Project: KICS (Provisioning / Security & Compliance)
File: ansible-queries.md

This page contains all queries from Ansible. Below are listed queries related to Ansible AWS: | Query |Severity|Category|More info| ||--|--|--| |ECR Repository Is Publicly Accessible<br/><sup><sub>fb5a5df7-6d74-4243-ab82-ff779a958bfd</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../ansible-queries/aws/fb5a5df7-6d74-4243-ab82-ff779a958bfd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ecsecr_module.html#parameter-policy">Documentation</a><br/>| |S3 Bucket Access to Any Principal<br/><sup><sub>3ab1f27d-52cc-4943-af1d-43c1939e739a</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../ansible-queries/aws/3ab1f27d-52cc-4943-af1d-43c1939e739a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html#ansible-collections-amazon-aws-s3-bucket-module">Documentation</a><br/>| |S3 Bucket Allows Delete Action From All Principals<br/><sup><sub>6fa44721-ef21-41c6-8665-330d59461163</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../ansible-queries/aws/6fa44721-ef21-41c6-8665-330d59461163" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html">Documentation</a><br/>| |S3 Bucket Allows Put Action From All Principals<br/><sup><sub>a0f1bfe0-741e-473f-b3b2-13e66f856fab</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../ansible-queries/aws/a0f1bfe0-741e-473f-b3b2-13e66f856fab" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html">Documentation</a><br/>| |S3 Bucket With All Permissions<br/><sup><sub>6a6d7e56-c913-4549-b5c5-5221e624d2ec</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../ansible-queries/aws/6a6d7e56-c913-4549-b5c5-5221e624d2ec" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html#parameter-policy">Documentation</a><br/>| |S3 Bucket With Public Access<br/><sup><sub>c3e073c1-f65e-4d18-bd67-4a8f20ad1ab9</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../ansible-queries/aws/c3e073c1-f65e-4d18-bd67-4a8f20ad1ab9" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/awss3_module.html#parameter-permission">Documentation</a><br/>| |RDS DB Instance Publicly Accessible<br/><sup><sub>c09e3ca5-f08a-4717-9c87-3919c5e6d209</sub></sup>|<span style="color:#ff0000">Critical</span>|Insecure Configurations|<a href="../ansible-queries/aws/c09e3ca5-f08a-4717-9c87-3919c5e6d209" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstancemodule.html#parameter-autominorversionupgrade">Documentation</a><br/>| |DB Security Group With Public Scope<br/><sup><sub>0956aedf-6a7a-478b-ab56-63e2b19923ad</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../ansible-queries/aws/0956aedf-6a7a-478b-ab56-63e2b19923ad" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |RDS Associated with Public Subnet<br/><sup><sub>16732649-4ff6-4cd2-8746-e72c13fae4b8</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../ansible-queries/aws/16732649-4ff6-4cd2-8746-e72c13fae4b8" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstancemodule.html#parameter-dbsubnetgroupname">Documentation</a><br/>| |Cross-Account IAM Assume Role Policy Without ExternalId or MFA<br/><sup><sub>af167837-9636-4086-b815-c239186b9dda</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/af167837-9636-4086-b815-c239186b9dda" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iamrolemodule.html#parameter-assumerolepolicydocument">Documentation</a><br/>| |ECS Service Admin Role Is Present<br/><sup><sub>7db727c1-1720-468e-b80e-06697f71e09e</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/7db727c1-1720-468e-b80e-06697f71e09e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ecsservice_module.html">Documentation</a><br/>| |IAM Policy Grants Full Permissions<br/><sup><sub>b5ed026d-a772-4f07-97f9-664ba0b116f8</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/b5ed026d-a772-4f07-97f9-664ba0b116f8" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iammanagedpolicymodule.html">Documentation</a><br/>| |S3 Bucket ACL Allows Read to All Users<br/><sup><sub>a1ef9d2e-4163-40cb-bd92-04f0d602a15d</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/a1ef9d2e-4163-40cb-bd92-04f0d602a15d" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/awss3_module.html#parameter-permission">Documentation</a><br/>| |S3 Bucket ACL Allows Read to Any Authenticated User<br/><sup><sub>75480b31-f349-4b9a-861f-bce19588e674</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/75480b31-f349-4b9a-861f-bce19588e674" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/awss3_module.html#parameter-permission">Documentation</a><br/>| |S3 Bucket Allows Get Action From All Principals<br/><sup><sub>53bce6a8-5492-4b1b-81cf-664385f0c4bf</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/53bce6a8-5492-4b1b-81cf-664385f0c4bf" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html">Documentation</a><br/>| |S3 Bucket Allows List Action From All Principals<br/><sup><sub>d395a950-12ce-4314-a742-ac5a785ab44e</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/d395a950-12ce-4314-a742-ac5a785ab44e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html">Documentation</a><br/>| |SNS Topic is Publicly Accessible<br/><sup><sub>905f4741-f965-45c1-98db-f7a00a0e5c73</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/905f4741-f965-45c1-98db-f7a00a0e5c73" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/snstopic_module.html">Documentation</a><br/>| |SQS Policy Allows All Actions<br/><sup><sub>ed9b3beb-92cf-44d9-a9d2-171eeba569d4</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/ed9b3beb-92cf-44d9-a9d2-171eeba569d4" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/sqsqueue_module.html">Documentation</a><br/>| |SQS Queue Exposed<br/><sup><sub>86b0efa7-4901-4edd-a37a-c034bec6645a</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/aws/86b0efa7-4901-4edd-a37a-c034bec6645a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/sqsqueue_module.html#parameter-policy">Documentation</a><br/>| |Config Rule For Encrypted Volumes Disabled<br/><sup><sub>7674a686-e4b1-4a95-83d4-1fd53c623d84</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/7674a686-e4b1-4a95-83d4-1fd53c623d84" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awsconfigrulemodule.html#parameter-source/identifier">Documentation</a><br/>| |DB Instance Storage Not Encrypted<br/><sup><sub>7dfb316c-a6c2-454d-b8a2-97f147b0c0ff</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/7dfb316c-a6c2-454d-b8a2-97f147b0c0ff" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstance_module.html">Documentation</a><br/>| |EBS Volume Encryption Disabled<br/><sup><sub>4b6012e7-7176-46e4-8108-e441785eae57</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/4b6012e7-7176-46e4-8108-e441785eae57" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2vol_module.html#parameter-encrypted">Documentation</a><br/>| |EFS Not Encrypted<br/><sup><sub>727c4fd4-d604-4df6-a179-7713d3c85e20</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/727c4fd4-d604-4df6-a179-7713d3c85e20" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/efsmodule.html#parameter-encrypt">Documentation</a><br/>| |ELB Using Weak Ciphers<br/><sup><sub>2034fb37-bc23-4ca0-8d95-2b9f15829ab5</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/2034fb37-bc23-4ca0-8d95-2b9f15829ab5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/elbapplicationlbmodule.html">Documentation</a><br/>| |Kinesis Not Encrypted With KMS<br/><sup><sub>f2ea6481-1d31-4d40-946a-520dc6321dd7</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/f2ea6481-1d31-4d40-946a-520dc6321dd7" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/kinesisstream_module.html">Documentation</a><br/>| |Launch Configuration Is Not Encrypted<br/><sup><sub>66477506-6abb-49ed-803d-3fa174cd5f6a</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/66477506-6abb-49ed-803d-3fa174cd5f6a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ec2lc_module.html">Documentation</a><br/>| |Redis Not Compliant<br/><sup><sub>9f34885e-c08f-4d13-a7d1-cf190c5bd268</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/9f34885e-c08f-4d13-a7d1-cf190c5bd268" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/elasticachemodule.html#parameter-cacheengineversion">Documentation</a><br/>| |Redshift Not Encrypted<br/><sup><sub>6a647814-def5-4b85-88f5-897c19f509cd</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/6a647814-def5-4b85-88f5-897c19f509cd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/redshiftcluster#encrypted">Documentation</a><br/>| |S3 