Project Description
Identify any instances or ECS tasks at risk of data exposure.
Summary:
Ensure all EC2 and ECS services does not allow excessive S3 or DynamoDB access through a missing required VPC Endpoint or misconfigured VPC endpoint policy.
Supported Issue Types:
An EC2 or ECS service found with excessive S3 or DynamoDB access via a misconfigured VPC endpoint policy or missing required VPC Endpoint.
Supported Actions:
- Restrict the access of S3 or DynamoDB
- Removed exposed data
- Create compliant VPC Endpoint
Platform:
Related Articles
Supercharging Security Hub: Part 4, Taking Action
In our last post, we walked through the console and highlighted making the most of the Security Hub console and some tips and tricks to make it more useful. Today I want to dive into one of the best parts of Security Hub — taking actions on events and findings.
Security Ops Waiting Game
Security Ops Waiting Game Remember in the olden days, when central IT ruled the land? If an application required fixes or new capabilities, the business put in a change order, and the IT folks
