Project: KICS (Provisioning / Security & Compliance)
File: cloudformation-queries.md

This page contains all queries from CloudFormation. Below are listed queries related to CloudFormation AWS: | Query |Severity|Category|More info| ||--|--|--| |Amazon DMS Replication Instance Is Publicly Accessible<br/><sup><sub>5864fb39-d719-4182-80e2-89dbe627be63</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/5864fb39-d719-4182-80e2-89dbe627be63" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dms-replicationinstance.html">Documentation</a><br/>| |ECR Repository Is Publicly Accessible<br/><sup><sub>75be209d-1948-41f6-a8c8-e22dd0121134</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/75be209d-1948-41f6-a8c8-e22dd0121134" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html">Documentation</a><br/>| |S3 Bucket Access to Any Principal<br/><sup><sub>7772bb8c-c0f3-42d4-8e4e-f1b8939ad085</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/7772bb8c-c0f3-42d4-8e4e-f1b8939ad085" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket ACL Allows Read Or Write to All Users<br/><sup><sub>07dda8de-d90d-469e-9b37-1aca53526ced</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/07dda8de-d90d-469e-9b37-1aca53526ced" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket Allows Delete Action From All Principals<br/><sup><sub>acc78859-765e-4011-a229-a65ea57db252</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/acc78859-765e-4011-a229-a65ea57db252" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket Allows Put Action From All Principals<br/><sup><sub>f6397a20-4cf1-4540-a997-1d363c25ef58</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/f6397a20-4cf1-4540-a997-1d363c25ef58" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket With All Permissions<br/><sup><sub>4ae8af91-5108-42cb-9471-3bdbe596eac9</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/4ae8af91-5108-42cb-9471-3bdbe596eac9" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |SNS Topic is Publicly Accessible<br/><sup><sub>ae53ce91-42b5-46bf-a84f-9a13366a4f13</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../cloudformation-queries/aws/ae53ce91-42b5-46bf-a84f-9a13366a4f13" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-policy.html">Documentation</a><br/>| |RDS DB Instance Publicly Accessible<br/><sup><sub>de38e1d5-54cb-4111-a868-6f7722695007</sub></sup>|<span style="color:#ff0000">Critical</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/de38e1d5-54cb-4111-a868-6f7722695007" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |DB Security Group With Public Scope<br/><sup><sub>9564406d-e761-4e61-b8d7-5926e3ab8e79</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/9564406d-e761-4e61-b8d7-5926e3ab8e79" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |RDS Associated with Public Subnet<br/><sup><sub>4e88adee-a8eb-4605-a78d-9fb1096e3091</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/4e88adee-a8eb-4605-a78d-9fb1096e3091" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-dbsubnetgroupname">Documentation</a><br/>| |Cross-Account IAM Assume Role Policy Without ExternalId or MFA<br/><sup><sub>85138beb-ce7c-4ca3-a09f-e8fbcc57ddd7</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/85138beb-ce7c-4ca3-a09f-e8fbcc57ddd7" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html#cfn-iam-role-assumerolepolicydocument">Documentation</a><br/>| |ECS Service Admin Role Is Present<br/><sup><sub>01986452-bdd8-4aaa-b5df-d6bf61d616ff</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/01986452-bdd8-4aaa-b5df-d6bf61d616ff" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html">Documentation</a><br/>| |IAM Policy Grants Full Permissions<br/><sup><sub>f62aa827-4ade-4dc4-89e4-1433d384a368</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/f62aa827-4ade-4dc4-89e4-1433d384a368" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html">Documentation</a><br/>| |Lambda Functions With Full Privileges<br/><sup><sub>a0ae0a4e-712b-4115-8112-51b9eeed9d69</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/a0ae0a4e-712b-4115-8112-51b9eeed9d69" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html">Documentation</a><br/>| |MSK Broker Is Publicly Accessible<br/><sup><sub>0ce1ba20-8ba8-4364-836f-40c24b8cb0ab</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/0ce1ba20-8ba8-4364-836f-40c24b8cb0ab" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-publicaccess.html">Documentation</a><br/>| |Neptune Cluster With IAM Database Authentication Disabled<br/><sup><sub>a3aa0087-8228-4e7e-b202-dc9036972d02</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/a3aa0087-8228-4e7e-b202-dc9036972d02" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptune-dbcluster.html#cfn-neptune-dbcluster-iamauthenabled">Documentation</a><br/>| |S3 Bucket ACL Allows Read to All Users<br/><sup><sub>219f4c95-aa50-44e0-97de-cf71f4641170</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/219f4c95-aa50-44e0-97de-cf71f4641170" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket ACL Allows Read to Any Authenticated User<br/><sup><sub>835d5497-a526-4aea-a23f-98a9afd1635f</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/835d5497-a526-4aea-a23f-98a9afd1635f" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket Allows Get Action From All Principals<br/><sup><sub>f97b7d23-568f-4bcc-9ac9-02df0d57fbba</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/f97b7d23-568f-4bcc-9ac9-02df0d57fbba" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket Allows List Action From All Principals<br/><sup><sub>faa8fddf-c0aa-4b2d-84ff-e993e233ebe9</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/faa8fddf-c0aa-4b2d-84ff-e993e233ebe9" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |S3 Bucket Allows Public Policy<br/><sup><sub>860ba89b-b8de-4e72-af54-d6aee4138a69</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/860ba89b-b8de-4e72-af54-d6aee4138a69" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-publicaccessblockconfiguration.html">Documentation</a><br/>| |S3 Bucket Allows Restore Actions From All Principals<br/><sup><sub>456b00a3-1072-4149-9740-6b8bb60251b0</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../cloudformation-queries/aws/456b00a3-1072-4149-9740-6b8bb60251b0" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |AmazonMQ Broker Encryption Disabled<br/><sup><sub>316278b3-87ac-444c-8f8f-a733a28da60f</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/316278b3-87ac-444c-8f8f-a733a28da60f" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amazonmq-broker.html#cfn-amazonmq-broker-encryptionoptions">Documentation</a><br/>| |API Gateway Cache Encrypted Disabled<br/><sup><sub>37cca703-b74c-48ba-ac81-595b53398e9b</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/37cca703-b74c-48ba-ac81-595b53398e9b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-deployment-stagedescription.html">Documentation</a><br/>| |CMK Unencrypted Storage<br/><sup><sub>ffee2785-c347-451e-89f3-11aeb08e5c84</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/ffee2785-c347-451e-89f3-11aeb08e5c84" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |Config Rule For Encrypted Volumes Disabled<br/><sup><sub>1b6322d9-c755-4f8c-b804-32c19250f2d9</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/1b6322d9-c755-4f8c-b804-32c19250f2d9" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-source">Documentation</a><br/>| |DynamoDB Table Not Encrypted<br/><sup><sub>4bd21e68-38c1-4d58-acdc-6a14b203237f</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/4bd21e68-38c1-4d58-acdc-6a14b203237f" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-ssespecification.html">Documentation</a><br/>| |DynamoDB With Aws Owned CMK<br/><sup><sub>c8dee387-a2e6-4a73-a942-183c975549ac</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/c8dee387-a2e6-4a73-a942-183c975549ac" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-ssespecification.html">Documentation</a><br/>| |EBS Volume Encryption Disabled<br/><sup><sub>80b7ac3f-d2b7-4577-9b10-df7913497162</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/80b7ac3f-d2b7-4577-9b10-df7913497162" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html">Documentation</a><br/>| |ECS Cluster Not Encrypted At Rest<br/><sup><sub>6c131358-c54d-419b-9dd6-1f7dd41d180c</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/6c131358-c54d-419b-9dd6-1f7dd41d180c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html">Documentation</a><br/>| |EFS Not Encrypted<br/><sup><sub>2ff8e83c-90e1-4d68-a300-6d652112e622</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/2ff8e83c-90e1-4d68-a300-6d652112e622" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html">Documentation</a><br/>| |ElastiCache With Disabled at Rest Encryption<br/><sup><sub>e4ee3903-9225-4b6a-bdfb-e62dbadef821</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/e4ee3903-9225-4b6a-bdfb-e62dbadef821" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html#cfn-elasticache-replicationgroup-atrestencryptionenabled">Documentation</a><br/>| |ElasticSearch Encryption With KMS Disabled<br/><sup><sub>d926aa95-0a04-4abc-b20c-acf54afe38a1</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/d926aa95-0a04-4abc-b20c-acf54afe38a1" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html#cfn-elasticsearch-domain-encryptionatrestoptions">Documentation</a><br/>| |ElasticSearch Not Encrypted At Rest<br/><sup><sub>86a248ab-0e01-4564-a82a-878303e253bb</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/86a248ab-0e01-4564-a82a-878303e253bb" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html#cfn-elasticsearch-domain-encryptionatrestoptions">Documentation</a><br/>| |ELB