Bucket Without Server-side-encryption<br/><sup><sub>594f54e7-f744-45ab-93e4-c6dbaf6cd571</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/594f54e7-f744-45ab-93e4-c6dbaf6cd571" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html">Documentation</a><br/>| |User Data Contains Encoded Private Key<br/><sup><sub>c09f4d3e-27d2-4d46-9453-abbe9687a64e</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/aws/c09f4d3e-27d2-4d46-9453-abbe9687a64e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ec2lc_module.html">Documentation</a><br/>| |Batch Job Definition With Privileged Container Properties<br/><sup><sub>defe5b18-978d-4722-9325-4d1975d3699f</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/aws/defe5b18-978d-4722-9325-4d1975d3699f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awsbatchjobdefinition_module.html">Documentation</a><br/>| |EC2 Group Has Public Interface<br/><sup><sub>5330b503-3319-44ff-9b1c-00ee873f728a</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/aws/5330b503-3319-44ff-9b1c-00ee873f728a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |KMS Key With Vulnerable Policy<br/><sup><sub>5b9d237a-57d5-4177-be0e-71434b0fef47</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/aws/5b9d237a-57d5-4177-be0e-71434b0fef47" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awskms_module.html">Documentation</a><br/>| |Redshift Publicly Accessible<br/><sup><sub>5c6b727b-1382-4629-8ba9-abd1365e5610</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/aws/5c6b727b-1382-4629-8ba9-abd1365e5610" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/redshiftmodule.html">Documentation</a><br/>| |Root Account Has Active Access Keys<br/><sup><sub>e71d0bc7-d9e8-4e6e-ae90-0a4206db6f40</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/aws/e71d0bc7-d9e8-4e6e-ae90-0a4206db6f40" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iammodule.html">Documentation</a><br/>| |DB Security Group Open To Large Scope<br/><sup><sub>ea0ed1c7-9aef-4464-b7c7-94c762da3640</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/aws/ea0ed1c7-9aef-4464-b7c7-94c762da3640" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html#ansible-collections-amazon-aws-ec2-group-module">Documentation</a><br/>| |Default Security Groups With Unrestricted Traffic<br/><sup><sub>8010e17a-00e9-4635-a692-90d6bcec68bd</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/aws/8010e17a-00e9-4635-a692-90d6bcec68bd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |Public Port Wide<br/><sup><sub>71ea648a-d31a-4b5a-a589-5674243f1c33</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/aws/71ea648a-d31a-4b5a-a589-5674243f1c33" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |Remote Desktop Port Open To Internet<br/><sup><sub>eda7301d-1f3e-47cf-8d4e-976debc64341</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/aws/eda7301d-1f3e-47cf-8d4e-976debc64341" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html#ansible-collections-amazon-aws-ec2-group-module">Documentation</a><br/>| |Route53 Record Undefined<br/><sup><sub>445dce51-7e53-4e50-80ef-7f94f14169e4</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/aws/445dce51-7e53-4e50-80ef-7f94f14169e4" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/route53module.html#parameter-value">Documentation</a><br/>| |Security Group Ingress Not Restricted<br/><sup><sub>ea6bc7a6-d696-4dcf-a788-17fa03c17c81</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/aws/ea6bc7a6-d696-4dcf-a788-17fa03c17c81" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |Unknown Port Exposed To Internet<br/><sup><sub>722b0f24-5a64-4cca-aa96-cfc26b7e3a5b</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/aws/722b0f24-5a64-4cca-aa96-cfc26b7e3a5b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |Unrestricted Security Group Ingress<br/><sup><sub>83c5fa4c-e098-48fc-84ee-0a537287ddd2</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a

target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |Hardcoded AWS Access Key<br/><sup><sub>c2f15af3-66a0-4176-a56e-e4711e502e5c</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../ansible-queries/aws/c2f15af3-66a0-4176-a56e-e4711e502e5c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ec2instance_module.html">Documentation</a><br/>| |Hardcoded AWS Access Key In Lambda<br/><sup><sub>f34508b9-f574-4330-b42d-88c44cced645</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../ansible-queries/aws/f34508b9-f574-4330-b42d-88c44cced645" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/lambdamodule.html">Documentation</a><br/>| |AMI Shared With Multiple Accounts<br/><sup><sub>a19b2942-142e-4e2b-93b7-6cf6a6c8d90f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/a19b2942-142e-4e2b-93b7-6cf6a6c8d90f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2ami_module.html">Documentation</a><br/>| |API Gateway Without Configured Authorizer<br/><sup><sub>b16cdb37-ce15-4ab2-8401-d42b05d123fc</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/b16cdb37-ce15-4ab2-8401-d42b05d123fc" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awsapigatewaymodule.html">Documentation</a><br/>| |Certificate Has Expired<br/><sup><sub>5a443297-19d4-4381-9e5b-24faf947ec22</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/5a443297-19d4-4381-9e5b-24faf947ec22" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/2.10/collections/community/aws/awsacm_module.html">Documentation</a><br/>| |EC2 Instance Using Default Security Group<br/><sup><sub>8d03993b-8384-419b-a681-d1f55149397c</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/8d03993b-8384-419b-a681-d1f55149397c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2module.html#parameter-group">Documentation</a><br/>| |IAM Access Key Is Exposed<br/><sup><sub>7f79f858-fbe8-4186-8a2c-dfd0d958a40f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/7f79f858-fbe8-4186-8a2c-dfd0d958a40f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iammodule.html">Documentation</a><br/>| |IAM Group Without Users<br/><sup><sub>f509931b-bbb0-443c-bd9b-10e92ecf2193</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/f509931b-bbb0-443c-bd9b-10e92ecf2193" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iamgroup_module.html">Documentation</a><br/>| |IAM Policies Attached To User<br/><sup><sub>eafe4bc3-1042-4f88-b988-1939e64bf060</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/eafe4bc3-1042-4f88-b988-1939e64bf060" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iampolicy_module.html">Documentation</a><br/>| |IAM Policies With Full Privileges<br/><sup><sub>e401d614-8026-4f4b-9af9-75d1197461ba</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/e401d614-8026-4f4b-9af9-75d1197461ba" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iammanagedpolicymodule.html">Documentation</a><br/>| |IAM Policy Grants 'AssumeRole' Permission Across All Services<br/><sup><sub>12a7a7ce-39d6-49dd-923d-aeb4564eb66c</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/12a7a7ce-39d6-49dd-923d-aeb4564eb66c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iammanagedpolicymodule.html">Documentation</a><br/>| |IAM Role Allows All Principals To Assume<br/><sup><sub>babdedcf-d859-43da-9a7b-6d72e661a8fd</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/babdedcf-d859-43da-9a7b-6d72e661a8fd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iammanagedpolicymodule.html">Documentation</a><br/>| |Lambda Permission Principal Is Wildcard<br/><sup><sub>1d972c56-8ec2-48c1-a578-887adb09c57a</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/1d972c56-8ec2-48c1-a578-887adb09c57a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/lambdapolicy_module.html">Documentation</a><br/>| |Public Lambda via API Gateway<br/><sup><sub>5e92d816-2177-4083-85b4-f61b4f7176d9</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/5e92d816-2177-4083-85b4-f61b4f7176d9" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/2.4/lambdapolicy_module.html">Documentation</a><br/>| |SES Policy With Allowed IAM Actions<br/><sup><sub>8ed0bfce-f780-46d4-b086-21c3628f09ad</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/8ed0bfce-f780-46d4-b086-21c3628f09ad" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awssesidentitypolicy_module.html#parameter-policy">Documentation</a><br/>| |SQS Policy With Public