Cloud Security Rules | Snyk

Find out if you have vulnerabilities that put you at risk

Test your applications

All service groups

RULE	SERVICE GROUP
M CloudWatch alarm has no actions enabled	CloudWatch
M CloudWatch log group is not encrypted with customer managed key	CloudWatch
M CloudWatch log group retention period is not set	CloudWatch
M CloudWatch log metric filter and alarm are not set for changes to VPC NACLs	CloudWatch
M CloudWatch log metric filter and alarm are not set for changes to VPC network gateways	CloudWatch
M CloudWatch log metric filter and alarm are not set for CloudTrail configuration changes	CloudWatch
M Cloudwatch log metric filter and alarm are not set for Config configuration changes	CloudWatch
M CloudWatch log metric filter and alarm are not set for denied connections in VPC flow logs	CloudWatch
M CloudWatch log metric filter and alarm are not set for disabling or scheduled deletion of customer managed KMS keys	CloudWatch
M CloudWatch log metric filter and alarm are not set for IAM policy changes	CloudWatch
M CloudWatch log metric filter and alarm are not set for Management Console authentication failures	CloudWatch
M CloudWatch log metric filter and alarm are not set for Management Console sign-in without MFA	CloudWatch
M CloudWatch log metric filter and alarm are not set for S3 bucket policy changes	CloudWatch
M CloudWatch log metric filter and alarm are not set for unauthorized API calls	CloudWatch
M CloudWatch log metric filter and alarm are not set for usage of root account	CloudWatch
M CloudWatch log metric filter and alarm are not set for VPC changes	CloudWatch
M CloudWatch log metric filter and alarm are not set for VPC route table changes	CloudWatch
M CloudWatch log metric filter and alarm are not set for VPC security group changes	CloudWatch
M CloudWatch log metric filter and alarm for AWS Organizations changes are not set for the master account	CloudWatch