Project: KICS (Provisioning / Security & Compliance)
File: terraform-queries.md

This page contains all queries from Terraform. Below are listed queries related to Terraform ALICLOUD: | Query |Severity|Category|More info| ||--|--|--| |OSS Bucket Allows All Actions From All Principals<br/><sup><sub>ec62a32c-a297-41ca-a850-cab40b42094a</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/alicloud/ec62a32c-a297-41ca-a850-cab40b42094a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#policy">Documentation</a><br/>| |OSS Bucket Allows Delete Action From All Principals<br/><sup><sub>8c0695d8-2378-4cd6-8243-7fd5894fa574</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/alicloud/8c0695d8-2378-4cd6-8243-7fd5894fa574" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#policy">Documentation</a><br/>| |OSS Bucket Allows Put Action From All Principals<br/><sup><sub>fe286195-e75c-4359-bd58-00847c4f855a</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/alicloud/fe286195-e75c-4359-bd58-00847c4f855a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#policy">Documentation</a><br/>| |RDS DB Instance Publicly Accessible<br/><sup><sub>faaefc15-51a5-419e-bb5e-51a4b5ab3485</sub></sup>|<span style="color:#ff0000">Critical</span>|Insecure Configurations|<a href="../terraform-queries/alicloud/faaefc15-51a5-419e-bb5e-51a4b5ab3485" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#address">Documentation</a><br/>| |OSS Bucket Allows List Action From All Principals<br/><sup><sub>88541597-6f88-42c8-bac6-7e0b855e8ff6</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/alicloud/88541597-6f88-42c8-bac6-7e0b855e8ff6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#policy">Documentation</a><br/>| |OSS Bucket Public Access Enabled<br/><sup><sub>62232513-b16f-4010-83d7-51d0e1d45426</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/alicloud/62232513-b16f-4010-83d7-51d0e1d45426" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#acl">Documentation</a><br/>| |Ecs Data Disk Kms Key Id Undefined<br/><sup><sub>f262118c-1ac6-4bb3-8495-cc48f1775b85</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/alicloud/f262118c-1ac6-4bb3-8495-cc48f1775b85" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/disk#kmskey_id">Documentation</a><br/>| |Launch Template Is Not Encrypted<br/><sup><sub>1455cb21-1d48-46d6-8ae3-cef911b71fd5</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/alicloud/1455cb21-1d48-46d6-8ae3-cef911b71fd5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/launchtemplate#encrypted">Documentation</a><br/>| |NAS File System Not Encrypted<br/><sup><sub>67bfdff1-31ce-4525-b564-e94368735360</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/alicloud/67bfdff1-31ce-4525-b564-e94368735360" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/nasfilesystem#encrypttype">Documentation</a><br/>| |NAS File System Without KMS<br/><sup><sub>5f670f9d-b1b4-4c90-8618-2288f1ab9676</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/alicloud/5f670f9d-b1b4-4c90-8618-2288f1ab9676" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/nasfilesystem#kmskey_id">Documentation</a><br/>| |RDS Instance TDE Status Disabled<br/><sup><sub>44d434ca-a9bf-4203-8828-4c81a8d5a598</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/alicloud/44d434ca-a9bf-4203-8828-4c81a8d5a598" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#tde_status">Documentation</a><br/>| |OSS Bucket Has Static Website<br/><sup><sub>2b13c6ff-b87a-484d-86fd-21ef6e97d426</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/alicloud/2b13c6ff-b87a-484d-86fd-21ef6e97d426" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#website">Documentation</a><br/>| |OSS Bucket Ip Restriction Disabled<br/><sup><sub>6107c530-7178-464a-88bc-df9cdd364ac8</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/6107c530-7178-464a-88bc-df9cdd364ac8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#policy">Documentation</a><br/>| |Public Security Group Rule All Ports or Protocols<br/><sup><sub>60587dbd-6b67-432e-90f7-a8cf1892d968</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/60587dbd-6b67-432e-90f7-a8cf1892d968" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/securitygrouprule#cidrip">Documentation</a><br/>| |Public Security Group Rule Sensitive Port<br/><sup><sub>2ae9d554-23fb-4065-bfd1-fe43d5f7c419</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/2ae9d554-23fb-4065-bfd1-fe43d5f7c419" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/securitygrouprule#portrange">Documentation</a><br/>| |Public