Project Description
Identify any instances or ECS tasks at risk of data exposure.
Summary:
Ensure all EC2 and ECS services does not allow excessive S3 or DynamoDB access through a missing required VPC Endpoint or misconfigured VPC endpoint policy.
Supported Issue Types:
An EC2 or ECS service found with excessive S3 or DynamoDB access via a misconfigured VPC endpoint policy or missing required VPC Endpoint.
Supported Actions:
- Restrict the access of S3 or DynamoDB
- Removed exposed data
- Create compliant VPC Endpoint
Platform:
Related Articles
Sending Events (Like GuardDuty) from CloudWatch to Lambda
Sending Events (Like GuardDuty) from CloudWatch to Lambda Someone pointed me to a Reddit post asking how to send and access the JSON from a GuardDuty finding into Lambda. This is easy if you [...]
Has the Cloud changed Software Development for Good?
Has the Cloud changed Software Development for Good? One of two concepts might have popped into your head when reading the title of this blog. Has software development improved? – OR – Has software [...]