Using Weak Ciphers<br/><sup><sub>809f77f8-d10e-4842-a84f-3be7b6ff1190</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/809f77f8-d10e-4842-a84f-3be7b6ff1190" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html">Documentation</a><br/>| |Kinesis SSE Not Configured<br/><sup><sub>7f65be75-90ab-4036-8c2a-410aef7bb650</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/7f65be75-90ab-4036-8c2a-410aef7bb650" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kinesis-stream.html">Documentation</a><br/>| |MSK Cluster Encryption Disabled<br/><sup><sub>a976d63f-af0e-46e8-b714-8c1a9c4bf768</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/a976d63f-af0e-46e8-b714-8c1a9c4bf768" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-cluster.html">Documentation</a><br/>| |Neptune Database Cluster Encryption Disabled<br/><sup><sub>bf4473f1-c8a2-4b1b-8134-bd32efabab93</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/bf4473f1-c8a2-4b1b-8134-bd32efabab93" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-neptune-dbcluster.html">Documentation</a><br/>| |RDS Storage Encryption Disabled<br/><sup><sub>65844ba3-03a1-40a8-b3dd-919f122e8c95</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/65844ba3-03a1-40a8-b3dd-919f122e8c95" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html#cfn-rds-dbcluster-storageencrypted">Documentation</a><br/>| |RDS Storage Not Encrypted<br/><sup><sub>5beacce3-4020-4a3d-9e1d-a36f953df630</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/5beacce3-4020-4a3d-9e1d-a36f953df630" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |Redshift Not Encrypted<br/><sup><sub>3b316b05-564c-44a7-9c3f-405bb95e211e</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/3b316b05-564c-44a7-9c3f-405bb95e211e" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html">Documentation</a><br/>| |S3 Bucket Without Server-side-encryption<br/><sup><sub>b2e8752c-3497-4255-98d2-e4ae5b46bbf5</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/b2e8752c-3497-4255-98d2-e4ae5b46bbf5" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AmazonS3/latest/user-guide/default-bucket-encryption.html">Documentation</a><br/>| |SageMaker Data Encryption Disabled<br/><sup><sub>709e6da6-fa1f-44cc-8f17-7f25f96dadbe</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a

target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-notebookinstance.html">Documentation</a><br/>| |User Data Contains Encoded Private Key<br/><sup><sub>568cc372-ca64-420d-9015-ee347d00d288</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/568cc372-ca64-420d-9015-ee347d00d288" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-as-launchconfig.html">Documentation</a><br/>| |Workspace Without Encryption<br/><sup><sub>89827c57-5a8a-49eb-9731-976a606d70db</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../cloudformation-queries/aws/89827c57-5a8a-49eb-9731-976a606d70db" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-workspaces-workspace.html">Documentation</a><br/>| |Batch Job Definition With Privileged Container Properties<br/><sup><sub>76ddf32c-85b1-4808-8935-7eef8030ab36</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/76ddf32c-85b1-4808-8935-7eef8030ab36" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-batch-jobdefinition.html">Documentation</a><br/>| |KMS Key With Vulnerable Policy<br/><sup><sub>da905474-7454-43c0-b8d2-5756ab951aba</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/da905474-7454-43c0-b8d2-5756ab951aba" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html#cfn-kms-key-keypolicy">Documentation</a><br/>| |Lambda Functions Without Unique IAM Roles<br/><sup><sub>ae03f542-1423-402f-9cef-c834e7ee9583</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/ae03f542-1423-402f-9cef-c834e7ee9583" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html">Documentation</a><br/>| |MQ Broker Is Publicly Accessible<br/><sup><sub>68b6a789-82f8-4cfd-85de-e95332fe6a61</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/68b6a789-82f8-4cfd-85de-e95332fe6a61" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amazonmq-broker.html#cfn-amazonmq-broker-publiclyaccessible">Documentation</a><br/>| |Root Account Has Active Access Keys<br/><sup><sub>4c137350-7307-4803-8c04-17c09a7a9fcf</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/4c137350-7307-4803-8c04-17c09a7a9fcf" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html">Documentation</a><br/>| |S3 Static Website Host Enabled<br/><sup><sub>90501b1b-cded-4cc1-9e8b-206b85cda317</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/90501b1b-cded-4cc1-9e8b-206b85cda317" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-websiteconfiguration.html">Documentation</a><br/>| |Permissive Web ACL Default Action<br/><sup><sub>6d64f311-3da6-45f3-80f1-14db9771ea40</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Defaults|<a href="../cloudformation-queries/aws/6d64f311-3da6-45f3-80f1-14db9771ea40" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-waf-webacl.html">Documentation</a><br/>| |DB Security Group Open To Large Scope<br/><sup><sub>0104165b-02d5-426f-abc9-91fb48189899</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/0104165b-02d5-426f-abc9-91fb48189899" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |Default Security Groups With Unrestricted Traffic<br/><sup><sub>ea33fcf7-394b-4d11-a228-985c5d08f205</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/ea33fcf7-394b-4d11-a228-985c5d08f205" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |EC2 Sensitive Port Is Publicly Exposed<br/><sup><sub>494b03d3-bf40-4464-8524-7c56ad0700ed</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/494b03d3-bf40-4464-8524-7c56ad0700ed" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |ELB Sensitive Port Is Exposed To Entire Network<br/><sup><sub>78055456-f670-4d2e-94d5-392d1cf4f5e4</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/78055456-f670-4d2e-94d5-392d1cf4f5e4" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html">Documentation</a><br/>| |Fully Open Ingress<br/><sup><sub>e415f8d3-fc2b-4f52-88ab-1129e8c8d3f5</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/e415f8d3-fc2b-4f52-88ab-1129e8c8d3f5" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/get-set-up-for-amazon-ecs.html#create-a-base-security-group">Documentation</a><br/>| |Remote Desktop Port Open To Internet<br/><sup><sub>c9846969-d066-431f-9b34-8c4abafe422a</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/c9846969-d066-431f-9b34-8c4abafe422a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |Route53 Record Undefined<br/><sup><sub>24d932e1-91f0-46ea-836f-fdbd81694151</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/24d932e1-91f0-46ea-836f-fdbd81694151" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-hostedzone.html">Documentation</a><br/>| |Security Group Unrestricted Access To RDP<br/><sup><sub>3ae83918-7ec7-4cb8-80db-b91ef0f94002</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/3ae83918-7ec7-4cb8-80db-b91ef0f94002" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |Security Groups With Exposed Admin Ports<br/><sup><sub>cdbb0467-2957-4a77-9992-7b55b29df7b7</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/cdbb0467-2957-4a77-9992-7b55b29df7b7" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |Security Groups With Meta IP<br/><sup><sub>adcd0082-e90b-4b63-862b-21899f6e6a48</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/adcd0082-e90b-4b63-862b-21899f6e6a48" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |Unknown Port Exposed To Internet<br/><sup><sub>829ce3b8-065c-41a3-ad57-e0accfea82d2</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/829ce3b8-065c-41a3-ad57-e0accfea82d2" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |Unrestricted Security Group Ingress<br/><sup><sub>4a1e6b34-1008-4e61-a5f2-1f7c276f8d14</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/4a1e6b34-1008-4e61-a5f2-1f7c276f8d14" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group-ingress.html">Documentation</a><br/>| |Amplify App Access Token Exposed<br/><sup><sub>73980e43-f399-4fcc-a373-658228f7adf7</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/73980e43-f399-4fcc-a373-658228f7adf7" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-app.html">Documentation</a><br/>| |Amplify App Basic Auth Config Password Exposed<br/><sup><sub>71493c8b-3014-404c-9802-078b74496fb7</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/71493c8b-3014-404c-9802-078b74496fb7" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-amplify-app-basicauthconfig.html">Documentation</a><br/>| |Amplify App OAuth Token Exposed<br/><sup><sub>03b38885-8f4e-480c-a0e4-12c1affd15db</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/03b38885-8f4e-480c-a0e4-12c1affd15db" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-amplify-app-basicauthconfig.html">Documentation</a><br/>| |Amplify Branch Basic Auth Config Password Exposed<br/><sup><sub>dfb56e5d-ee68-446e-b32a-657b62befe69</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/dfb56e5d-ee68-446e-b32a-657b62befe69" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amplify-branch.html#cfn-amplify-branch-basicauthconfig">Documentation</a><br/>| |Directory Service Microsoft AD Password Set to Plaintext or Default Ref<br/><sup><sub>06b9f52a-8cd5-459b-bdc6-21a22521e1be</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/06b9f52a-8cd5-459b-bdc6-21a22521e1be" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-directoryservice-microsoftad.html">Documentation</a><br/>| |Directory Service