A Reflex rule to alert when S3 bucket versioning is disabled

Reflex rule that detects and remediates an S3 bucket with no SSE.

Rule to detect the deletion of an AWS account password policy.

Rule to detect disabling of S3 bucket public access blocks.

A rule for enforcing EBS Volume encryption by default.

Measure to detect when a security group with open to anywhere ingress is allowed.

A Reflex Rule for enforcing the enablement of DynamoDB point in time recovery.

Reflex enforcement measure to disallow any AMI to be modified as public

A Reflex Rule for detecting the scheduling of KMS Keys for deletion.

A Reflex Rule for enforcing KMS Key rotation.

Rule to detect the disabling of log file validation for a CloudTrail trail.

Enforces SQS queue encryption. Will encrypt queues with the default KMS key.

Rule to detect when automated backup is disabled for an RDS instance.

Automation and remediation bots for Dome9's (Continuous) Compliance Engine

Measure that automatically sets an EBS snapshot to private if made public.

Rule to detect the sharing of an RDS snapshot with the public.

gsccgs 💂📢📉 : Security Command Center # Risk # Threats # Vulnerabilities # Compliance # Assets # Findings # Sources # Posture Management

erremp 🔬🔍 : | GKE Workload Issues Remediation | Observability, Error Reporting, Logging, Cloud Assist |

fairsafepriv ⚖️⛵😎 : Fairness, Privacy & Safety # Bias # MinDiff # Tensorflow # Keras # Gemini-API

Cookielab AWS EC2 Cloudwatch Alarms terraform module