Access<br/><sup><sub>d994585f-defb-4b51-b6d2-c70f020ceb10</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/aws/d994585f-defb-4b51-b6d2-c70f020ceb10" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/sqsqueue_module.html">Documentation</a><br/>| |Auto Scaling Group With No Associated ELB<br/><sup><sub>050f085f-a8db-4072-9010-2cca235cc02f</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../ansible-queries/aws/050f085f-a8db-4072-9010-2cca235cc02f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ec2asgmodule.html#parameter-loadbalancers">Documentation</a><br/>| |CMK Is Unusable<br/><sup><sub>133fee21-37ef-45df-a563-4d07edc169f4</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../ansible-queries/aws/133fee21-37ef-45df-a563-4d07edc169f4" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awskms_module.html#parameter-enabled">Documentation</a><br/>| |RDS With Backup Disabled<br/><sup><sub>e69890e6-fce5-461d-98ad-cb98318dfc96</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../ansible-queries/aws/e69890e6-fce5-461d-98ad-cb98318dfc96" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstancemodule.html#parameter-backupretention_period">Documentation</a><br/>| |S3 Bucket Without Versioning<br/><sup><sub>9232306a-f839-40aa-b3ef-b352001da9a5</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../ansible-queries/aws/9232306a-f839-40aa-b3ef-b352001da9a5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucket_module.html#parameter-versioning">Documentation</a><br/>| |Stack Retention Disabled<br/><sup><sub>17d5ba1d-7667-4729-b1a6-b11fde3db7f7</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../ansible-queries/aws/17d5ba1d-7667-4729-b1a6-b11fde3db7f7" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudformationstacksetmodule.html#parameter-purge_stacks">Documentation</a><br/>| |AMI Not Encrypted<br/><sup><sub>97707503-a22c-4cd7-b7c0-f088fa7cf830</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/97707503-a22c-4cd7-b7c0-f088fa7cf830" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2ami_module.html">Documentation</a><br/>| |CA Certificate Identifier Is Outdated<br/><sup><sub>5eccd62d-8b4d-46d3-83ea-1879f3cbd3ce</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/5eccd62d-8b4d-46d3-83ea-1879f3cbd3ce" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstancemodule.html#parameter-cacertificate_identifier">Documentation</a><br/>| |Cloudfront Viewer Protocol Policy Allows HTTP<br/><sup><sub>a6d27cf7-61dc-4bde-ae08-3b353b609f76</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/a6d27cf7-61dc-4bde-ae08-3b353b609f76" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudfrontdistribution_module.html">Documentation</a><br/>| |CodeBuild Not Encrypted<br/><sup><sub>a1423864-2fbc-4f46-bfe1-fbbf125c71c9</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/a1423864-2fbc-4f46-bfe1-fbbf125c71c9" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awscodebuild_module.html">Documentation</a><br/>| |ELB Using Insecure Protocols<br/><sup><sub>730a5951-2760-407a-b032-dd629b55c23a</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/730a5951-2760-407a-b032-dd629b55c23a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/elbapplicationlbmodule.html">Documentation</a><br/>| |IAM Database Auth Not Enabled<br/><sup><sub>0ed012a4-9199-43d2-b9e4-9bd049a48aa4</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/0ed012a4-9199-43d2-b9e4-9bd049a48aa4" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstance_module.html">Documentation</a><br/>| |Secure Ciphers Disabled<br/><sup><sub>218413a0-c716-4b94-9e08-0bb70d854709</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/218413a0-c716-4b94-9e08-0bb70d854709" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudfrontdistribution_module.html">Documentation</a><br/>| |SQS With SSE Disabled<br/><sup><sub>e1e7b278-2a8b-49bd-a26e-66a7f70b17eb</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/aws/e1e7b278-2a8b-49bd-a26e-66a7f70b17eb" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/sqsqueue_module.html#ansible-collections-community-aws-sqs-queue-module">Documentation</a><br/>| |API Gateway Without SSL Certificate<br/><sup><sub>b47b98ab-e481-4a82-8bb1-1ab39fd36e33</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/aws/b47b98ab-e481-4a82-8bb1-1ab39fd36e33" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/2.8/modules/awsapigatewaymodule.html">Documentation</a><br/>| |Certificate RSA Key Bytes Lower Than 256<br/><sup><sub>d5ec2080-340a-4259-b885-f833c4ea6a31</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/aws/d5ec2080-340a-4259-b885-f833c4ea6a31" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/2.10/collections/community/aws/awsacm_module.html">Documentation</a><br/>| |CloudFront Without Minimum Protocol TLS 1.2<br/><sup><sub>d0c13053-d2c8-44a6-95da-d592996e9e67</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/aws/d0c13053-d2c8-44a6-95da-d592996e9e67" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudfrontdistributionmodule.html#parameter-viewercertificate/minimumprotocolversion">Documentation</a><br/>| |ECR Image Tag Not Immutable<br/><sup><sub>60bfbb8a-c72f-467f-a6dd-a46b7d612789</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/aws/60bfbb8a-c72f-467f-a6dd-a46b7d612789" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ecsecr_module.html">Documentation</a><br/>| |ECS Task Definition Network Mode Not Recommended<br/><sup><sub>01aec7c2-3e4d-4274-ae47-2b8fea22fd1f</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/aws/01aec7c2-3e4d-4274-ae47-2b8fea22fd1f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ecstaskdefinitionmodule.html#parameter-networkmode">Documentation</a><br/>| |S3 Bucket with Unsecured CORS Rule<br/><sup><sub>3505094c-f77c-4ba0-95da-f83db712f86c</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/aws/3505094c-f77c-4ba0-95da-f83db712f86c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awss3corsmodule.html#parameter-rules">Documentation</a><br/>| |Vulnerable Default SSL Certificate<br/><sup><sub>fb8f8929-afeb-4c46-99f0-a6cf410f7df4</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../ansible-queries/aws/fb8f8929-afeb-4c46-99f0-a6cf410f7df4" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudfrontdistribution_module.html">Documentation</a><br/>| |ALB Listening on HTTP<br/><sup><sub>f81d63d2-c5d7-43a4-a5b5-66717a41c895</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/f81d63d2-c5d7-43a4-a5b5-66717a41c895" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/elbapplicationlbmodule.html">Documentation</a><br/>| |API Gateway Endpoint Config is Not Private<br/><sup><sub>559439b2-3e9c-4739-ac46-17e3b24ec215</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/559439b2-3e9c-4739-ac46-17e3b24ec215" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awsapigatewaymodule.html">Documentation</a><br/>| |API Gateway without WAF<br/><sup><sub>f5f38943-664b-4acc-ab11-f292fa10ed0b</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/f5f38943-664b-4acc-ab11-f292fa10ed0b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/wafv2resources_module.html#parameter-arn">Documentation</a><br/>| |CloudFront Without WAF<br/><sup><sub>22c80725-e390-4055-8d14-a872230f6607</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/22c80725-e390-4055-8d14-a872230f6607" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudfrontdistribution_module.html">Documentation</a><br/>| |EC2 Instance Has Public IP<br/><sup><sub>a8b0c58b-cd25-4b53-9ad0-55bca0be0bc1</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/a8b0c58b-cd25-4b53-9ad0-55bca0be0bc1" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2module.html#parameter-assignpublicip">Documentation</a><br/>| |Elasticsearch with HTTPS disabled<br/><sup><sub>d6c2d06f-43c1-488a-9ba1-8d75b40fc62d</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/d6c2d06f-43c1-488a-9ba1-8d75b40fc62d" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/devel/collections/community/aws/opensearchmodule.html">Documentation</a><br/>| |HTTP Port Open To Internet<br/><sup><sub>a14ad534-acbe-4a8e-9404-2f7e1045646e</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/a14ad534-acbe-4a8e-9404-2f7e1045646e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html#ansible-collections-amazon-aws-ec2-group-module">Documentation</a><br/>| |Security Group With Unrestricted Access To SSH<br/><sup><sub>57ced4b9-6ba4-487b-8843-b65562b90c77</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/57ced4b9-6ba4-487b-8843-b65562b90c77" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |SQL Analysis Services Port 2383 (TCP) Is Publicly Accessible<br/><sup><sub>7af1c447-c014-4f05-bd8b-ebe3a15734ac</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/aws/7af1c447-c014-4f05-bd8b-ebe3a15734ac" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2group_module.html">Documentation</a><br/>| |API Gateway With CloudWatch Logging Disabled<br/><sup><sub>72a931c2-12f5-40d1-93cc-47bff2f7aa2a</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a