Simple AD Password Exposed<br/><sup><sub>6685d912-d81f-4cfa-95ad-e316ea31c989</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/6685d912-d81f-4cfa-95ad-e316ea31c989" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-directoryservice-simplead.html">Documentation</a><br/>| |DMS Endpoint MongoDB Settings Password Exposed<br/><sup><sub>f988a17f-1139-46a3-8928-f27eafd8b024</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/f988a17f-1139-46a3-8928-f27eafd8b024" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dms-endpoint-mongodbsettings.html">Documentation</a><br/>| |DMS Endpoint Password Exposed<br/><sup><sub>5f700072-b7ce-4e84-b3f3-497bf1c24a4d</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/5f700072-b7ce-4e84-b3f3-497bf1c24a4d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dms-endpoint.html">Documentation</a><br/>| |DocDB Cluster Master Password In Plaintext<br/><sup><sub>39423ce4-9011-46cd-b6b1-009edcd9385d</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/39423ce4-9011-46cd-b6b1-009edcd9385d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html">Documentation</a><br/>| |Hardcoded AWS Access Key In Lambda<br/><sup><sub>2564172f-c92b-4261-9acd-464aed511696</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/2564172f-c92b-4261-9acd-464aed511696" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-environment">Documentation</a><br/>| |IAM User LoginProfile Password Is In Plaintext<br/><sup><sub>06adef8c-c284-4de7-aad2-af43b07a8ca1</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/06adef8c-c284-4de7-aad2-af43b07a8ca1" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html">Documentation</a><br/>| |RefreshToken Is Exposed<br/><sup><sub>5b48c507-0d1f-41b0-a630-76817c6b4189</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../cloudformation-queries/aws/5b48c507-0d1f-41b0-a630-76817c6b4189" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ask-skill.html#cfn-ask-skill-authenticationconfiguration">Documentation</a><br/>| |API Gateway Method Does Not Contains An API Key<br/><sup><sub>3641d5b4-d339-4bc2-bfb9-208fe8d3477f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/3641d5b4-d339-4bc2-bfb9-208fe8d3477f" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-method.html">Documentation</a><br/>| |API Gateway Without Configured Authorizer<br/><sup><sub>7fd0d461-5b8c-4815-898c-f2b4b117eb28</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/7fd0d461-5b8c-4815-898c-f2b4b117eb28" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-authorizer.html">Documentation</a><br/>| |EC2 Instance Has No IAM Role<br/><sup><sub>f914357d-8386-4d56-9ba6-456e5723f9a6</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/f914357d-8386-4d56-9ba6-456e5723f9a6" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html">Documentation</a><br/>| |EC2 Instance Using Default Security Group<br/><sup><sub>08b81bb3-0985-4023-8602-b606ad81d279</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/08b81bb3-0985-4023-8602-b606ad81d279" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-securitygroups">Documentation</a><br/>| |EC2 Network ACL Ineffective Denied Traffic<br/><sup><sub>2623d682-dccb-44cd-99d0-54d9fd62f8f2</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/2623d682-dccb-44cd-99d0-54d9fd62f8f2" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-network-acl-entry.html">Documentation</a><br/>| |Elasticsearch Without IAM Authentication<br/><sup><sub>5c666ed9-b586-49ab-9873-c495a833b705</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/5c666ed9-b586-49ab-9873-c495a833b705" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html#cfn-elasticsearch-domain-accesspolicies">Documentation</a><br/>| |Empty Roles For ECS Cluster Task Definitions<br/><sup><sub>7f384a5f-b5a2-4d84-8ca3-ee0a5247becb</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/7f384a5f-b5a2-4d84-8ca3-ee0a5247becb" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html">Documentation</a><br/>| |IAM Group Inline Policies<br/><sup><sub>a58d1a2d-4078-4b80-855b-84cc3f7f4540</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/a58d1a2d-4078-4b80-855b-84cc3f7f4540" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html">Documentation</a><br/>| |IAM Group Without Users<br/><sup><sub>8f957abd-9703-413d-87d3-c578950a753c</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/8f957abd-9703-413d-87d3-c578950a753c" target="_blank">Query details</a><br><a

|IAM Policies Attached To User<br/><sup><sub>edc95c10-7366-4f30-9b4b-f995c84eceb5</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/edc95c10-7366-4f30-9b4b-f995c84eceb5" target="blank">Query details</a><br><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/accesspolicies_managed-vs-inline.html">Documentation</a><br/>| |IAM Policies With Full Privileges<br/><sup><sub>953b3cdb-ce13-428a-aa12-318726506661</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/953b3cdb-ce13-428a-aa12-318726506661" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html">Documentation</a><br/>| |IAM Policy Grants 'AssumeRole' Permission Across All Services<br/><sup><sub>e835bd0d-65da-49f7-b6d1-b646da8727e6</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/e835bd0d-65da-49f7-b6d1-b646da8727e6" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html">Documentation</a><br/>| |IAM Policy On User<br/><sup><sub>e4239438-e639-44aa-adb8-866e400e3ade</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/e4239438-e639-44aa-adb8-866e400e3ade" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html">Documentation</a><br/>| |IAM Role Allows All Principals To Assume<br/><sup><sub>f80e3aa7-7b34-4185-954e-440a6894dde6</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/f80e3aa7-7b34-4185-954e-440a6894dde6" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html#cfn-iam-role-assumerolepolicydocument">Documentation</a><br/>| |IoT Policy Allows Action as Wildcard<br/><sup><sub>4d32780f-43a4-424a-a06d-943c543576a5</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/4d32780f-43a4-424a-a06d-943c543576a5" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-policy.html">Documentation</a><br/>| |IoT Policy Allows Wildcard Resource<br/><sup><sub>be5b230d-4371-4a28-a441-85dc760e2aa3</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/be5b230d-4371-4a28-a441-85dc760e2aa3" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iot-policy.html">Documentation</a><br/>| |KMS Allows Wildcard Principal<br/><sup><sub>f6049677-ec4a-43af-8779-5190b6d03cba</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/f6049677-ec4a-43af-8779-5190b6d03cba" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html">Documentation</a><br/>| |Lambda Permission Principal Is Wildcard<br/><sup><sub>1d6e16f1-5d8a-4379-bfb3-2dadd38ed5a7</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/1d6e16f1-5d8a-4379-bfb3-2dadd38ed5a7" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html">Documentation</a><br/>| |Public Lambda via API Gateway<br/><sup><sub>57b12981-3816-4c31-b190-a1e614361dd2</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/57b12981-3816-4c31-b190-a1e614361dd2" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html">Documentation</a><br/>| |S3 Bucket Allows Public ACL<br/><sup><sub>48f100d9-f499-4c6d-b2b8-deafe47ffb26</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/48f100d9-f499-4c6d-b2b8-deafe47ffb26" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-publicaccessblockconfiguration.html">Documentation</a><br/>| |SNS Topic Publicity Has Allow and NotAction Simultaneously<br/><sup><sub>818f38ed-8446-4132-9c03-474d49e10195</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/818f38ed-8446-4132-9c03-474d49e10195" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-sns-policy">Documentation</a><br/>| |SQS Policy With Public Access<br/><sup><sub>9b6a3f5b-5fd6-40ee-9bc0-ed604911212d</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../cloudformation-queries/aws/9b6a3f5b-5fd6-40ee-9bc0-ed604911212d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-policy.html">Documentation</a><br/>| |Auto Scaling Group With No Associated ELB<br/><sup><sub>ad21e616-5026-4b9d-990d-5b007bfe679c</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../cloudformation-queries/aws/ad21e616-5026-4b9d-990d-5b007bfe679c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-as-group.html">Documentation</a><br/>| |CMK Is Unusable<br/><sup><sub>2844c749-bd78-4cd1-90e8-b179df827602</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../cloudformation-queries/aws/2844c749-bd78-4cd1-90e8-b179df827602" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html">Documentation</a><br/>| |ElastiCache Nodes Not Created Across Multi AZ<br/><sup><sub>cfdef2e5-1fe4-4ef4-bea8-c56e08963150</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../cloudformation-queries/aws/cfdef2e5-1fe4-4ef4-bea8-c56e08963150" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-cache-cluster.html">Documentation</a><br/>| |RDS Multi-AZ Deployment Disabled<br/><sup><sub>2b1d4935-9acf-48a7-8466-10d18bf51a69</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../cloudformation-queries/aws/2b1d4935-9acf-48a7-8466-10d18bf51a69" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |RDS With Backup Disabled<br/><sup><sub>8c415f6f-7b90-4a27-a44a-51047e1506f9</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../cloudformation-queries/aws/8c415f6f-7b90-4a27-a44a-51047e1506f9" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |S3 Bucket Without Versioning<br/><sup><sub>a227ec01-f97a-4084-91a4-47b350c1db54</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../cloudformation-queries/aws/a227ec01-f97a-4084-91a4-47b350c1db54" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |Stack