Security Group Rule Unknown Port<br/><sup><sub>dd706080-b7a8-47dc-81fb-3e8184430ec0</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/dd706080-b7a8-47dc-81fb-3e8184430ec0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/securitygrouprule#portrange">Documentation</a><br/>| |ActionTrail Trail OSS Bucket is Publicly Accessible<br/><sup><sub>69b5d7da-a5db-4db9-a42e-90b65d0efb0b</sub></sup>|<span style="color:#bb2124">High</span>|Observability|<a href="../terraform-queries/alicloud/69b5d7da-a5db-4db9-a42e-90b65d0efb0b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/actiontrailtrail">Documentation</a><br/>| |Ram Policy Admin Access Not Attached to Users Groups Roles<br/><sup><sub>e8e62026-da63-4904-b402-65adfe3ca975</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/alicloud/e8e62026-da63-4904-b402-65adfe3ca975" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/rampolicy">Documentation</a><br/>| |Ram Policy Attached to User<br/><sup><sub>66505003-7aba-45a1-8d83-5162d5706ef5</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/alicloud/66505003-7aba-45a1-8d83-5162d5706ef5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramuserpolicyattachment">Documentation</a><br/>| |CMK Is Unusable<br/><sup><sub>ed6e3ba0-278f-47b6-a1f5-173576b40b7e</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../terraform-queries/alicloud/ed6e3ba0-278f-47b6-a1f5-173576b40b7e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/kmskey#is_enabled">Documentation</a><br/>| |OSS Bucket Versioning Disabled<br/><sup><sub>70919c0b-2548-4e6b-8d7a-3d84ab6dabba</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/alicloud/70919c0b-2548-4e6b-8d7a-3d84ab6dabba" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#versioning">Documentation</a><br/>| |ROS Stack Retention Disabled<br/><sup><sub>4bb06fa1-2114-4a00-b7b5-6aeab8b896f0</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/alicloud/4bb06fa1-2114-4a00-b7b5-6aeab8b896f0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/rosstackinstance#retainstacks">Documentation</a><br/>| |ROS Stack Without Template<br/><sup><sub>92d65c51-5d82-4507-a2a1-d252e9706855</sub></sup>|<span style="color:#ff7213">Medium</span>|Build Process|<a href="../terraform-queries/aws/92d65c51-5d82-4507-a2a1-d252e9706855" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/rosstack">Documentation</a><br/>| |Disk Encryption Disabled<br/><sup><sub>39750e32-3fe9-453b-8c33-dd277acdb2cc</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/alicloud/39750e32-3fe9-453b-8c33-dd277acdb2cc" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/disk#encrypted">Documentation</a><br/>| |OSS Bucket Encryption Using CMK Disabled<br/><sup><sub>f20e97f9-4919-43f1-9be9-f203cd339cdd</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/alicloud/f20e97f9-4919-43f1-9be9-f203cd339cdd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#serversideencryption_rule">Documentation</a><br/>| |SLB Policy With Insecure TLS Version In Use<br/><sup><sub>dbfc834a-56e5-4750-b5da-73fda8e73f70</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/alicloud/dbfc834a-56e5-4750-b5da-73fda8e73f70" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/slbtlscipherpolicy">Documentation</a><br/>| |CS Kubernetes Node Pool Auto Repair Disabled<br/><sup><sub>81ce9394-013d-4731-8fcc-9d229b474073</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/alicloud/81ce9394-013d-4731-8fcc-9d229b474073" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/cskubernetesnodepool#auto_repair">Documentation</a><br/>| |RDS DB Instance Publicly Accessible<br/><sup><sub>1b4565c0-4877-49ac-ab03-adebbccd42ae</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/alicloud/1b4565c0-4877-49ac-ab03-adebbccd42ae" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#security_ips">Documentation</a><br/>| |ALB Listening on HTTP<br/><sup><sub>ee3b1557-9fb5-4685-a95d-93f1edf2a0d7</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/ee3b1557-9fb5-4685-a95d-93f1edf2a0d7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/alblistener">Documentation</a><br/>| |API Gateway API Protocol Not HTTPS<br/><sup><sub>1bcdf9f0-b1aa-40a4-b8c6-cd7785836843</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/1bcdf9f0-b1aa-40a4-b8c6-cd7785836843" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/apigateway_api#protocol">Documentation</a><br/>| |OSS Buckets Secure Transport