target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudwatchlogsloggroupmodule.html#ansible-collections-community-aws-cloudwatchlogs-log-group-module">Documentation</a><br/>| |CloudFront Logging Disabled<br/><sup><sub>d31cb911-bf5b-4eb6-9fc3-16780c77c7bd</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/aws/d31cb911-bf5b-4eb6-9fc3-16780c77c7bd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudfrontdistribution_module.html">Documentation</a><br/>| |CloudTrail Logging Disabled<br/><sup><sub>d4a73c49-cbaa-4c6f-80ee-d6ef5a3a26f5</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/aws/d4a73c49-cbaa-4c6f-80ee-d6ef5a3a26f5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudtrailmodule.html#parameter-enable_logging">Documentation</a><br/>| |S3 Bucket Logging Disabled<br/><sup><sub>c3b9f7b0-f5a0-49ec-9cbc-f1e346b7274d</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/aws/c3b9f7b0-f5a0-49ec-9cbc-f1e346b7274d" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/s3bucketmodule.html#parameter-debugbotocoreendpointlogs">Documentation</a><br/>| |No Stack Policy<br/><sup><sub>ffe0fd52-7a8b-4a5c-8fc7-49844418e6c9</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../ansible-queries/aws/ffe0fd52-7a8b-4a5c-8fc7-49844418e6c9" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/cloudformationmodule.html">Documentation</a><br/>| |Authentication Without MFA<br/><sup><sub>eee107f9-b3d8-45d3-b9c6-43b5a7263ce1</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../ansible-queries/aws/eee107f9-b3d8-45d3-b9c6-43b5a7263ce1" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iammfadeviceinfo_module.html">Documentation</a><br/>| |ECS Service Without Running Tasks<br/><sup><sub>f5c45127-1d28-4b49-a692-0b97da1c3a84</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../ansible-queries/aws/f5c45127-1d28-4b49-a692-0b97da1c3a84" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/ecsservice_module.html#ansible-collections-community-aws-ecs-service-module">Documentation</a><br/>| |Automatic Minor Upgrades Disabled<br/><sup><sub>857f8808-e96a-4ba8-a9b7-f2d4ec6cad94</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/aws/857f8808-e96a-4ba8-a9b7-f2d4ec6cad94" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstancemodule.html#parameter-autominorversionupgrade">Documentation</a><br/>| |CDN Configuration Is Missing<br/><sup><sub>b25398a2-0625-4e61-8e4d-a1bb23905bf6</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/aws/b25398a2-0625-4e61-8e4d-a1bb23905bf6" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudfrontdistribution_module.html">Documentation</a><br/>| |IAM Password Without Minimum Length<br/><sup><sub>8bc2168c-1723-4eeb-a6f3-a1ba614b9a6d</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/aws/8bc2168c-1723-4eeb-a6f3-a1ba614b9a6d" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iampasswordpolicymodule.html">Documentation</a><br/>| |Lambda Permission Misconfigured<br/><sup><sub>3ddf3417-424d-420d-8275-0724dc426520</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/aws/3ddf3417-424d-420d-8275-0724dc426520" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/lambdapolicy_module.html">Documentation</a><br/>| |Misconfigured Password Policy Expiration<br/><sup><sub>3f2cf811-88fa-4eda-be45-7a191a18aba9</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/aws/3f2cf811-88fa-4eda-be45-7a191a18aba9" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iampasswordpolicymodule.html">Documentation</a><br/>| |Password Without Reuse Prevention<br/><sup><sub>6f5f5444-1422-495f-81ef-24cefd61ed2c</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/aws/6f5f5444-1422-495f-81ef-24cefd61ed2c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iampasswordpolicymodule.html#parameter-pwreuseprevent">Documentation</a><br/>| |EFS Without Tags<br/><sup><sub>b8a9852c-9943-4973-b8d5-77dae9352851</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../ansible-queries/aws/b8a9852c-9943-4973-b8d5-77dae9352851" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/efsmodule.html">Documentation</a><br/>| |Stack Without Template<br/><sup><sub>32d31f1f-0f83-4721-b7ec-1e6948c60145</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../ansible-queries/aws/32d31f1f-0f83-4721-b7ec-1e6948c60145" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/cloudformationmodule.html">Documentation</a><br/>| |CloudTrail Log Files Not Encrypted With KMS<br/><sup><sub>f5587077-3f57-4370-9b4e-4eb5b1bac85b</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../ansible-queries/aws/f5587077-3f57-4370-9b4e-4eb5b1bac85b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudtrailmodule.html">Documentation</a><br/>| |EFS Without KMS<br/><sup><sub>bd77554e-f138-40c5-91b2-2a09f878608e</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../ansible-queries/aws/bd77554e-f138-40c5-91b2-2a09f878608e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/efsmodule.html#parameter-kmskeyid">Documentation</a><br/>| |AWS Password Policy With Unchangeable Passwords<br/><sup><sub>e28ceb92-d588-4166-aac5-766c8f5b7472</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../ansible-queries/aws/e28ceb92-d588-4166-aac5-766c8f5b7472" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/iampasswordpolicymodule.html">Documentation</a><br/>| |Instance With No VPC<br/><sup><sub>61d1a2d0-4db8-405a-913d-5d2ce49dff6f</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../ansible-queries/aws/61d1a2d0-4db8-405a-913d-5d2ce49dff6f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2module.html">Documentation</a><br/>| |Lambda Function Without Tags<br/><sup><sub>265d9725-2fb8-42a2-bc57-3279c5db82d5</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../ansible-queries/aws/265d9725-2fb8-42a2-bc57-3279c5db82d5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/lambdamodule.html">Documentation</a><br/>| |EC2 Instance Using Default VPC<br/><sup><sub>8833f180-96f1-46f4-9147-849aafa56029</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../ansible-queries/aws/8833f180-96f1-46f4-9147-849aafa56029" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2module.html#parameter-vpcsubnetid">Documentation</a><br/>| |ElastiCache Using Default Port<br/><sup><sub>7cc6c791-5f68-4816-a564-b9b699f9d26e</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../ansible-queries/aws/7cc6c791-5f68-4816-a564-b9b699f9d26e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/elasticachemodule.html#parameter-cache_port">Documentation</a><br/>| |ElastiCache Without VPC<br/><sup><sub>5527dcfc-94f9-4bf6-b7d4-1b78850cf41f</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../ansible-queries/aws/5527dcfc-94f9-4bf6-b7d4-1b78850cf41f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/elasticachemodule.html#parameter-cachesubnetgroup">Documentation</a><br/>| |RDS Using Default Port<br/><sup><sub>2cb674f6-32f9-40be-97f2-62c0dc38f0d5</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../ansible-queries/aws/2cb674f6-32f9-40be-97f2-62c0dc38f0d5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/rdsinstance_module.html#parameter-port">Documentation</a><br/>| |Redshift Using Default Port<br/><sup><sub>e01de151-a7bd-4db4-b49b-3c4775a5e881</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../ansible-queries/aws/e01de151-a7bd-4db4-b49b-3c4775a5e881" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/redshiftmodule.html#parameter-port">Documentation</a><br/>| |API Gateway X-Ray Disabled<br/><sup><sub>2059155b-27fd-441e-b616-6966c468561f</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/2059155b-27fd-441e-b616-6966c468561f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awsapigatewaymodule.html#parameter-tracing_enabled">Documentation</a><br/>| |CloudTrail Log File Validation