Retention Disabled<br/><sup><sub>fe974ae9-858e-4991-bbd5-e040a834679f</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../cloudformation-queries/aws/fe974ae9-858e-4991-bbd5-e040a834679f" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudformation-stackset-autodeployment.html#cfn-cloudformation-stackset-autodeployment-retainstacksonaccountremoval">Documentation</a><br/>| |DynamoDB Table Point In Time Recovery Disabled<br/><sup><sub>0f04217d-488f-4e7a-bec8-f16159686cd6</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../cloudformation-queries/aws/0f04217d-488f-4e7a-bec8-f16159686cd6" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-dynamodb-table-pointintimerecoveryspecification.html">Documentation</a><br/>| |ECS No Load Balancer Attached<br/><sup><sub>fb2b0ecf-1492-491a-a70d-ba1df579175d</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../cloudformation-queries/aws/fb2b0ecf-1492-491a-a70d-ba1df579175d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html">Documentation</a><br/>| |IAM Managed Policy Applied to a User<br/><sup><sub>0e5872b4-19a0-4165-8b2f-56d9e14b909f</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../cloudformation-queries/aws/0e5872b4-19a0-4165-8b2f-56d9e14b909f" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html#cfn-iam-managedpolicy-groups">Documentation</a><br/>| |IAM User Without Password Reset<br/><sup><sub>a964d6e3-8e1e-4d93-8120-61fa640dd55a</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../cloudformation-queries/aws/a964d6e3-8e1e-4d93-8120-61fa640dd55a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user-loginprofile.html">Documentation</a><br/>| |Alexa Skill Plaintext Client Secret Exposed<br/><sup><sub>3c3b7a58-b018-4d07-9444-d9ee7156e111</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/3c3b7a58-b018-4d07-9444-d9ee7156e111" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ask-skill.html#cfn-ask-skill-authenticationconfiguration">Documentation</a><br/>| |CloudFormation Specifying Credentials Not Safe<br/><sup><sub>9ecb6b21-18bc-4aa7-bd07-db20f1c746db</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/9ecb6b21-18bc-4aa7-bd07-db20f1c746db" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-authentication.html">Documentation</a><br/>| |Cloudfront Viewer Protocol Policy Allows HTTP<br/><sup><sub>31733ee2-fef0-4e87-9778-65da22a8ecf1</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/31733ee2-fef0-4e87-9778-65da22a8ecf1" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html">Documentation</a><br/>| |CodeBuild Not Encrypted<br/><sup><sub>d7467bb6-3ed1-4c82-8095-5e7a818d0aad</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/d7467bb6-3ed1-4c82-8095-5e7a818d0aad" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codebuild-project.html">Documentation</a><br/>| |Connection Between CloudFront Origin Not Encrypted<br/><sup><sub>a5366a50-932f-4085-896b-41402714a388</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/a5366a50-932f-4085-896b-41402714a388" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html">Documentation</a><br/>| |Default KMS Key Usage<br/><sup><sub>e52395b4-250b-4c60-81d5-2e58c1d37abc</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/e52395b4-250b-4c60-81d5-2e58c1d37abc" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |EFS Volume With Disabled Transit Encryption<br/><sup><sub>c1282e03-b285-4637-aee7-eefe3a7bb658</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/c1282e03-b285-4637-aee7-eefe3a7bb658" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/efs-volumes.html">Documentation</a><br/>| |ElastiCache With Disabled Transit Encryption<br/><sup><sub>3b02569b-fc6f-4153-b3a3-ba91022fed68</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/3b02569b-fc6f-4153-b3a3-ba91022fed68" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html">Documentation</a><br/>| |ELB Using Insecure Protocols<br/><sup><sub>61a94903-3cd3-4780-88ec-fc918819b9c8</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/61a94903-3cd3-4780-88ec-fc918819b9c8" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html">Documentation</a><br/>| |ELB Without Secure Protocol<br/><sup><sub>80908a75-586b-4c61-ab04-490f4f4525b8</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/80908a75-586b-4c61-ab04-490f4f4525b8" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb.html">Documentation</a><br/>| |EMR Security Configuration Encryption Disabled<br/><sup><sub>5b033ec8-f079-4323-b5c8-99d4620433a9</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/5b033ec8-f079-4323-b5c8-99d4620433a9" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-emr-securityconfiguration.html">Documentation</a><br/>| |IAM Database Auth Not Enabled<br/><sup><sub>9fcd0a0a-9b6f-4670-a215-d94e6bf3f184</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/9fcd0a0a-9b6f-4670-a215-d94e6bf3f184" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-enableiamdatabaseauthentication">Documentation</a><br/>| |KMS Key Rotation Disabled<br/><sup><sub>235ca980-eb71-48f4-9030-df0c371029eb</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/235ca980-eb71-48f4-9030-df0c371029eb" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html">Documentation</a><br/>| |Redshift Cluster Without KMS CMK<br/><sup><sub>de76a0d6-66d5-45c9-9022-f05545b85c78</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/de76a0d6-66d5-45c9-9022-f05545b85c78" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html">Documentation</a><br/>| |S3 Bucket Without SSL In Write Actions<br/><sup><sub>38c64e76-c71e-4d92-a337-60174d1de1c9</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/38c64e76-c71e-4d92-a337-60174d1de1c9" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |SageMaker EndPoint Config Should Specify KmsKeyId Attribute<br/><sup><sub>44034eda-1c3f-486a-831d-e09a7dd94354</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/44034eda-1c3f-486a-831d-e09a7dd94354" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-endpointconfig.html">Documentation</a><br/>| |Secure Ciphers Disabled<br/><sup><sub>be96849c-3df6-49c2-bc16-778a7be2519c</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/be96849c-3df6-49c2-bc16-778a7be2519c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-viewercertificate.html">Documentation</a><br/>| |SQS With SSE Disabled<br/><sup><sub>12726829-93ed-4d51-9cbe-13423f4299e1</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/12726829-93ed-4d51-9cbe-13423f4299e1" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sqs-queues.html#aws-sqs-queue-kmsmasterkeyid">Documentation</a><br/>| |API Gateway With Open Access<br/><sup><sub>1056dfbb-5802-4762-bf2b-8b9b9684b1b0</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/1056dfbb-5802-4762-bf2b-8b9b9684b1b0" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-method.html">Documentation</a><br/>| |API Gateway Without Security Policy<br/><sup><sub>8275fab0-68ec-4705-bbf4-86975edb170e</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/8275fab0-68ec-4705-bbf4-86975edb170e" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html#cfn-apigateway-domainname-securitypolicy">Documentation</a><br/>| |API Gateway Without SSL Certificate<br/><sup><sub>ed4c48b8-eccc-4881-95c1-09fdae23db25</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/ed4c48b8-eccc-4881-95c1-09fdae23db25" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-stage.html">Documentation</a><br/>| |CloudFront Without Minimum Protocol TLS 1.2<br/><sup><sub>dc17ee4b-ddf2-4e23-96e8-7a36abad1303</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/dc17ee4b-ddf2-4e23-96e8-7a36abad1303" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html">Documentation</a><br/>| |ECR Image Tag Not Immutable<br/><sup><sub>33f41d31-86b1-46a4-81f7-9c9a671f59ac</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/33f41d31-86b1-46a4-81f7-9c9a671f59ac" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html">Documentation</a><br/>| |ECS Task Definition Network Mode Not Recommended<br/><sup><sub>027a4b7a-8a59-4938-a04f-ed532512cf45</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a

target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-taskdefinition.html#cfn-ecs-taskdefinition-networkmode">Documentation</a><br/>| |EMR Cluster Without Security Configuration<br/><sup><sub>48af92a5-c89b-4936-bc62-1086fe2bab23</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/48af92a5-c89b-4936-bc62-1086fe2bab23" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticmapreduce-cluster.html#cfn-elasticmapreduce-cluster-securityconfiguration">Documentation</a><br/>| |GitHub Repository Set To Public<br/><sup><sub>5906092d-5f74-490d-9a03-78febe0f65e1</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/5906092d-5f74-490d-9a03-78febe0f65e1" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-codestar-githubrepository.html">Documentation</a><br/>| |IAM User Has Too Many Access Keys<br/><sup><sub>48677914-6fdf-40ec-80c4-2b0e94079f54</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/48677914-6fdf-40ec-80c4-2b0e94079f54" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html">Documentation</a><br/>| |Redshift Publicly Accessible<br/><sup><sub>bdf8dcb4-75df-4370-92c4-606e4ae6c4d3</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/bdf8dcb4-75df-4370-92c4-606e4ae6c4d3" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html">Documentation</a><br/>| |S3 Bucket With Unsecured CORS Rule<br/><sup><sub>3609d27c-3698-483a-9402-13af6ae80583</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/3609d27c-3698-483a-9402-13af6ae80583" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-cors.html">Documentation</a><br/>| |S3 