Disabled<br/><sup><sub>c01d10de-c468-4790-b3a0-fc887a56f289</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/c01d10de-c468-4790-b3a0-fc887a56f289" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#policy">Documentation</a><br/>| |RDS Instance SSL Action Disabled<br/><sup><sub>7a1ee8a9-71be-4b11-bb70-efb62d16863b</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/7a1ee8a9-71be-4b11-bb70-efb62d16863b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#ssl_action">Documentation</a><br/>| |Action Trail Logging For All Regions Disabled<br/><sup><sub>c065b98e-1515-4991-9dca-b602bd6a2fbb</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/alicloud/c065b98e-1515-4991-9dca-b602bd6a2fbb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/actiontrailtrail#trail_region">Documentation</a><br/>| |OSS Bucket Logging Disabled<br/><sup><sub>05db341e-de7d-4972-a106-3e2bd5ee53e1</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/alicloud/05db341e-de7d-4972-a106-3e2bd5ee53e1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#logging">Documentation</a><br/>| |RDS Instance Events Not Logged<br/><sup><sub>b9c524a4-fe76-4021-a6a2-cb978fb4fde1</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/alicloud/b9c524a4-fe76-4021-a6a2-cb978fb4fde1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/logaudit">Documentation</a><br/>| |RDS Instance Log Connections Disabled<br/><sup><sub>140869ea-25f2-40d4-a595-0c0da135114e</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/alicloud/140869ea-25f2-40d4-a595-0c0da135114e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#parameters">Documentation</a><br/>| |RDS Instance Log Disconnections Disabled<br/><sup><sub>d53f4123-f8d8-4224-8cb3-f920b151cc98</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/alicloud/d53f4123-f8d8-4224-8cb3-f920b151cc98" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#parameters">Documentation</a><br/>| |RDS Instance Log Duration Disabled<br/><sup><sub>a597e05a-c065-44e7-9cc8-742f572a504a</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/alicloud/a597e05a-c065-44e7-9cc8-742f572a504a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#parameters">Documentation</a><br/>| |VPC Flow Logs Disabled<br/><sup><sub>d2731f3d-a992-44ed-812e-f4f1c2747d71</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/alicloud/d2731f3d-a992-44ed-812e-f4f1c2747d71" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/vpcflow_log">Documentation</a><br/>| |No ROS Stack Policy<br/><sup><sub>72ceb736-0aee-43ea-a191-3a69ab135681</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/alicloud/72ceb736-0aee-43ea-a191-3a69ab135681" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/rosstack">Documentation</a><br/>| |High KMS Key Rotation Period<br/><sup><sub>cb319d87-b90f-485e-a7e7-f2408380f309</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/alicloud/cb319d87-b90f-485e-a7e7-f2408380f309" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/kmskey">Documentation</a><br/>| |Ram Account Password Policy Max Login Attempts Unrecommended<br/><sup><sub>e76fd7ab-7333-40c6-a2d8-ea28af4a319e</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/alicloud/e76fd7ab-7333-40c6-a2d8-ea28af4a319e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#maxloginattempts">Documentation</a><br/>| |Ram Account Password Policy Max Password Age Unrecommended<br/><sup><sub>2bb13841-7575-439e-8e0a-cccd9ede2fa8</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/alicloud/2bb13841-7575-439e-8e0a-cccd9ede2fa8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#maxpasswordage">Documentation</a><br/>| |RAM Account Password Policy without Reuse Prevention<br/><sup><sub>a8128dd2-89b0-464b-98e9-5d629041dfe0</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/alicloud/a8128dd2-89b0-464b-98e9-5d629041dfe0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#passwordreuseprevention">Documentation</a><br/>| |RAM Security Preference Not Enforce MFA Login<br/><sup><sub>dcda2d32-e482-43ee-a926-75eaabeaa4e0</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/alicloud/dcda2d32-e482-43ee-a926-75eaabeaa4e0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramsecuritypreference#enforcemfaforlogin">Documentation</a><br/>| |OSS Bucket Transfer Acceleration Disabled<br/><sup><sub>8f98334a-99aa-4d85-b72a-1399ca010413</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/alicloud/8f98334a-99aa-4d85-b72a-1399ca010413" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#transfer_acceleration">Documentation</a><br/>| |OSS Bucket Lifecycle Rule Disabled<br/><sup><sub>7db8bd7e-9772-478c-9ec5-4bc202c5686f</sub></sup>|<span