Insecure service configuration - AWS
Description
Because of a misconfiguration in the AWS services, it is possible to identify and/or try to access resources, functionalities, network segments and ports.
Impact
- Identify ports, services and network segments. - Try to access the services found. - Get credentials, services and files information.
Recommendation
Securely configure the vulnerable service to be accessed only by authorized users.
Threat
External attacker with credentials.
Expected Remediation Time
⏱️ 45 minutes.
Requirements
185 - Encrypt sensitive information265 - Restrict access to critical processes266 - Disable insecure functionalitiesRules
Aws Invalid Header Fields Not DroppedAws Sqs Encryption DisabledAws No Sensitive Info FilterAws Certificate ExpiredAws Cache Encryption DisabledAws Anyone Can PublishAws Root Access KeysAws Intercontainer Encryption DisabledAws Unencrypted SecretsAws Public SnapshotAws Public ClustersAws Anyone Can SubscribeAws Cluster Snapshot UnencryptedAws Cluster Encryption DisabledAws Encryption At Rest DisabledAws Db Snapshot UnencryptedAws Public SnapshotsAws Iam Authentication DisabledAws Ssl Not RequiredAws Transfer Lock DisabledAws At Rest Encryption DisabledAws Catalog Encryption DisabledAws Root Signing CertificatesAws Delete Recovery Points AllowedAws Default Event Bus ExposedAws Instance Encryption DisabledAws Transit Encryption DisabledAws Replication Publicly AccessibleAws Analysis Without EncryptionAws Sns Server Side Encryption DisabledAws Notebook Encryption DisabledAws Broker Publicly AccessibleAws No Security ConfigAws Node To Node Encryption DisabledAws Repository UnencryptedAws Policies Attached To UsersAws Multiple Access KeysAws Url Without AuthenticationAws Query Results Not EncryptedAws Stream Encryption DisabledAws Default PortAws Public EndpointsAws Function ExposedAws Cluster Publicly AccessibleJson Yaml Transit Encryption DisabledJson Yaml Publicly Accessible True RedshiftTerraform Transit Encryption DisabledTerraform Endpoint Public Access TrueTerraform Allow Notaction Trust PolicyJson Yaml Allow Notaction Trust PolicyJson Yaml Uses Default PortTerraform Allow With NotresourceTerraform Require Ssl FalseJson Yaml Allow With NotresourceJson Yaml Endpoint Public Access TrueJson Yaml Require Ssl FalseTerraform Allow With Notaction LocalsTerraform Allow With NotactionJson Yaml Server Side Encryption Disabled SnsTerraform Server Side Encryption Disabled SqsJson Yaml Allow Notprincipal Trust PolicyJson Yaml Policy Attached To UserJson Yaml Server Side Encryption Disabled SqsJson Yaml Missing Iam AuthenticationTerraform Server Side Encryption Disabled SnsTerraform Uses Default PortTerraform Missing Iam AuthenticationTerraform Allow With Notresource LocalsTerraform Policy Attached To UserTerraform Publicly Accessible True RedshiftJson Yaml Allow Notaction StatementTerraform Allow Notprincipal Trust PolicyFixes