Bucket Without Ignore Public ACL<br/><sup><sub>6c8d51af-218d-4bfb-94a9-94eabaa0703a</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/6c8d51af-218d-4bfb-94a9-94eabaa0703a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-publicaccessblockconfiguration.html">Documentation</a><br/>| |S3 Bucket Without Restriction Of Public Bucket<br/><sup><sub>350cd468-0e2c-44ef-9d22-cfb73a62523c</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/350cd468-0e2c-44ef-9d22-cfb73a62523c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-publicaccessblockconfiguration.html">Documentation</a><br/>| |SageMaker Enabling Internet Access<br/><sup><sub>88d55d94-315d-4564-beee-d2d725feab11</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/88d55d94-315d-4564-beee-d2d725feab11" target="blank">Query details</a><br><a href="https://docs.aws.amazon.com/sagemaker/latest/dg/securityiam_id-based-policy-examples.html#sagemaker-condition-nbi-lockdown">Documentation</a><br/>| |Vulnerable Default SSL Certificate<br/><sup><sub>b4d9c12b-bfba-4aeb-9cb8-2358546d8041</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../cloudformation-queries/aws/b4d9c12b-bfba-4aeb-9cb8-2358546d8041" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudfront-distribution.html">Documentation</a><br/>| |ALB Is Not Integrated With WAF<br/><sup><sub>105ba098-1e34-48cd-b0f2-a8a43a51bf9b</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/105ba098-1e34-48cd-b0f2-a8a43a51bf9b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafregional-webaclassociation.html">Documentation</a><br/>| |ALB Listening on HTTP<br/><sup><sub>275a3217-ca37-40c1-a6cf-bb57d245ab32</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/275a3217-ca37-40c1-a6cf-bb57d245ab32" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb-listener.html#cfn-ec2-elb-listener-protocol">Documentation</a><br/>| |API Gateway Endpoint Config is Not Private<br/><sup><sub>4a8daf95-709d-4a36-9132-d3e19878fa34</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/4a8daf95-709d-4a36-9132-d3e19878fa34" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-restapi-endpointconfiguration.html#cfn-apigateway-restapi-endpointconfiguration-types">Documentation</a><br/>| |API Gateway without WAF<br/><sup><sub>fcbf9019-566c-4832-a65c-af00d8137d2b</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/fcbf9019-566c-4832-a65c-af00d8137d2b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-wafv2-webaclassociation.html#cfn-wafv2-webaclassociation-resourcearn">Documentation</a><br/>| |CloudFront Without WAF<br/><sup><sub>0f139403-303f-467c-96bd-e717e6cfd62d</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/0f139403-303f-467c-96bd-e717e6cfd62d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html#cfn-cloudfront-distribution-distributionconfig-webaclid">Documentation</a><br/>| |EC2 Instance Subnet Has Public IP Mapping On Launch<br/><sup><sub>b3de4e4c-14be-4159-b99d-9ad194365e4c</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/b3de4e4c-14be-4159-b99d-9ad194365e4c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnet.html#cfn-ec2-subnet-mappubliciponlaunch">Documentation</a><br/>| |EC2 Network ACL Overlapping Ports<br/><sup><sub>77b6f1e2-bde4-4a6a-ae7e-a40659ff1576</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/77b6f1e2-bde4-4a6a-ae7e-a40659ff1576" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-networkaclentry-portrange.html">Documentation</a><br/>| |EC2 Permissive Network ACL Protocols<br/><sup><sub>03879981-efa2-47a0-a818-c843e1441b88</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/03879981-efa2-47a0-a818-c843e1441b88" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-network-acl-entry.html">Documentation</a><br/>| |EC2 Public Instance Exposed Through Subnet<br/><sup><sub>c44c95fc-ae92-4bb8-bdf8-bb9bc412004a</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/c44c95fc-ae92-4bb8-bdf8-bb9bc412004a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route.html">Documentation</a><br/>| |EKS node group remote access<br/><sup><sub>73d59e76-a12c-4b74-a3d8-d3e1e19c25b3</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/73d59e76-a12c-4b74-a3d8-d3e1e19c25b3" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-eks-nodegroup.html">Documentation</a><br/>| |Elasticsearch with HTTPS disabled<br/><sup><sub>4cdc88e6-c0c8-4081-a639-bb3a557cbedf</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/4cdc88e6-c0c8-4081-a639-bb3a557cbedf" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticsearch-domain-domainendpointoptions.html">Documentation</a><br/>| |ELB With Security Group Without Inbound Rules<br/><sup><sub>e200a6f3-c589-49ec-9143-7421d4a2c845</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/e200a6f3-c589-49ec-9143-7421d4a2c845" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2-securitygroup-securitygroupingress">Documentation</a><br/>| |ELB With Security Group Without Outbound Rules<br/><sup><sub>01d5a458-a6c4-452a-ac50-054d59275b7c</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/01d5a458-a6c4-452a-ac50-054d59275b7c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html#cfn-ec2-securitygroup-securitygroupegress">Documentation</a><br/>| |GameLift Fleet EC2 InboundPermissions With Port Range<br/><sup><sub>43356255-495d-4148-ad8d-f6af5eac09dd</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/43356255-495d-4148-ad8d-f6af5eac09dd" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-gamelift-fleet.html">Documentation</a><br/>| |HTTP Port Open To Internet<br/><sup><sub>ddfc4eaa-af23-409f-b96c-bf5c45dc4daa</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/ddfc4eaa-af23-409f-b96c-bf5c45dc4daa" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |SageMaker Notebook Not Placed In VPC<br/><sup><sub>9c7028d9-04c2-45be-b8b2-1188ccaefb36</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/9c7028d9-04c2-45be-b8b2-1188ccaefb36" target="blank">Query details</a><br><a href="https://docs.aws.amazon.com/sagemaker/latest/dg/securityiam_id-based-policy-examples.html#sagemaker-condition-nbi-lockdown">Documentation</a><br/>| |Security Group Egress CIDR Open To World<br/><sup><sub>1cc2fbd7-816c-4fbf-ad6d-38a4afa4312a</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/1cc2fbd7-816c-4fbf-ad6d-38a4afa4312a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-security-group-egress.html">Documentation</a><br/>| |Security Group Egress With All Protocols<br/><sup><sub>ee464fc2-54a6-4e22-b10a-c6dcd2474d0c</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/ee464fc2-54a6-4e22-b10a-c6dcd2474d0c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-security-group-egress.html">Documentation</a><br/>| |Security Group Egress With Port Range<br/><sup><sub>dae9c373-8287-462f-8746-6f93dad93610</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/dae9c373-8287-462f-8746-6f93dad93610" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-security-group-egress.html">Documentation</a><br/>| |Security Group Ingress With All Protocols<br/><sup><sub>1a427b25-2e9e-4298-9530-0499a55e736b</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/1a427b25-2e9e-4298-9530-0499a55e736b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group-ingress.html">Documentation</a><br/>| |Security Group Ingress With Port Range<br/><sup><sub>87482183-a8e7-4e42-a566-7a23ec231c16</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/87482183-a8e7-4e42-a566-7a23ec231c16" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group-ingress.html">Documentation</a><br/>| |Security Group With Unrestricted Access To SSH<br/><sup><sub>6e856af2-62d7-4ba2-adc1-73b62cef9cc1</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/6e856af2-62d7-4ba2-adc1-73b62cef9cc1" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |Security Groups Allows Unrestricted Outbound Traffic<br/><sup><sub>66f2d8f9-a911-4ced-ae27-34f09690bb2c</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/66f2d8f9-a911-4ced-ae27-34f09690bb2c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |TCP/UDP Protocol Network ACL Entry Allows All Ports<br/><sup><sub>f57f849c-883b-4cb7-85e7-f7b199dff163</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/f57f849c-883b-4cb7-85e7-f7b199dff163" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-network-acl-entry.html#cfn-ec2-networkaclentry-portrange">Documentation</a><br/>| |VPC Without Network Firewall<br/><sup><sub>3e293410-d5b8-411f-85fd-7d26294f20c9</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/3e293410-d5b8-411f-85fd-7d26294f20c9" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-networkfirewall-firewall.html#cfn-networkfirewall-firewall-vpcid">Documentation</a><br/>| |API Gateway Deployment Without Access Log Setting<br/><sup><sub>06ec63e3-9f72-4fe2-a218-2eb9200b8db5</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/06ec63e3-9f72-4fe2-a218-2eb9200b8db5" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-deployment.html">Documentation</a><br/>| |API Gateway V2 Stage Access Logging Settings Not Defined<br/><sup><sub>80d45af4-4920-4236-a56e-b7ef419d1941</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/80d45af4-4920-4236-a56e-b7ef419d1941" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-stage.html#cfn-apigatewayv2-stage-accesslogsettings">Documentation</a><br/>| |CloudFront Logging Disabled<br/><sup><sub>de77cd9f-0e8b-46cc-b4a4-b6b436838642</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/de77cd9f-0e8b-46cc-b4a4-b6b436838642" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/logging-and-monitoring.html">Documentation</a><br/>| |CloudTrail