style="color:#edd57e">Low</span>|Backup|<a href="../terraform-queries/alicloud/7db8bd7e-9772-478c-9ec5-4bc202c5686f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ossbucket#lifecycle_rule">Documentation</a><br/>| |Kubernetes Cluster Without Terway as CNI Network Plugin<br/><sup><sub>b9b7ada8-3868-4a35-854e-6100a2bb863d</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/alicloud/b9b7ada8-3868-4a35-854e-6100a2bb863d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/cskubernetes#clusternetworktype">Documentation</a><br/>| |Log Retention Is Not Greater Than 90 Days<br/><sup><sub>ed6cf6ff-9a1f-491c-9f88-e03c0807f390</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/alicloud/ed6cf6ff-9a1f-491c-9f88-e03c0807f390" target="blank">Query

href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/logstore#retention_period">Documentation</a><br/>| |RDS Instance Retention Period Not Recommended<br/><sup><sub>dc158941-28ce-481d-a7fa-dc80761edf46</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/alicloud/dc158941-28ce-481d-a7fa-dc80761edf46" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/dbinstance#sqlcollectorconfig_value">Documentation</a><br/>| |ROS Stack Notifications Disabled<br/><sup><sub>9ef08939-ea40-489c-8851-667870b2ef50</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/alicloud/9ef08939-ea40-489c-8851-667870b2ef50" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/rosstack#notification_urls">Documentation</a><br/>| |Ram Account Password Policy Not Require At Least one Lowercase Character<br/><sup><sub>89143358-cec6-49f5-9392-920c591c669c</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../terraform-queries/alicloud/89143358-cec6-49f5-9392-920c591c669c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#requirelowercasecharacters">Documentation</a><br/>| |RAM Account Password Policy Not Require at Least one Uppercase Character<br/><sup><sub>5e0fb613-ba9b-44c3-88f0-b44188466bfd</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../terraform-queries/alicloud/5e0fb613-ba9b-44c3-88f0-b44188466bfd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#requireuppercasecharacters">Documentation</a><br/>| |Ram Account Password Policy Not Required Minimum Length<br/><sup><sub>a9dfec39-a740-4105-bbd6-721ba163c053</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../terraform-queries/alicloud/a9dfec39-a740-4105-bbd6-721ba163c053" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#minimumpasswordlength">Documentation</a><br/>| |Ram Account Password Policy Not Required Numbers<br/><sup><sub>063234c0-91c0-4ab5-bbd0-47ddb5f23786</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../terraform-queries/alicloud/063234c0-91c0-4ab5-bbd0-47ddb5f23786" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#require_numbers">Documentation</a><br/>| |RAM Account Password Policy Not Required Symbols<br/><sup><sub>41a38329-d81b-4be4-aef4-55b2615d3282</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../terraform-queries/alicloud/41a38329-d81b-4be4-aef4-55b2615d3282" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/ramaccountpasswordpolicy#require_symbols">Documentation</a><br/>| Below are listed queries related to Terraform AWS: | Query |Severity|Category|More info| ||--|--|--| |Amazon DMS Replication Instance Is Publicly Accessible<br/><sup><sub>030d3b18-1821-45b4-9e08-50efbe7becbb</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/030d3b18-1821-45b4-9e08-50efbe7becbb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dmsreplication_instance">Documentation</a><br/>| |ECR Repository Is Publicly Accessible<br/><sup><sub>e86e26fc-489e-44f0-9bcd-97305e4ba69a</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/e86e26fc-489e-44f0-9bcd-97305e4ba69a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecrrepository_policy">Documentation</a><br/>| |S3 Bucket Access to Any Principal<br/><sup><sub>7af43613-6bb9-4a0e-8c4d-1314b799425e</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/7af43613-6bb9-4a0e-8c4d-1314b799425e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket_policy">Documentation</a><br/>| |S3 Bucket ACL Allows Read Or Write to All Users<br/><sup><sub>38c5ee0d-7f22-4260-ab72-5073048df100</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/38c5ee0d-7f22-4260-ab72-5073048df100" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket">Documentation</a><br/>| |S3 Bucket ACL Grants WRITEACP