IAM Policies

Ensure S3 buckets have default encryption (SSE) enabled or use a bucket policy to enforce it
Description: S3 default encryption provides a way to set the default encryption behavior for an Amazon S3 bucket. You can set default encryption on a bucket...
Fri, 24 Apr, 2020 at 6:50 PM
Ensure RDS instances storage is encrypted
Description:  Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in ...
Mon, 27 Apr, 2020 at 7:37 AM
Ensure RDS instances have backup enabled
Description:  Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in ...
Mon, 27 Apr, 2020 at 7:42 AM
Ensure EBS snapshots are encrypted
Description:  Elastic Block Store is a web service that provides block level storage volumes for use with EC2 instances. EBS volumes are highly available a...
Fri, 24 Apr, 2020 at 6:06 PM
Ensure API Gateway endpoint are not publicly accessible
Description:  When you interface with API Gateway publicly accessible endpoints, it is done through public networks. When they're configured as privat...
Sat, 25 Apr, 2020 at 7:02 PM
Ensure RDS instances is integrated with CloudWatch Logs
Description:  Amazon Relational Database Service (Amazon RDS) is a web service that makes it easier to set up, operate, and scale a relational database in ...
Mon, 27 Apr, 2020 at 7:58 AM
Ensure EC2 Instances is not older than 6 months
Description:  Amazon EC2 enables you to share your AMIs with other AWS accounts. You can allow all AWS accounts to launch the AMI (make the AMI public), or...
Tue, 28 Apr, 2020 at 5:54 PM
Ensure EC2 Instances is not older than 12 months
Description:  Amazon EC2 enables you to share your AMIs with other AWS accounts. You can allow all AWS accounts to launch the AMI (make the AMI public), or...
Tue, 28 Apr, 2020 at 5:54 PM
Ensure there are no secrets in Lambda functions variables
Description: AWS Security Hub provides you with a comprehensive view of the security state of your AWS resources. Security Hub collects security data from ...
Tue, 28 Apr, 2020 at 5:36 PM
Ensure there are no secrets in Lambda functions code
Description: AWS Security Hub provides you with a comprehensive view of the security state of your AWS resources. Security Hub collects security data fro...
Tue, 28 Apr, 2020 at 5:36 PM