AWS New Checks

Check if Glue ML Transform Encryption at Rest is Enabled.
Profile Applicability: Level 1 Description: AWS Glue is a fully managed ETL (Extract, Transform, Load) service that facilitates data preparation and lo...
Fri, 21 Mar, 2025 at 4:58 AM
​Check if Glue ETL Jobs have CloudWatch Logs encryption enabled
Profile Applicability: Level 1 Description: AWS Glue is a fully managed ETL (Extract, Transform, Load) service that helps with preparing and loading ...
Fri, 21 Mar, 2025 at 5:16 AM
Check if Glue ETL Jobs have Job bookmark encryption enabled.
Profile Applicability: Level 1 Description: AWS Glue is a fully managed ETL (Extract, Transform, Load) service that simplifies the preparation and lo...
Fri, 21 Mar, 2025 at 5:30 AM
Check if S3 buckets have KMS encryption enabled
Profile Applicability: Level 1 Description: Amazon S3 supports server-side encryption with AWS Key Management Service (KMS) keys (SSE-KMS) to protect y...
Fri, 21 Mar, 2025 at 5:43 AM
Ensure that general-purpose bucket policies restrict access to other AWS accounts
Profile Applicability: Level 1 Description: Amazon S3 bucket policies are used to control access to S3 buckets and their objects. It is essential to co...
Fri, 21 Mar, 2025 at 5:56 AM
Ensure that logging is enabled for Amazon Athena workgroups to capture query activity.
Profile Applicability: Level 1 Description: Amazon Athena is an interactive query service that makes it easy to analyze data directly in Amazon S3 us...
Fri, 21 Mar, 2025 at 6:00 AM
Ensure that encryption at rest is enabled for Amazon Athena query results stored in Amazon S3 in order to secure data and meet compliance requirements for data-at-rest encryption.
Profile Applicability: Level 1 Description: Amazon Athena is an interactive query service that makes it easy to analyze data stored in Amazon S3 usin...
Fri, 21 Mar, 2025 at 6:22 AM
Ensure that workgroup configuration is enforced so it cannot be overriden by client-side settings.
Profile Applicability: Level 1 Description: In Amazon Athena, workgroups are used to organize users and their query resources. Workgroup configuration ...
Fri, 21 Mar, 2025 at 6:47 AM
Check if a Premium support plan is subscribed.
Profile Applicability: Level 1 Description: AWS Premium Support offers 24/7 access to AWS Cloud Support Engineers, with advanced technical support fo...
Fri, 21 Mar, 2025 at 7:02 AM
Check if Amazon Elasticsearch/Opensearch Service domains have audit logging enabled
Profile Applicability: Level 1 Description: Amazon Elasticsearch Service (Amazon ES) and Amazon OpenSearch Service are managed services for running E...
Fri, 21 Mar, 2025 at 8:00 AM