Disabled<br/><sup><sub>4d8681a2-3d30-4c89-8070-08acd142748e</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/4d8681a2-3d30-4c89-8070-08acd142748e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudtrailmodule.html">Documentation</a><br/>| |CloudTrail Multi Region Disabled<br/><sup><sub>6ad087d7-a509-4b20-b853-9ef6f5ebaa98</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/6ad087d7-a509-4b20-b853-9ef6f5ebaa98" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudtrailmodule.html#parameter-ismultiregion_trail">Documentation</a><br/>| |CloudTrail Not Integrated With CloudWatch<br/><sup><sub>ebb2118a-03bc-4d53-ab43-d8750f5cb8d3</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/ebb2118a-03bc-4d53-ab43-d8750f5cb8d3" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudtrailmodule.html">Documentation</a><br/>| |CloudTrail SNS Topic Name Undefined<br/><sup><sub>5ba316a9-c466-4ec1-8d5b-bc6107dc9a92</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/5ba316a9-c466-4ec1-8d5b-bc6107dc9a92" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudtrailmodule.html">Documentation</a><br/>| |CMK Rotation Disabled<br/><sup><sub>af96d737-0818-4162-8c41-40d969bd65d1</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/af96d737-0818-4162-8c41-40d969bd65d1" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awskmsmodule.html#parameter-enablekey_rotation">Documentation</a><br/>| |Configuration Aggregator to All Regions Disabled<br/><sup><sub>a2fdf451-89dd-451e-af92-bf6c0f4bab96</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/a2fdf451-89dd-451e-af92-bf6c0f4bab96" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/awsconfigaggregatormodule.html#parameter-organization_source">Documentation</a><br/>| |Lambda Functions Without X-Ray Tracing<br/><sup><sub>71397b34-1d50-4ee1-97cb-c96c34676f74</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/71397b34-1d50-4ee1-97cb-c96c34676f74" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/lambdamodule.html">Documentation</a><br/>| |Stack Notifications Disabled<br/><sup><sub>d39761d7-94ab-45b0-ab5e-27c44e381d58</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/aws/d39761d7-94ab-45b0-ab5e-27c44e381d58" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/cloudformationmodule.html#parameter-notification_arns">Documentation</a><br/>| |EC2 Not EBS Optimized<br/><sup><sub>338b6cab-961d-4998-bb49-e5b6a11c9a5c</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../ansible-queries/aws/338b6cab-961d-4998-bb49-e5b6a11c9a5c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/amazon/aws/ec2module.html#parameter-ebs_optimized">Documentation</a><br/>| |CloudWatch Without Retention Period Specified<br/><sup><sub>e24e18d9-4c2b-4649-b3d0-18c088145e24</sub></sup>|<span style="color:#5bc0de">Info</span>|Observability|<a href="../ansible-queries/aws/e24e18d9-4c2b-4649-b3d0-18c088145e24" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/cloudwatchlogsloggroupmodule.html">Documentation</a><br/>| Below are listed queries related to Ansible AZURE: | Query |Severity|Category|More info| ||--|--|--| |CosmosDB Account IP Range Filter Not Set<br/><sup><sub>e8c80448-31d8-4755-85fc-6dbab69c2717</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../ansible-queries/azure/e8c80448-31d8-4755-85fc-6dbab69c2717" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermcosmosdbaccountmodule.html#parameter-iprangefilter">Documentation</a><br/>| |Redis Entirely Accessible<br/><sup><sub>0d0c12b9-edce-4510-9065-13f6a758750c</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../ansible-queries/azure/0d0c12b9-edce-4510-9065-13f6a758750c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermrediscachefirewallrulemodule.html#parameter-startipaddress">Documentation</a><br/>| |Redis Publicly Accessible<br/><sup><sub>0632d0db-9190-450a-8bb3-c283bffea445</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../ansible-queries/azure/0632d0db-9190-450a-8bb3-c283bffea445" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermrediscachefirewallrulemodule.html#parameter-startipaddress">Documentation</a><br/>| |SQLServer Ingress From Any IP<br/><sup><sub>f4e9ff70-0f3b-4c50-a713-26cbe7ec4039</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../ansible-queries/azure/f4e9ff70-0f3b-4c50-a713-26cbe7ec4039" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermsqlfirewallrulemodule.html">Documentation</a><br/>| |Unrestricted SQL Server Access<br/><sup><sub>3f23c96c-f9f5-488d-9b17-605b8da5842f</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../ansible-queries/azure/3f23c96c-f9f5-488d-9b17-605b8da5842f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermsqlfirewallrulemodule.html">Documentation</a><br/>| |Default Azure Storage Account Network Access Is Too Permissive<br/><sup><sub>ca4df748-613a-4fbf-9c76-f02cbd580307</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/azure/ca4df748-613a-4fbf-9c76-f02cbd580307" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermstorageaccountmodule.html#parameter-publicnetworkaccess">Documentation</a><br/>| |Public Storage Account<br/><sup><sub>35e2f133-a395-40de-a79d-b260d973d1bd</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/azure/35e2f133-a395-40de-a79d-b260d973d1bd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermstorageaccountmodule.html#parameter-network_acls">Documentation</a><br/>| |Storage Container Is Publicly Accessible<br/><sup><sub>4d3817db-dd35-4de4-a80d-3867157e7f7f</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/azure/4d3817db-dd35-4de4-a80d-3867157e7f7f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermstorageblobmodule.html#parameter-public_access">Documentation</a><br/>| |Azure Container Registry With No Locks<br/><sup><sub>581dae78-307d-45d5-aae4-fe2b0db267a5</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/azure/581dae78-307d-45d5-aae4-fe2b0db267a5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermlockmodule.html">Documentation</a><br/>| |Security Group is Not Configured<br/><sup><sub>da4f2739-174f-4cdd-b9ef-dc3f14b5931f</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/azure/da4f2739-174f-4cdd-b9ef-dc3f14b5931f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermsubnetmodule.html">Documentation</a><br/>| |Sensitive Port Is Exposed To Entire Network<br/><sup><sub>0ac9abbc-6d7a-41cf-af23-2e57ddb3dbfc</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/azure/0ac9abbc-6d7a-41cf-af23-2e57ddb3dbfc" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermsecuritygroupmodule.html#parameter-rules">Documentation</a><br/>| |Admin User Enabled For Container Registry<br/><sup><sub>29f35127-98e6-43af-8ec1-201b79f99604</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/azure/29f35127-98e6-43af-8ec1-201b79f99604" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermcontainerregistrymodule.html">Documentation</a><br/>| |AKS RBAC Disabled<br/><sup><sub>149fa56c-4404-4f90-9e25-d34b676d5b39</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a

target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermaksmodule.html">Documentation</a><br/>| |Role Definition Allows Custom Role Creation<br/><sup><sub>5c80db8e-03f5-43a2-b4af-1f3f87018157</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/azure/5c80db8e-03f5-43a2-b4af-1f3f87018157" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermroledefinitionmodule.html#parameter-permissions/actions">Documentation</a><br/>| |Key Vault Soft Delete Is Disabled<br/><sup><sub>881696a8-68c5-4073-85bc-7c38a3deb854</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../ansible-queries/azure/881696a8-68c5-4073-85bc-7c38a3deb854" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermkeyvaultmodule.html#parameter-enablesoftdelete">Documentation</a><br/>| |Azure Instance Using Basic Authentication<br/><sup><sub>e2d834b7-8b25-4935-af53-4a60668dcbe0</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../ansible-queries/azure/e2d834b7-8b25-4935-af53-4a60668dcbe0" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermvirtualmachinemodule.html#parameter-linuxconfig/disablepassword_authentication">Documentation</a><br/>| |MySQL SSL Connection Disabled<br/><sup><sub>2a901825-0f3b-4655-a0fe-e0470e50f8e6</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/azure/2a901825-0f3b-4655-a0fe-e0470e50f8e6" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermmysqlservermodule.html">Documentation</a><br/>| |SSL Enforce