Logging Disabled<br/><sup><sub>5c0b06d5-b7a4-484c-aeb0-75a836269ff0</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/5c0b06d5-b7a4-484c-aeb0-75a836269ff0" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html#cfn-cloudtrail-trail-islogging">Documentation</a><br/>| |CloudWatch Logging Disabled<br/><sup><sub>0f0fb06b-0f2f-4374-8588-f2c7c348c7a0</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/0f0fb06b-0f2f-4374-8588-f2c7c348c7a0" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-route53-hostedzone.html#cfn-route53-hostedzone-queryloggingconfig">Documentation</a><br/>| |CloudWatch Metrics Disabled<br/><sup><sub>5d3c1807-acb3-4bb0-be4e-0440230feeaf</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/5d3c1807-acb3-4bb0-be4e-0440230feeaf" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cw-alarm.html">Documentation</a><br/>| |DocDB Logging Is Disabled<br/><sup><sub>1bf3b3d4-f373-4d7c-afbb-7d85948a67a5</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/1bf3b3d4-f373-4d7c-afbb-7d85948a67a5" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-docdb-dbcluster.html#cfn-docdb-dbcluster-enablecloudwatchlogsexports">Documentation</a><br/>| |EC2 Instance Monitoring Disabled<br/><sup><sub>0264093f-6791-4475-af34-4b8102dcbcd0</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/0264093f-6791-4475-af34-4b8102dcbcd0" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-monitoring">Documentation</a><br/>| |Elasticsearch Logs Disabled<br/><sup><sub>edbd62d4-8700-41de-b000-b3cfebb5e996</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a

target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html#cfn-elasticsearch-domain-logpublishingoptions">Documentation</a><br/>| |ELB Access Log Disabled<br/><sup><sub>ee12ad32-2863-4c0f-b13f-28272d115028</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/ee12ad32-2863-4c0f-b13f-28272d115028" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-elb-accessloggingpolicy.html">Documentation</a><br/>| |ELBv2 ALB Access Log Disabled<br/><sup><sub>c62e8b7d-1fdf-4050-ac4c-76ba9e1d9621</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/c62e8b7d-1fdf-4050-ac4c-76ba9e1d9621" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticloadbalancingv2-loadbalancer-loadbalancerattributes.html#cfn-elasticloadbalancingv2-loadbalancer-loadbalancerattributes-key">Documentation</a><br/>| |GuardDuty Detector Disabled<br/><sup><sub>a25cd877-375c-4121-a640-730929936fac</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/a25cd877-375c-4121-a640-730929936fac" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-detector.html">Documentation</a><br/>| |MQ Broker Logging Disabled<br/><sup><sub>e519ed6a-8328-4b69-8eb7-8fa549ac3050</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/e519ed6a-8328-4b69-8eb7-8fa549ac3050" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-amazonmq-broker.html#cfn-amazonmq-broker-logs">Documentation</a><br/>| |MSK Cluster Logging Disabled<br/><sup><sub>fc7c2c15-f5d0-4b80-adb2-c89019f8f62b</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/fc7c2c15-f5d0-4b80-adb2-c89019f8f62b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-msk-cluster.html">Documentation</a><br/>| |Redshift Cluster Logging Disabled<br/><sup><sub>3de2d4ff-fe53-4fc9-95d3-2f8a69bf90d6</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/3de2d4ff-fe53-4fc9-95d3-2f8a69bf90d6" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html#cfn-redshift-cluster-loggingproperties">Documentation</a><br/>| |S3 Bucket CloudTrail Logging Disabled<br/><sup><sub>c3ce69fd-e3df-49c6-be78-1db3f802261c</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/c3ce69fd-e3df-49c6-be78-1db3f802261c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html#cfn-s3-bucket-loggingconfig">Documentation</a><br/>| |S3 Bucket Logging Disabled<br/><sup><sub>4552b71f-0a2a-4bc4-92dd-ed7ec1b4674c</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/4552b71f-0a2a-4bc4-92dd-ed7ec1b4674c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html#cfn-s3-bucket-loggingconfig">Documentation</a><br/>| |VPC FlowLogs Disabled<br/><sup><sub>f6d299d2-21eb-41cc-b1e1-fe12d857500b</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/f6d299d2-21eb-41cc-b1e1-fe12d857500b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-flowlog.html">Documentation</a><br/>| |High Access Key Rotation Period<br/><sup><sub>800fa019-49dd-421b-9042-7331fdd83fa2</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../cloudformation-queries/aws/800fa019-49dd-421b-9042-7331fdd83fa2" target="blank">Query details</a><br><a href="https://docs.amazonaws.cn/enus/config/latest/developerguide/access-keys-rotated.html">Documentation</a><br/>| |IAM User With No Group<br/><sup><sub>06933df4-0ea7-461c-b9b5-104d27390e0e</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../cloudformation-queries/aws/06933df4-0ea7-461c-b9b5-104d27390e0e" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-policy">Documentation</a><br/>| |Support Has No Role Associated<br/><sup><sub>d71b5fd7-9020-4b2d-9ec8-b3839faa2744</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../cloudformation-queries/aws/d71b5fd7-9020-4b2d-9ec8-b3839faa2744" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html">Documentation</a><br/>| |EBS Volume Not Attached To Instances<br/><sup><sub>1819ac03-542b-4026-976b-f37addd59f3b</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../cloudformation-queries/aws/1819ac03-542b-4026-976b-f37addd59f3b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volumeattachment.html">Documentation</a><br/>| |ECS Service Without Running Tasks<br/><sup><sub>79d745f0-d5f3-46db-9504-bef73e9fd528</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../cloudformation-queries/aws/79d745f0-d5f3-46db-9504-bef73e9fd528" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html#cfn-ecs-service-deploymentconfiguration">Documentation</a><br/>| |VPC Attached With Too Many Gateways<br/><sup><sub>97e94d17-e2c7-4109-a53b-6536ac1bb64e</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../cloudformation-queries/aws/97e94d17-e2c7-4109-a53b-6536ac1bb64e" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc-gateway-attachment.html">Documentation</a><br/>| |Low RDS Backup Retention Period<br/><sup><sub>e649a218-d099-4550-86a4-1231e1fcb60d</sub></sup>|<span style="color:#edd57e">Low</span>|Backup|<a href="../cloudformation-queries/aws/e649a218-d099-4550-86a4-1231e1fcb60d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-rds-dbcluster.html">Documentation</a><br/>| |RDS DB Instance With Deletion Protection Disabled<br/><sup><sub>2c161e58-cb52-454f-abea-6470c37b5e6e</sub></sup>|<span style="color:#edd57e">Low</span>|Backup|<a href="../cloudformation-queries/aws/2c161e58-cb52-454f-abea-6470c37b5e6e" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-deletionprotection">Documentation</a><br/>| |Automatic Minor Upgrades Disabled<br/><sup><sub>f0104061-8bfc-4b45-8a7d-630eb502f281</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/f0104061-8bfc-4b45-8a7d-630eb502f281" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html">Documentation</a><br/>| |CDN Configuration Is Missing<br/><sup><sub>e4f54ff4-d352-40e8-a096-5141073c37a2</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/e4f54ff4-d352-40e8-a096-5141073c37a2" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cloudfront-distribution-distributionconfig.html">Documentation</a><br/>| |Cognito UserPool Without MFA<br/><sup><sub>74a18d1a-cf02-4a31-8791-ed0967ad7fdc</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/74a18d1a-cf02-4a31-8791-ed0967ad7fdc" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cognito-userpool.html">Documentation</a><br/>| |Geo Restriction Disabled<br/><sup><sub>7f8843f0-9ea5-42b4-a02b-753055113195</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/7f8843f0-9ea5-42b4-a02b-753055113195" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/georestrictions.html">Documentation</a><br/>| |IAM Access Analyzer Not Enabled<br/><sup><sub>8d29754a-2a18-460d-a1ba-9509f8d359da</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/8d29754a-2a18-460d-a1ba-9509f8d359da" target="blank">Query details</a><br><a href="https://docs.amazonaws.cn/enus/AWSCloudFormation/latest/UserGuide/aws-resource-accessanalyzer-analyzer.html">Documentation</a><br/>| |IAM Password Without Minimum Length<br/><sup><sub>b1b20ae3-8fa7-4af5-a74d-a2145920fcb1</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/b1b20ae3-8fa7-4af5-a74d-a2145920fcb1" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-user">Documentation</a><br/>| |IAM Policies Without Groups<br/><sup><sub>5e7acff5-095b-40ac-9073-ac2e4ad8a512</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/5e7acff5-095b-40ac-9073-ac2e4ad8a512" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-iam.html#scenario-iam-policy">Documentation</a><br/>| |Lambda Permission Misconfigured<br/><sup><sub>9b83114b-b2a1-4534-990d-06da015e47aa</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/9b83114b-b2a1-4534-990d-06da015e47aa" target="blank">Query details</a><br><a href="https://docs.aws.amazon.com/ptbr/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-permission.html">Documentation</a><br/>| |Security Group Ingress Has CIDR Not Recommended<br/><sup><sub>a3e4e39a-e5fc-4ee9-8cf5-700febfa86dd</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../cloudformation-queries/aws/a3e4e39a-e5fc-4ee9-8cf5-700febfa86dd" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group-ingress.html">Documentation</a><br/>| |DynamoDB With Not Recommented Table Billing