Permission<br/><sup><sub>64a222aa-7793-4e40-915f-4b302c76e4d4</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/64a222aa-7793-4e40-915f-4b302c76e4d4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucketacl">Documentation</a><br/>| |S3 Bucket Allows Delete Action From All Principals<br/><sup><sub>ffdf4b37-7703-4dfe-a682-9d2e99bc6c09</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/ffdf4b37-7703-4dfe-a682-9d2e99bc6c09" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket_policy">Documentation</a><br/>| |S3 Bucket Allows Put Action From All Principals<br/><sup><sub>d24c0755-c028-44b1-b503-8e719c898832</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/d24c0755-c028-44b1-b503-8e719c898832" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket_policy">Documentation</a><br/>| |S3 Bucket With All Permissions<br/><sup><sub>a4966c4f-9141-48b8-a564-ffe9959945bc</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/a4966c4f-9141-48b8-a564-ffe9959945bc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket">Documentation</a><br/>| |SNS Topic is Publicly Accessible<br/><sup><sub>b26d2b7e-60f6-413d-a3a1-a57db24aa2b3</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/aws/b26d2b7e-60f6-413d-a3a1-a57db24aa2b3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/snstopic">Documentation</a><br/>| |RDS DB Instance Publicly Accessible<br/><sup><sub>35113e6f-2c6b-414d-beec-7a9482d3b2d1</sub></sup>|<span style="color:#ff0000">Critical</span>|Insecure Configurations|<a href="../terraform-queries/aws/35113e6f-2c6b-414d-beec-7a9482d3b2d1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance#publicly_accessible">Documentation</a><br/>| |DB Security Group With Public Scope<br/><sup><sub>1e0ef61b-ad85-4518-a3d3-85eaad164885</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../terraform-queries/aws/1e0ef61b-ad85-4518-a3d3-85eaad164885" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbsecurity_group">Documentation</a><br/>| |RDS Associated with Public Subnet<br/><sup><sub>2f737336-b18a-4602-8ea0-b200312e1ac1</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../terraform-queries/aws/2f737336-b18a-4602-8ea0-b200312e1ac1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance#dbsubnetgroup_name">Documentation</a><br/>| |CloudWatch Unauthorized Access Alarm Missing<br/><sup><sub>4c18a45b-4ab1-4790-9f83-399ac695f1e5</sub></sup>|<span style="color:#ff0000">Critical</span>|Observability|<a href="../terraform-queries/aws/4c18a45b-4ab1-4790-9f83-399ac695f1e5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |Cross-Account IAM Assume Role Policy Without ExternalId or MFA<br/><sup><sub>09c35abf-5852-4622-ac7a-b987b331232e</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/09c35abf-5852-4622-ac7a-b987b331232e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole#assumerolepolicy">Documentation</a><br/>| |ECS Service Admin Role Is Present<br/><sup><sub>3206240f-2e87-4e58-8d24-3e19e7c83d7c</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/3206240f-2e87-4e58-8d24-3e19e7c83d7c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecsservice">Documentation</a><br/>| |IAM Policy Grants Full Permissions<br/><sup><sub>575a2155-6af1-4026-b1af-d5bc8fe2a904</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/575a2155-6af1-4026-b1af-d5bc8fe2a904" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy">Documentation</a><br/>| |IAM Role With Full Privileges<br/><sup><sub>b1ffa705-19a3-4b73-b9d0-0c97d0663842</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/b1ffa705-19a3-4b73-b9d0-0c97d0663842" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole">Documentation</a><br/>| |Lambda With Vulnerable Policy<br/><sup><sub>ad9dabc7-7839-4bae-a957-aa9120013f39</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/ad9dabc7-7839-4bae-a957-aa9120013f39" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambdapermission#action">Documentation</a><br/>| |MSK Broker Is Publicly Accessible<br/><sup><sub>54378d69-dd7c-4b08-a43e-80d563396857</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/54378d69-dd7c-4b08-a43e-80d563396857" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/mskcluster#public_access">Documentation</a><br/>| |Neptune Cluster Instance is Publicly Accessible<br/><sup><sub>9ba198e0-fef4-464a-8a4d-75ea55300de7</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/9ba198e0-fef4-464a-8a4d-75ea55300de7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/neptuneclusterinstance#publiclyaccessible">Documentation</a><br/>| |Neptune Cluster With IAM Database Authentication