Disabled<br/><sup><sub>961ce567-a16d-4d7d-9027-f0ec2628a555</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/azure/961ce567-a16d-4d7d-9027-f0ec2628a555" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermpostgresqlservermodule.html#parameter-enforce_ssl">Documentation</a><br/>| |Storage Account Not Forcing HTTPS<br/><sup><sub>2c99a474-2a3c-4c17-8294-53ffa5ed0522</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/azure/2c99a474-2a3c-4c17-8294-53ffa5ed0522" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermstorageaccountmodule.html#parameter-https_only">Documentation</a><br/>| |Storage Account Not Using Latest TLS Encryption Version<br/><sup><sub>c62746cf-92d5-4649-9acf-7d48d086f2ee</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/azure/c62746cf-92d5-4649-9acf-7d48d086f2ee" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermstorageaccountmodule.html#parameter-minimumtlsversion">Documentation</a><br/>| |AD Admin Not Configured For SQL Server<br/><sup><sub>b176e927-bbe2-44a6-a9c3-041417137e5f</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/azure/b176e927-bbe2-44a6-a9c3-041417137e5f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermsqlservermodule.html#parameter-ad_user">Documentation</a><br/>| |Redis Cache Allows Non SSL Connections<br/><sup><sub>869e7fb4-30f0-4bdb-b360-ad548f337f2f</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/azure/869e7fb4-30f0-4bdb-b360-ad548f337f2f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermrediscachemodule.html">Documentation</a><br/>| |VM Not Attached To Network<br/><sup><sub>1e5f5307-3e01-438d-8da6-985307ed25ce</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/azure/1e5f5307-3e01-438d-8da6-985307ed25ce" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermvirtualmachinemodule.html#parameter-networkinterfacenames">Documentation</a><br/>| |Web App Accepting Traffic Other Than HTTPS<br/><sup><sub>eb8c2560-8bee-4248-9d0d-e80c8641dd91</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/azure/eb8c2560-8bee-4248-9d0d-e80c8641dd91" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermwebappmodule.html#parameter-https_only">Documentation</a><br/>| |Firewall Rule Allows Too Many Hosts To Access Redis Cache<br/><sup><sub>69f72007-502e-457b-bd2d-5012e31ac049</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/azure/69f72007-502e-457b-bd2d-5012e31ac049" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermrediscachefirewallrulemodule.html">Documentation</a><br/>| |Trusted Microsoft Services Not Enabled<br/><sup><sub>1bc398a8-d274-47de-a4c8-6ac867b353de</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/azure/1bc398a8-d274-47de-a4c8-6ac867b353de" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermstorageaccountmodule.html#parameter-network_acls/bypass">Documentation</a><br/>| |WAF Is Disabled For Azure Application Gateway<br/><sup><sub>2fc5ab5a-c5eb-4ae4-b687-0f16fe77c255</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/azure/2fc5ab5a-c5eb-4ae4-b687-0f16fe77c255" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermappgatewaymodule.html">Documentation</a><br/>| |AKS Monitoring Logging Disabled<br/><sup><sub>d5e83b32-56dd-4247-8c2e-074f43b38a5e</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/d5e83b32-56dd-4247-8c2e-074f43b38a5e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermaksmodule.html">Documentation</a><br/>| |Log Retention Is Not Set<br/><sup><sub>0461b4fd-21ef-4687-929e-484ee4796785</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/0461b4fd-21ef-4687-929e-484ee4796785" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermpostgresqlconfigurationmodule.html">Documentation</a><br/>| |Monitoring Log Profile Without All Activities<br/><sup><sub>89f84a1e-75f8-47c5-83b5-bee8e2de4168</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/89f84a1e-75f8-47c5-83b5-bee8e2de4168" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermmonitorlogprofilemodule.html">Documentation</a><br/>| |PostgreSQL Log Checkpoints Disabled<br/><sup><sub>7ab33ac0-e4a3-418f-a673-50da4e34df21</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/7ab33ac0-e4a3-418f-a673-50da4e34df21" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermpostgresqlconfigurationmodule.html">Documentation</a><br/>| |PostgreSQL Log Connections Not Set<br/><sup><sub>7b47138f-ec0e-47dc-8516-e7728fe3cc17</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/7b47138f-ec0e-47dc-8516-e7728fe3cc17" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermpostgresqlconfigurationmodule.html">Documentation</a><br/>| |PostgreSQL Log Disconnections Not Set<br/><sup><sub>054d07b5-941b-4c28-8eef-18989dc62323</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/054d07b5-941b-4c28-8eef-18989dc62323" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermpostgresqlconfigurationmodule.html">Documentation</a><br/>| |PostgreSQL Log Duration Not Set<br/><sup><sub>729ebb15-8060-40f7-9017-cb72676a5487</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/729ebb15-8060-40f7-9017-cb72676a5487" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermpostgresqlconfigurationmodule.html">Documentation</a><br/>| |PostgreSQL Server Without Connection Throttling<br/><sup><sub>a9becca7-892a-4af7-b9e1-44bf20a4cd9a</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/azure/a9becca7-892a-4af7-b9e1-44bf20a4cd9a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermpostgresqlconfigurationmodule.html">Documentation</a><br/>| |SQL Server Predictable Active Directory Account Name<br/><sup><sub>530e8291-2f22-4bab-b7ea-306f1bc2a308</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/azure/530e8291-2f22-4bab-b7ea-306f1bc2a308" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermadserviceprincipalmodule.html">Documentation</a><br/>| |SQL Server Predictable Admin Account Name<br/><sup><sub>663062e9-473d-4e87-99bc-6f3684b3df40</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/azure/663062e9-473d-4e87-99bc-6f3684b3df40" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermsqlservermodule.html">Documentation</a><br/>| |Cosmos DB Account Without Tags<br/><sup><sub>23a4dc83-4959-4d99-8056-8e051a82bc1e</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../ansible-queries/azure/23a4dc83-4959-4d99-8056-8e051a82bc1e" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermcosmosdbaccountmodule.html">Documentation</a><br/>| |AKS Network Policy Misconfigured<br/><sup><sub>8c3bedf1-c570-4c3b-b414-d068cd39a00c</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../ansible-queries/azure/8c3bedf1-c570-4c3b-b414-d068cd39a00c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermaksmodule.html#parameter-networkprofile/networkpolicy">Documentation</a><br/>| |Small Activity Log Retention Period<br/><sup><sub>37fafbea-dedb-4e0d-852e-d16ee0589326</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/azure/37fafbea-dedb-4e0d-852e-d16ee0589326" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/azure/azcollection/azurermmonitorlogprofilemodule.html">Documentation</a><br/>| Below are listed queries related to Ansible CONFIG: | Query |Severity|Category|More info| ||--|--|--| |Allow Unsafe Lookups Enabled<br/><sup><sub>86b97bb4-85c9-462d-8635-cbc057c5c8c5</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/86b97bb4-85c9-462d-8635-cbc057c5c8c5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/referenceappendices/config.html#default-allow-unsafe-lookups">Documentation</a><br/>| |Privilege Escalation Using Become Plugin<br/><sup><sub>404908b6-4954-4611-98f0-e8ceacdabcb1</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/404908b6-4954-4611-98f0-e8ceacdabcb1" target="_blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/plugins/become.html">Documentation</a><br/>| |Communication over HTTP<br/><sup><sub>d7dc9350-74bc-485b-8c85-fed22d276c43</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/d7dc9350-74bc-485b-8c85-fed22d276c43" target="_blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/plugins/httpapi.html">Documentation</a><br/>| |Logging of Sensitive Data<br/><sup><sub>c6473dae-8477-4119-88b7-b909b435ce7b</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/c6473dae-8477-4119-88b7-b909b435ce7b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/referenceappendices/logging.html#protecting-sensitive-data-with-no-log">Documentation</a><br/>| Below are listed queries related to Ansible GCP: | Query |Severity|Category|More info| ||--|--|--| |Cloud Storage