Mode<br/><sup><sub>c333e906-8d8b-4275-b999-78b6318f8dc6</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../cloudformation-queries/aws/c333e906-8d8b-4275-b999-78b6318f8dc6" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-table.html#cfn-dynamodb-table-attributedef">Documentation</a><br/>| |EFS Without Tags<br/><sup><sub>08e39832-5e42-4304-98a0-aa5b43393162</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../cloudformation-queries/aws/08e39832-5e42-4304-98a0-aa5b43393162" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html">Documentation</a><br/>| |API Gateway With Invalid Compression<br/><sup><sub>d6653eee-2d4d-4e6a-976f-6794a497999a</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../cloudformation-queries/aws/d6653eee-2d4d-4e6a-976f-6794a497999a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html">Documentation</a><br/>| |CloudTrail Log Files Not Encrypted With KMS<br/><sup><sub>050a9ba8-d1cb-4c61-a5e8-8805a70d3b85</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../cloudformation-queries/aws/050a9ba8-d1cb-4c61-a5e8-8805a70d3b85" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html#cfn-cloudtrail-trail-kmskeyid">Documentation</a><br/>| |EFS Without KMS<br/><sup><sub>6d087495-2a42-4735-abf7-02ef5660a7e6</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../cloudformation-queries/aws/6d087495-2a42-4735-abf7-02ef5660a7e6" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html">Documentation</a><br/>| |API Gateway Cache Cluster Disabled<br/><sup><sub>52790cad-d60d-41d5-8483-146f9f21208d</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/52790cad-d60d-41d5-8483-146f9f21208d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-stage.html#cfn-apigateway-stage-cacheclusterenabled">Documentation</a><br/>| |Inline Policies Are Attached To ECS Service<br/><sup><sub>9e8c89b3-7997-4d15-93e4-7911b9db99fd</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/9e8c89b3-7997-4d15-93e4-7911b9db99fd" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-service.html">Documentation</a><br/>| |Instance With No VPC<br/><sup><sub>8a6d36cd-0bc6-42b7-92c4-67acc8576861</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/8a6d36cd-0bc6-42b7-92c4-67acc8576861" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-vpc.html">Documentation</a><br/>| |Lambda Function Without Dead Letter Queue<br/><sup><sub>c2eae442-d3ba-4cb1-84ca-1db4f80eae3d</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/c2eae442-d3ba-4cb1-84ca-1db4f80eae3d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html#cfn-lambda-function-deadletterconfig">Documentation</a><br/>| |Lambda Function Without Tags<br/><sup><sub>8df8e857-bd59-44fa-9f4c-d77594b95b46</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/8df8e857-bd59-44fa-9f4c-d77594b95b46" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-lambda-function.html">Documentation</a><br/>| |Wildcard In ACM Certificate Domain Name<br/><sup><sub>cc8b294f-006f-4f8f-b5bb-0a9140c33131</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/cc8b294f-006f-4f8f-b5bb-0a9140c33131" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/acm/latest/userguide/acm-overview.html">Documentation</a><br/>| |RouterTable with Default Routing<br/><sup><sub>4f0908b9-eb66-433f-9145-134274e1e944</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Defaults|<a href="../cloudformation-queries/aws/4f0908b9-eb66-433f-9145-134274e1e944" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-route-table.html">Documentation</a><br/>| |S3 Bucket Should Have Bucket Policy<br/><sup><sub>37fa8188-738b-42c8-bf82-6334ea567738</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Defaults|<a href="../cloudformation-queries/aws/37fa8188-738b-42c8-bf82-6334ea567738" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket.html">Documentation</a><br/>| |EC2 Instance Using Default VPC<br/><sup><sub>e42a3ef0-5325-4667-84bf-075ba1c9d58e</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/e42a3ef0-5325-4667-84bf-075ba1c9d58e" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-subnetid">Documentation</a><br/>| |ElastiCache Using Default Port<br/><sup><sub>323db967-c68e-44e6-916c-a777f95af34b</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/323db967-c68e-44e6-916c-a777f95af34b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticache-replicationgroup.html#cfn-elasticache-replicationgroup-port">Documentation</a><br/>| |ElastiCache Without VPC<br/><sup><sub>ba766c53-fe71-4bbb-be35-b6803f2ef13e</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/ba766c53-fe71-4bbb-be35-b6803f2ef13e" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticache-cache-cluster.html#cfn-elasticache-cachecluster-cachesubnetgroupname">Documentation</a><br/>| |EMR Without VPC<br/><sup><sub>bf89373a-be40-4c04-99f5-746742dfd7f3</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/bf89373a-be40-4c04-99f5-746742dfd7f3" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-elasticmapreduce-cluster-jobflowinstancesconfig.html#cfn-elasticmapreduce-cluster-jobflowinstancesconfig-ec2subnetid">Documentation</a><br/>| |RDS Using Default Port<br/><sup><sub>1fe9d958-ddce-4228-a124-05265a959a8b</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/1fe9d958-ddce-4228-a124-05265a959a8b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-rds-database-instance.html#cfn-rds-dbinstance-port">Documentation</a><br/>| |Redshift Using Default Port<br/><sup><sub>a478af30-8c3a-404d-aa64-0b673cee509a</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/a478af30-8c3a-404d-aa64-0b673cee509a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-redshift-cluster.html#cfn-redshift-cluster-port">Documentation</a><br/>| |Security Groups Without VPC Attached<br/><sup><sub>493d9591-6249-47bf-8dc0-5c10161cc558</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/493d9591-6249-47bf-8dc0-5c10161cc558" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |Shield Advanced Not In Use<br/><sup><sub>ad7444cf-817a-4765-a79e-2145f7981faf</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/ad7444cf-817a-4765-a79e-2145f7981faf" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-fms-policy.html">Documentation</a><br/>| |API Gateway Deployment Without API Gateway UsagePlan Associated<br/><sup><sub>783860a3-6dca-4c8b-81d0-7b62769ccbca</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a

target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-deployment.html">Documentation</a><br/>| |API Gateway X-Ray Disabled<br/><sup><sub>4ab10c48-bedb-4deb-8f3b-ff12783b61de</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/4ab10c48-bedb-4deb-8f3b-ff12783b61de" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-stage.html#cfn-apigateway-stage-tracingenabled">Documentation</a><br/>| |CloudTrail Log File Validation Disabled<br/><sup><sub>2a3560fe-52ca-4443-b34f-bf0ed5eb74c8</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/2a3560fe-52ca-4443-b34f-bf0ed5eb74c8" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html#cfn-cloudtrail-trail-enablelogfilevalidation">Documentation</a><br/>| |CloudTrail Multi Region Disabled<br/><sup><sub>058ac855-989f-4378-ba4d-52d004020da7</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/058ac855-989f-4378-ba4d-52d004020da7" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html#cfn-cloudtrail-trail-ismultiregiontrail">Documentation</a><br/>| |CloudTrail Not Integrated With CloudWatch<br/><sup><sub>65d07da5-9af5-44df-8983-52d2e6f24c44</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/65d07da5-9af5-44df-8983-52d2e6f24c44" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html">Documentation</a><br/>| |CloudTrail SNS Topic Name Undefined<br/><sup><sub>3e09413f-471e-40f3-8626-990c79ae63f3</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/3e09413f-471e-40f3-8626-990c79ae63f3" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudtrail-trail.html#cfn-cloudtrail-trail-snstopicname">Documentation</a><br/>| |CMK Rotation Disabled<br/><sup><sub>1c07bfaf-663c-4f6f-b22b-8e2d481e4df5</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/1c07bfaf-663c-4f6f-b22b-8e2d481e4df5" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html">Documentation</a><br/>| |Configuration Aggregator to All Regions Disabled<br/><sup><sub>9f3cf08e-72a2-4eb1-8007-e3b1b0e10d4d</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/9f3cf08e-72a2-4eb1-8007-e3b1b0e10d4d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configurationaggregator.html">Documentation</a><br/>| |ECS Cluster with Container Insights Disabled<br/><sup><sub>ab759fde-e1e8-4b0e-ad73-ba856e490ed8</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/ab759fde-e1e8-4b0e-ad73-ba856e490ed8" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecs-cluster.html#cfn-ecs-cluster-clustersettings">Documentation</a><br/>| |ECS Task Definition HealthCheck Missing<br/><sup><sub>d24389b4-b209-4ff0-8345-dc7a4569dcdd</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/d24389b4-b209-4ff0-8345-dc7a4569dcdd" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ecs-taskdefinition-healthcheck.html">Documentation</a><br/>| |ElasticSearch Without Slow Logs<br/><sup><sub>086ea2eb-14a6-4fd4-914b-38e0bc8703e8</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/086ea2eb-14a6-4fd4-914b-38e0bc8703e8" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticsearch-domain.html#cfn-elasticsearch-domain-logpublishingoptions">Documentation</a><br/>| |Lambda Functions Without X-Ray Tracing<br/><sup><sub>9488c451-074e-4cd3-aee3-7db6104f542c</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/9488c451-074e-4cd3-aee3-7db6104f542c" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-tracingconfig.html">Documentation</a><br/>| |Stack