● Lack of end-end Security Visibility
● 73% of Companies have Critical AWS Security Misconfigurations
● Continuous Compliance & Remediation
● Not Implementing Data Protection Mechanism
● Failure to Enable Logging on All S3 buckets. S3 Bucket Permissions.
● IAM Users Granted Direct Permissions
● Disabled, Not Enabled, or Improperly Configured CloudTrail
● Broad IP Range Access for DB Security Groups
● VPC security groups allow inbound traffic from any IP address
● Network ACLs allow All Inbound Traffic
● Unintentional exposure of Public AMIs with proprietary information
0 people found this article useful
0 people found this article useful