Anonymous or Publicly Accessible<br/><sup><sub>086031e1-9d4a-4249-acb3-5bfe4c363db2</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../ansible-queries/gcp/086031e1-9d4a-4249-acb3-5bfe4c363db2" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpstoragebucketmodule.html">Documentation</a><br/>| |SQL DB Instance Publicly Accessible<br/><sup><sub>7d7054c0-3a52-4e9b-b9ff-cbfe16a2378b</sub></sup>|<span style="color:#ff0000">Critical</span>|Insecure Configurations|<a href="../ansible-queries/gcp/7d7054c0-3a52-4e9b-b9ff-cbfe16a2378b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html">Documentation</a><br/>| |BigQuery Dataset Is Public<br/><sup><sub>2263b286-2fe9-4747-a0ae-8b4768a2bbd2</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../ansible-queries/gcp/2263b286-2fe9-4747-a0ae-8b4768a2bbd2" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpbigquerydatasetmodule.html#parameter-access/special_group">Documentation</a><br/>| |SQL DB Instance With SSL Disabled<br/><sup><sub>d0f7da39-a2d5-4c78-bb85-4b7f338b3cbb</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../ansible-queries/gcp/d0f7da39-a2d5-4c78-bb85-4b7f338b3cbb" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/ipconfiguration/requiressl">Documentation</a><br/>| |Client Certificate Disabled<br/><sup><sub>20180133-a0d0-4745-bfe0-94049fbb12a9</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/gcp/20180133-a0d0-4745-bfe0-94049fbb12a9" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |Cloud SQL Instance With Contained Database Authentication On<br/><sup><sub>6d34aff3-fdd2-460c-8190-756a3b4969e8</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/gcp/6d34aff3-fdd2-460c-8190-756a3b4969e8" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/database_flags">Documentation</a><br/>| |Cloud SQL Instance With Cross DB Ownership Chaining On<br/><sup><sub>9e0c33ed-97f3-4ed6-8be9-bcbf3f65439f</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/gcp/9e0c33ed-97f3-4ed6-8be9-bcbf3f65439f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/database_flags">Documentation</a><br/>| |GKE Legacy Authorization Enabled<br/><sup><sub>300a9964-b086-41f7-9378-b6de3ba1c32b</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/gcp/300a9964-b086-41f7-9378-b6de3ba1c32b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |MySQL Instance With Local Infile On<br/><sup><sub>a7b520bb-2509-4fb0-be05-bc38f54c7a4c</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../ansible-queries/gcp/a7b520bb-2509-4fb0-be05-bc38f54c7a4c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/database_flags">Documentation</a><br/>| |RDP Access Is Not Restricted<br/><sup><sub>75418eb9-39ec-465f-913c-6f2b6a80dc77</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../ansible-queries/gcp/75418eb9-39ec-465f-913c-6f2b6a80dc77" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputefirewallmodule.html">Documentation</a><br/>| |VM With Full Cloud Access<br/><sup><sub>bc20bbc6-0697-4568-9a73-85af1dd97bdd</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/gcp/bc20bbc6-0697-4568-9a73-85af1dd97bdd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html#parameter-service_accounts/scopes">Documentation</a><br/>| |SQL DB Instance Backup Disabled<br/><sup><sub>0c82eae2-aca0-401f-93e4-fb37a0f9e5e8</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a

target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/backup_configuration/enabled">Documentation</a><br/>| |Disk Encryption Disabled<br/><sup><sub>092bae86-6105-4802-99d2-99cd7e7431f3</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/gcp/092bae86-6105-4802-99d2-99cd7e7431f3" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputediskmodule.html">Documentation</a><br/>| |DNSSEC Using RSASHA1<br/><sup><sub>6cf4c3a7-ceb0-4475-8892-3745b84be24a</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/gcp/6cf4c3a7-ceb0-4475-8892-3745b84be24a" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpdnsmanagedzone_module.html#return-dnssecConfig/defaultKeySpecs/algorithm">Documentation</a><br/>| |Google Compute SSL Policy Weak Cipher In Use<br/><sup><sub>b28bcd2f-c309-490e-ab7c-35fc4023eb26</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../ansible-queries/gcp/b28bcd2f-c309-490e-ab7c-35fc4023eb26" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputesslpolicy_module.html">Documentation</a><br/>| |Cloud DNS Without DNSSEC<br/><sup><sub>80b15fb1-6207-40f4-a803-6915ae619a03</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/80b15fb1-6207-40f4-a803-6915ae619a03" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpdnsmanagedzone_module.html#return-dnssecConfig/state">Documentation</a><br/>| |Cluster Master Authentication Disabled<br/><sup><sub>9df7f78f-ebe3-432e-ac3b-b67189c15518</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/9df7f78f-ebe3-432e-ac3b-b67189c15518" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |GKE Basic Authentication Enabled<br/><sup><sub>344bf8ab-9308-462b-a6b2-697432e40ba1</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/344bf8ab-9308-462b-a6b2-697432e40ba1" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |Google Container Node Pool Auto Repair Disabled<br/><sup><sub>d58c6f24-3763-4269-9f5b-86b2569a003b</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/d58c6f24-3763-4269-9f5b-86b2569a003b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainernodepool_module.html">Documentation</a><br/>| |IP Aliasing Disabled<br/><sup><sub>ed672a9f-fbf0-44d8-a47d-779501b0db05</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/ed672a9f-fbf0-44d8-a47d-779501b0db05" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |Network Policy Disabled<br/><sup><sub>98e04ca0-34f5-4c74-8fec-d2e611ce2790</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/98e04ca0-34f5-4c74-8fec-d2e611ce2790" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |OSLogin Is Disabled In VM Instance<br/><sup><sub>66dae697-507b-4aef-be18-eec5bd707f33</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/66dae697-507b-4aef-be18-eec5bd707f33" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html">Documentation</a><br/>| |Private Cluster Disabled<br/><sup><sub>3b30e3d6-c99b-4318-b38f-b99db74578b5</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/3b30e3d6-c99b-4318-b38f-b99db74578b5" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |Shielded VM Disabled<br/><sup><sub>18d3a83d-4414-49dc-90ea-f0387b2856cc</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/18d3a83d-4414-49dc-90ea-f0387b2856cc" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html">Documentation</a><br/>| |Using Default Service Account<br/><sup><sub>2775e169-e708-42a9-9305-b58aadd2c4dd</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/gcp/2775e169-e708-42a9-9305-b58aadd2c4dd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html">Documentation</a><br/>| |GKE Using Default Service Account<br/><sup><sub>dc126833-125a-40fb-905a-ce5f2afde240</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../ansible-queries/gcp/dc126833-125a-40fb-905a-ce5f2afde240" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html#parameter-nodeconfig/serviceaccount">Documentation</a><br/>| |Compute Instance Is Publicly Accessible<br/><sup><sub>829f1c60-2bab-44c6-8a21-5cd9d39a2c82</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/gcp/829f1c60-2bab-44c6-8a21-5cd9d39a2c82" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html#parameter-networkinterfaces/accessconfigs">Documentation</a><br/>| |GKE Master Authorized Networks Disabled<br/><sup><sub>d43366c5-80b0-45de-bbe8-2338f4ab0a83</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/gcp/d43366c5-80b0-45de-bbe8-2338f4ab0a83" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html#parameter-masterauthorizednetworks_config/enabled">Documentation</a><br/>| |Google Compute Network Using Default Firewall Rule<br/><sup><sub>29b8224a-60e9-4011-8ac2-7916a659841f</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/gcp/29b8224a-60e9-4011-8ac2-7916a659841f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputefirewallmodule.html#parameter-name">Documentation</a><br/>| |Google Compute Network Using Firewall Rule that Allows All Ports<br/><sup><sub>3602d273-3290-47b2-80fa-720162b1a8af</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/gcp/3602d273-3290-47b2-80fa-720162b1a8af" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputefirewallmodule.html#parameter-allowed">Documentation</a><br/>| |IP