Notifications Disabled<br/><sup><sub>837e033c-4717-40bd-807e-6abaa30161b7</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/837e033c-4717-40bd-807e-6abaa30161b7" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-stack.html">Documentation</a><br/>| |Unscanned ECR Image<br/><sup><sub>9025b2b3-e554-4842-ba87-db7aeec36d35</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/9025b2b3-e554-4842-ba87-db7aeec36d35" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ecr-repository.html#cfn-ecr-repository-imagescanningconfiguration">Documentation</a><br/>| |API Gateway Stage Without API Gateway UsagePlan Associated<br/><sup><sub>7f8f1b60-43df-4c28-aa21-fb836dbd8071</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../cloudformation-queries/aws/7f8f1b60-43df-4c28-aa21-fb836dbd8071" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-stage.html">Documentation</a><br/>| |ECS Task Definition Invalid CPU or Memory<br/><sup><sub>f4c9b5f5-68b8-491f-9e48-4f96644a1d51</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../cloudformation-queries/aws/f4c9b5f5-68b8-491f-9e48-4f96644a1d51" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-cpu-memory-error.html">Documentation</a><br/>| |SDB Domain Declared As A Resource<br/><sup><sub>6ea57c8b-f9c0-4ec7-bae3-bd75a9dee27d</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../cloudformation-queries/aws/6ea57c8b-f9c0-4ec7-bae3-bd75a9dee27d" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-simpledb.html">Documentation</a><br/>| |VPC Without Attached Subnet<br/><sup><sub>3b3b4411-ad1f-40e7-b257-a78a6bb9673a</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../cloudformation-queries/aws/3b3b4411-ad1f-40e7-b257-a78a6bb9673a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-subnet.html">Documentation</a><br/>| |EBS Volume Without KmsKeyId<br/><sup><sub>b7063015-6c31-4658-a8e7-14f98f37fd42</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../cloudformation-queries/aws/b7063015-6c31-4658-a8e7-14f98f37fd42" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-ebs-volume.html">Documentation</a><br/>| |Secrets Manager Should Specify KmsKeyId<br/><sup><sub>c8ae9ba9-c2f7-4e5c-b32e-a4b7712d4d22</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../cloudformation-queries/aws/c8ae9ba9-c2f7-4e5c-b32e-a4b7712d4d22" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-secretsmanager-secret.html">Documentation</a><br/>| |SNS Topic Without KmsMasterKeyId<br/><sup><sub>9d13b150-a2ab-42a1-b6f4-142e41f81e52</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../cloudformation-queries/aws/9d13b150-a2ab-42a1-b6f4-142e41f81e52" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sns-topic.html">Documentation</a><br/>| |EC2 Not EBS Optimized<br/><sup><sub>8dd0ff1f-0da4-48df-9bb3-7f338ae36a40</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../cloudformation-queries/aws/8dd0ff1f-0da4-48df-9bb3-7f338ae36a40" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-ebsoptimized">Documentation</a><br/>| |Security Group Rule Without Description<br/><sup><sub>5e6c9c68-8a82-408e-8749-ddad78cbb9c5</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../cloudformation-queries/aws/5e6c9c68-8a82-408e-8749-ddad78cbb9c5" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-security-group.html">Documentation</a><br/>| |EC2 Network ACL Duplicate Rule<br/><sup><sub>045ddb54-cfc5-4abb-9e05-e427b2bc96fe</sub></sup>|<span style="color:#5bc0de">Info</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/045ddb54-cfc5-4abb-9e05-e427b2bc96fe" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-network-acl-entry.html#cfn-ec2-networkaclentry-rulenumber">Documentation</a><br/>| Below are listed queries related to CloudFormation AWS_BOM: | Query |Severity|Category|More info| ||--|--|--| |BOM - AWS Cassandra<br/><sup><sub>124b173b-e06d-48a6-8acd-f889443d97a4</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/124b173b-e06d-48a6-8acd-f889443d97a4" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS DynamoDB<br/><sup><sub>4e67c0ae-38a0-47f4-a50c-f0c9b75826df</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/4e67c0ae-38a0-47f4-a50c-f0c9b75826df" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS EBS<br/><sup><sub>0b0556ea-9cd9-476f-862e-20679dda752b</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/0b0556ea-9cd9-476f-862e-20679dda752b" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS EFS<br/><sup><sub>ef05a925-8568-4054-8ff1-f5ba82631c16</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/ef05a925-8568-4054-8ff1-f5ba82631c16" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS Elasticache<br/><sup><sub>c689f51b-9203-43b3-9d8b-caed123f706c</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/c689f51b-9203-43b3-9d8b-caed123f706c" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS Kinesis<br/><sup><sub>d53323be-dde6-4457-9a43-42df737e71d2</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/d53323be-dde6-4457-9a43-42df737e71d2" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS MQ<br/><sup><sub>209189f3-c879-48a7-9703-fbcfa96d0cef</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/209189f3-c879-48a7-9703-fbcfa96d0cef" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS MSK<br/><sup><sub>2730c169-51d7-4ae7-99b5-584379eff1bb</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/2730c169-51d7-4ae7-99b5-584379eff1bb" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS RDS<br/><sup><sub>6ef03ff6-a2bd-483c-851f-631f248bc0ea</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/6ef03ff6-a2bd-483c-851f-631f248bc0ea" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS S3 Buckets<br/><sup><sub>b5d6a2e0-8f15-4664-bd5b-68ec5c9bab83</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/b5d6a2e0-8f15-4664-bd5b-68ec5c9bab83" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS SNS<br/><sup><sub>42e7dca3-8cce-4325-8df0-108888259136</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/42e7dca3-8cce-4325-8df0-108888259136" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS SQS<br/><sup><sub>59a849c2-1127-4023-85a5-ef906dcd458c</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../cloudformation-queries/aws/59a849c2-1127-4023-85a5-ef906dcd458c" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| Below are listed queries related to CloudFormation AWS_SAM: | Query |Severity|Category|More info| ||--|--|--| |Serverless Function Without Unique IAM Role<br/><sup><sub>4ba74f01-aba5-4be2-83bc-be79ff1a3b92</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/4ba74f01-aba5-4be2-83bc-be79ff1a3b92" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-function.html#sam-function-role">Documentation</a><br/>| |Serverless Function Environment Variables Not Encrypted<br/><sup><sub>a7f8ac28-eed1-483d-87c8-4c325f022572</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../cloudformation-queries/aws/a7f8ac28-eed1-483d-87c8-4c325f022572" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-function.html#sam-function-kmskeyarn">Documentation</a><br/>| |Serverless API Endpoint Config Not Private<br/><sup><sub>6b5b0313-771b-4319-ad7a-122ee78700ef</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../cloudformation-queries/aws/6b5b0313-771b-4319-ad7a-122ee78700ef" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-api.html#sam-api-endpointconfiguration">Documentation</a><br/>| |Serverless API Access Logging Setting Undefined<br/><sup><sub>0a994e04-c6dc-471d-817e-d37451d18a3b</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/0a994e04-c6dc-471d-817e-d37451d18a3b" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-apigateway-stage-accesslogsetting.html">Documentation</a><br/>| |Serverless API X-Ray Tracing Disabled<br/><sup><sub>c757c6a3-ac87-4b9d-b28d-e5a5add6a315</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../cloudformation-queries/aws/c757c6a3-ac87-4b9d-b28d-e5a5add6a315" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-api.html#sam-api-tracingenabled">Documentation</a><br/>| |Serverless API Without Content Encoding<br/><sup><sub>a2f2800e-614b-4bc8-89e6-fec8afd24800</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../cloudformation-queries/aws/a2f2800e-614b-4bc8-89e6-fec8afd24800" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-api.html#sam-api-minimumcompressionsize">Documentation</a><br/>| |Serverless API Cache Cluster Disabled<br/><sup><sub>60a05ede-0a68-4d0d-a58f-f538cf55ff79</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/60a05ede-0a68-4d0d-a58f-f538cf55ff79" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-api.html#sam-api-cacheclusterenabled">Documentation</a><br/>| |Serverless Function Without Dead Letter Queue<br/><sup><sub>cb2f612b-ed42-4ff5-9fb9-255c73d39a18</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/cb2f612b-ed42-4ff5-9fb9-255c73d39a18" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-function.html#sam-function-deadletterqueue">Documentation</a><br/>| |Serverless Function Without Tags<br/><sup><sub>a71ecabe-03b6-456a-b3bc-d1a39aa20c98</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../cloudformation-queries/aws/a71ecabe-03b6-456a-b3bc-d1a39aa20c98" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-function.html#sam-function-tags">Documentation</a><br/>| |Serverless Function Without X-Ray Tracing<br/><sup><sub>dc1ab429-1481-4540-9b1d-280e3f15f1f8</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../cloudformation-queries/aws/dc1ab429-1481-4540-9b1d-280e3f15f1f8" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-resource-function.html#sam-function-tracing">Documentation</a><br/>|