 27, 2025

0.5

Low

Target: AZURE

Technology: DB_POSTGRESQL

CWE ID(s):

CWE-327

Last update time: November 27, 2025

1.3

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

0.6

Low

Target: AZURE

Technology: DB_POSTGRESQL

CWE ID(s):

CWE-327

Last update time: November 27, 2025

CSPM-233C2

CSPM

Aws Public Buckets

0.5

Low

Target: AWS

Technology: S3

CWE ID(s):

CWE-250

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: S3

CWE ID(s):

CWE-319

Last update time: November 27, 2025

4.6

Medium

Target: AWS

Technology: EC2

CWE ID(s):

CWE-497

Last update time: November 27, 2025

2.1

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-497

Last update time: November 27, 2025

CSPM-3WUW3

CSPM

Aws Public Queue

0.5

Low

Target: AWS

Technology: SQS

CWE ID(s):

CWE-250

Last update time: November 27, 2025

CSPM-42IPA

CSPM

Aws Admin Ports Open

2.7

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

CSPM-4I4IP

CSPM

Aws Persistent Logs

0.6

Low

Target: AWS

Technology: ELASTIC_BEANSTALK

CWE ID(s):

CWE-778

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: SQS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: BEDROCK

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.3

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: ACM

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: API_GATEWAY

CWE ID(s):

CWE-306

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: APP_MESH

CWE ID(s):

CWE-327

Last update time: November 27, 2025

1.3

Low

Target: AZURE

Technology: WEB_APP

CWE ID(s):

CWE-266

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: DB_MYSQL

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

1.2

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: SNS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

2.7

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

1.2

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

2.7

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-521

Last update time: November 27, 2025

0.5

Low

Target: GCP

Technology: STORAGE

CWE ID(s):

CWE-778

Last update time: November 27, 2025

0.5

Low

Target: AWS

Technology: KMS

CWE ID(s):

CWE-250

Last update time: November 27, 2025

2.7

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-521

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: APP_SERVICE

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

8.1

High

Target: AWS

Technology: S3

CWE ID(s):

CWE-552

Last update time: November 27, 2025

0.5

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-250

Last update time: November 27, 2025

2.7

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

1.7

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-521

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: VM

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: API_MANAGEMENT

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

CSPM-AOTC1

CSPM

Aws Root Access Keys

1.3

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.3

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: SAGEMAKER

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: STORAGE

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: AKS

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

1.8

Low

Target: AWS

Technology: ELASTICACHE

CWE ID(s):

CWE-732

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: EKS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

0.5

Low

Target: AWS

Technology: S3

CWE ID(s):

CWE-250

Last update time: November 27, 2025

4.6

Medium

Target: AWS

Technology: EC2

CWE ID(s):

CWE-497

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: DATA_FACTORY

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

CSPM-BN6FS

CSPM

Aws Public Snapshot

1.3

Low

Target: AWS

Technology: EBS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: COSMOS_DB

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

CSPM-BPUHB

CSPM

Aws Public Clusters

1.3

Low

Target: AWS

Technology: REDSHIFT

CWE ID(s):

CWE-306

Last update time: November 27, 2025

0.5

Low

Target: AWS

Technology: ELBV2

CWE ID(s):

CWE-327

Last update time: November 27, 2025

CSPM-C0LGW

CSPM

Aws Delivery Failing

0.6

Low

Target: AWS

Technology: CLOUDTRAIL

CWE ID(s):

CWE-778

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: DOCDB

CWE ID(s):

CWE-778

Last update time: November 27, 2025

0.5

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-250

Last update time: November 27, 2025

1.2

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

CSPM-CKKRS

CSPM

Gcp Public Buckets

1.7

Low

Target: GCP

Technology: STORAGE

CWE ID(s):

CWE-250

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: VM_SCALE_SET

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

1.7

Low

Target: AWS

Technology: SECRETS_MANAGER

CWE ID(s):