Forwarding Enabled<br/><sup><sub>11bd3554-cd56-4257-8e25-7aaf30cf8f5f</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/gcp/11bd3554-cd56-4257-8e25-7aaf30cf8f5f" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html">Documentation</a><br/>| |Serial Ports Are Enabled For VM Instances<br/><sup><sub>c6fc6f29-dc04-46b6-99ba-683c01aff350</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/gcp/c6fc6f29-dc04-46b6-99ba-683c01aff350" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html">Documentation</a><br/>| |SSH Access Is Not Restricted<br/><sup><sub>b2fbf1df-76dd-4d78-a6c0-e538f4a9b016</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../ansible-queries/gcp/b2fbf1df-76dd-4d78-a6c0-e538f4a9b016" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputefirewallmodule.html">Documentation</a><br/>| |Cloud Storage Bucket Logging Not Enabled<br/><sup><sub>507df964-ad97-4035-ab14-94a82eabdfdd</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/gcp/507df964-ad97-4035-ab14-94a82eabdfdd" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpstoragebucketmodule.html#parameter-logging">Documentation</a><br/>| |Cloud Storage Bucket Versioning Disabled<br/><sup><sub>7814ddda-e758-4a56-8be3-289a81ded929</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/gcp/7814ddda-e758-4a56-8be3-289a81ded929" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpstoragebucketmodule.html#parameter-versioning">Documentation</a><br/>| |PostgreSQL Log Connections Disabled<br/><sup><sub>d7a5616f-0a3f-4d43-bc2b-29d1a183e317</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/gcp/d7a5616f-0a3f-4d43-bc2b-29d1a183e317" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/database_flags">Documentation</a><br/>| |PostgreSQL logcheckpoints Flag Not Set To ON<br/><sup><sub>89afe3f0-4681-4ce3-89ed-896cebd4277c</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/gcp/89afe3f0-4681-4ce3-89ed-896cebd4277c" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/databaseflags">Documentation</a><br/>| |Stackdriver Logging Disabled<br/><sup><sub>19c9e2a0-fc33-4264-bba1-e3682661e8f7</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/gcp/19c9e2a0-fc33-4264-bba1-e3682661e8f7" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |Stackdriver Monitoring Disabled<br/><sup><sub>20dcd953-a8b8-4892-9026-9afa6d05a525</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../ansible-queries/gcp/20dcd953-a8b8-4892-9026-9afa6d05a525" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |Node Auto Upgrade Disabled<br/><sup><sub>d6e10477-2e19-4bcd-b8a8-19c65b89ccdf</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../ansible-queries/gcp/d6e10477-2e19-4bcd-b8a8-19c65b89ccdf" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainernodepoolmodule.html#parameter-management/autoupgrade">Documentation</a><br/>| |High Google KMS Crypto Key Rotation Period<br/><sup><sub>f9b7086b-deb8-4034-9330-d7fd38f1b8de</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../ansible-queries/gcp/f9b7086b-deb8-4034-9330-d7fd38f1b8de" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpkmscryptokey_module.html">Documentation</a><br/>| |Project-wide SSH Keys Are Enabled In VM Instances<br/><sup><sub>099b4411-d11e-4537-a0fc-146b19762a79</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../ansible-queries/gcp/099b4411-d11e-4537-a0fc-146b19762a79" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputeinstancemodule.html">Documentation</a><br/>| |Cluster Labels Disabled<br/><sup><sub>fbe9b2d0-a2b7-47a1-a534-03775f3013f7</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../ansible-queries/gcp/fbe9b2d0-a2b7-47a1-a534-03775f3013f7" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainerclustermodule.html">Documentation</a><br/>| |COS Node Image Not Used<br/><sup><sub>be41f891-96b1-4b9d-b74f-b922a918c778</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../ansible-queries/gcp/be41f891-96b1-4b9d-b74f-b922a918c778" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcontainernodepoolmodule.html#parameter-config/imagetype">Documentation</a><br/>| |PostgreSQL Misconfigured Logging Duration Flag<br/><sup><sub>aed98a2a-e680-497a-8886-277cea0f4514</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../ansible-queries/gcp/aed98a2a-e680-497a-8886-277cea0f4514" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/database_flags">Documentation</a><br/>| |Google Compute Network Using Firewall Rule that Allows Port Range<br/><sup><sub>7289eebd-a477-4064-8ad4-3c044bd70b00</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../ansible-queries/gcp/7289eebd-a477-4064-8ad4-3c044bd70b00" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputefirewallmodule.html#parameter-allowed">Documentation</a><br/>| |Google Compute Subnetwork with Private Google Access Disabled<br/><sup><sub>6a4080ae-79bd-42f6-a924-8f534c1c018b</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../ansible-queries/gcp/6a4080ae-79bd-42f6-a924-8f534c1c018b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpcomputesubnetworkmodule.html#parameter-privateipgoogle_access">Documentation</a><br/>| |PostgreSQL Logging Of Temporary Files Disabled<br/><sup><sub>d6fae5b6-ada9-46c0-8b36-3108a2a2f77b</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/gcp/d6fae5b6-ada9-46c0-8b36-3108a2a2f77b" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/database_flags">Documentation</a><br/>| |PostgreSQL Misconfigured Log Messages Flag<br/><sup><sub>28a757fc-3d8f-424a-90c0-4233363b2711</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../ansible-queries/gcp/28a757fc-3d8f-424a-90c0-4233363b2711" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/google/cloud/gcpsqlinstancemodule.html#parameter-settings/database_flags">Documentation</a><br/>| Below are listed queries related to Ansible HOSTS: | Query |Severity|Category|More info| ||--|--|--| |Ansible Tower Exposed To Internet<br/><sup><sub>1b2bf3ff-31e9-460e-bbfb-45e48f4f20cc</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../ansible-queries/1b2bf3ff-31e9-460e-bbfb-45e48f4f20cc" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible-tower/latest/html/administration/securitybest_practices.html#understand-the-architecture-of-ansible-and-tower">Documentation</a><br/>| Below are listed queries related to Ansible SHARED (V2/V3): | Query |Severity|Category|More info| ||--|--|--| |Privilege Escalation Using Become Plugin<br/><sup><sub>0e75052f-cc02-41b8-ac39-a78017527e95</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../ansible-queries/0e75052f-cc02-41b8-ac39-a78017527e95" target="_blank">Query details</a><br><a href="https://ansible.readthedocs.io/projects/lint/rules/partial-become/#problematic-code">Documentation</a><br/>| |Communication Over HTTP<br/><sup><sub>2e8d4922-8362-4606-8c14-aa10466a1ce3</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../ansible-queries/2e8d4922-8362-4606-8c14-aa10466a1ce3" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/ansible/builtin/urimodule.html#parameter-url">Documentation</a><br/>| |Insecure Relative Path Resolution<br/><sup><sub>8d22ae91-6ac1-459f-95be-d37bd373f244</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/8d22ae91-6ac1-459f-95be-d37bd373f244" target="_blank">Query details</a><br><a href="https://ansible.readthedocs.io/projects/lint/rules/no-relative-paths/">Documentation</a><br/>| |Logging of Sensitive Data<br/><sup><sub>59029ddf-e651-412b-ae7b-ff6d403184bc</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../ansible-queries/59029ddf-e651-412b-ae7b-ff6d403184bc" target="_blank">Query details</a><br><a href="https://ansible.readthedocs.io/projects/lint/rules/no-log-password/">Documentation</a><br/>| |Unpinned Package Version<br/><sup><sub>c05e2c20-0a2c-4686-b1f8-5f0a5612d4e8</sub></sup>|<span style="color:#edd57e">Low</span>|Supply-Chain|<a href="../ansible-queries/c05e2c20-0a2c-4686-b1f8-5f0a5612d4e8" target="_blank">Query details</a><br><a href="https://ansible.readthedocs.io/projects/lint/rules/package-latest/">Documentation</a><br/>| |Risky File Permissions<br/><sup><sub>88841d5c-d22d-4b7e-a6a0-89ca50e44b9f</sub></sup>|<span style="color:#5bc0de">Info</span>|Supply-Chain|<a href="../ansible-queries/88841d5c-d22d-4b7e-a6a0-89ca50e44b9f" target="_blank">Query details</a><br><a href="https://ansible.readthedocs.io/projects/lint/rules/risky-file-permissions/">Documentation</a><br/>|