CWE-262

Last update time: November 27, 2025

1.2

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: SNS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: RDS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

CSPM-CW0N2

CSPM

Aws Rfc1918 Ip Ranges

0.5

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: ELBV2

CWE ID(s):

CWE-778

Last update time: November 27, 2025

0.6

Low

Target: AZURE

Technology: NETWORK_SECURITY_GROUP

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: DAX

CWE ID(s):

CWE-306

Last update time: November 27, 2025

2.4

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-308

Last update time: November 27, 2025

0.6

Low

Target: AZURE

Technology: MYSQL

CWE ID(s):

CWE-327

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: DB_POSTGRESQL

CWE ID(s):

CWE-602

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: OPENSEARCH

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: RDS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

4.6

Medium

Target: AWS

Technology: EC2

CWE ID(s):

CWE-497

Last update time: November 27, 2025

CSPM-DOPAL

CSPM

Aws Public Snapshots

1.3

Low

Target: AWS

Technology: RDS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: APP_SERVICE

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: KAFKA

CWE ID(s):

CWE-327

Last update time: November 27, 2025

CSPM-DWEFP

CSPM

Aws Domain Exposed

0.6

Low

Target: AWS

Technology: OPENSEARCH

CWE ID(s):

CWE-250

Last update time: November 27, 2025

CSPM-DWGAF

CSPM

Aws Mfa Disabled

1.3

Low

Target: AWS

Technology: COGNITO

CWE ID(s):

CWE-308

Last update time: November 27, 2025

0.5

Low

Target: GCP

Technology: STORAGE

CWE ID(s):

CWE-778

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: SYNAPSE

CWE ID(s):

CWE-602

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: RDS

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.8

Low

Target: AZURE

Technology: STORAGE_ACCOUNT

CWE ID(s):

CWE-732

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: CLOUDTRAIL

CWE ID(s):

CWE-117

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: REDIS

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

CSPM-EFSLR

CSPM

Aws Allow All Ingress

0.5

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

5.9

Medium

Target: AWS

Technology: IAM

CWE ID(s):

CWE-78

Last update time: November 27, 2025

CSPM-EIRRA

CSPM

Aws Ssl Not Required

1.3

Low

Target: AWS

Technology: REDSHIFT

CWE ID(s):

CWE-306

Last update time: November 27, 2025

1.3

Low

Target: AZURE

Technology: APP_SERVICE

CWE ID(s):

CWE-489

Last update time: November 27, 2025

1.3

Low

Target: AWS

Technology: ROUTE53

CWE ID(s):

CWE-306

Last update time: November 27, 2025

0.6

Low

Target: AZURE

Technology: API_MANAGEMENT

CWE ID(s):

CWE-327

Last update time: November 27, 2025

1.7

Low

Target: AZURE

Technology: KEY_VAULT

CWE ID(s):

CWE-1188

Last update time: November 27, 2025

2.7

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-521

Last update time: November 27, 2025

4.6

Medium

Target: AWS

Technology: ELBV2

CWE ID(s):

CWE-732

Last update time: November 27, 2025

1.7

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-521

Last update time: November 27, 2025

0.6

Low

Target: AWS

Technology: OPENSEARCH

CWE ID(s):

CWE-327

Last update time: November 27, 2025

CSPM-ESPIS

CSPM

Aws Public Instances

2.7

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-863

Last update time: November 27, 2025

CSPM-ESU11

CSPM

Aws Full Ssm Access

0.6

Low

Target: AWS

Technology: IAM

CWE ID(s):

CWE-250

Last update time: November 27, 2025

0.5

Low

Target: AWS

Technology: RDS

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

CSPM-EWCRF

CSPM

Aws Allow All Egress

1.7

Low

Target: AWS

Technology: EC2

CWE ID(s):

CWE-1327

Last update time: November 27, 2025

0.5

Low

Target: AZURE

Technology: DB_POSTGRESQL

CWE ID(s):

CWE-327

Last update time: November 27, 2025