Disabled<br/><sup><sub>c91d7ea0-d4d1-403b-8fe1-c9961ac082c5</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/c91d7ea0-d4d1-403b-8fe1-c9961ac082c5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/neptunecluster#storage_encrypted">Documentation</a><br/>| |S3 Bucket ACL Allows Read to Any Authenticated User<br/><sup><sub>57b9893d-33b1-4419-bcea-a717ea87e139</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/57b9893d-33b1-4419-bcea-a717ea87e139" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket#acl">Documentation</a><br/>| |S3 Bucket Allows Get Action From All Principals<br/><sup><sub>1df37f4b-7197-45ce-83f8-9994d2fcf885</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/1df37f4b-7197-45ce-83f8-9994d2fcf885" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket_policy">Documentation</a><br/>| |S3 Bucket Allows List Action From All Principals<br/><sup><sub>66c6f96f-2d9e-417e-a998-9058aeeecd44</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/66c6f96f-2d9e-417e-a998-9058aeeecd44" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket_policy">Documentation</a><br/>| |S3 Bucket Allows Public Policy<br/><sup><sub>1a4bc881-9f69-4d44-8c9a-d37d08f54c50</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/1a4bc881-9f69-4d44-8c9a-d37d08f54c50" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucketpublicaccess_block">Documentation</a><br/>| |S3 Bucket Public ACL Overridden By Public Access Block<br/><sup><sub>bf878b1a-7418-4de3-b13c-3a86cf894920</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/bf878b1a-7418-4de3-b13c-3a86cf894920" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucketpublicaccess_block#bucket">Documentation</a><br/>| |Secrets Manager With Vulnerable Policy<br/><sup><sub>fa00ce45-386d-4718-8392-fb485e1f3c5b</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/fa00ce45-386d-4718-8392-fb485e1f3c5b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/secretsmanagersecret_policy#policy">Documentation</a><br/>| |SES Policy With Allowed IAM Actions<br/><sup><sub>34b921bd-90a0-402e-a0a5-dc73371fd963</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/34b921bd-90a0-402e-a0a5-dc73371fd963" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sesidentity_policy#policy">Documentation</a><br/>| |SQS Policy Allows All Actions<br/><sup><sub>816ea8cf-d589-442d-a917-2dd0ce0e45e3</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/816ea8cf-d589-442d-a917-2dd0ce0e45e3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sqsqueue_policy">Documentation</a><br/>| |SQS Queue Exposed<br/><sup><sub>abb06e5f-ef9a-4a99-98c6-376d396bfcdf</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/aws/abb06e5f-ef9a-4a99-98c6-376d396bfcdf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sqsqueue#policy">Documentation</a><br/>| |AmazonMQ Broker Encryption Disabled<br/><sup><sub>3db3f534-e3a3-487f-88c7-0a9fbf64b702</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/3db3f534-e3a3-487f-88c7-0a9fbf64b702" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/mqbroker">Documentation</a><br/>| |API Gateway Method Settings Cache Not Encrypted<br/><sup><sub>b7c9a40c-23e4-4a2d-8d39-a3352f10f288</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/b7c9a40c-23e4-4a2d-8d39-a3352f10f288" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewaymethodsettings#cachedataencrypted">Documentation</a><br/>| |Athena Database Not Encrypted<br/><sup><sub>b2315cae-b110-4426-81e0-80bb8640cdd3</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/b2315cae-b110-4426-81e0-80bb8640cdd3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/athenadatabase#encryption_configuration">Documentation</a><br/>| |Athena Workgroup Not Encrypted<br/><sup><sub>d364984a-a222-4b5f-a8b0-e23ab19ebff3</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/d364984a-a222-4b5f-a8b0-e23ab19ebff3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/athenaworkgroup#encryption_configuration">Documentation</a><br/>| |Aurora With Disabled at Rest Encryption<br/><sup><sub>1a690d1d-0ae7-49fa-b2db-b75ae0dd1d3e</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/1a690d1d-0ae7-49fa-b2db-b75ae0dd1d3e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rdscluster#storage_encrypted">Documentation</a><br/>| |Config Rule For Encrypted Volumes Disabled<br/><sup><sub>abdb29d4-5ca1-4e91-800b-b3569bbd788c</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/abdb29d4-5ca1-4e91-800b-b3569bbd788c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/configconfig_rule">Documentation</a><br/>| |DAX Cluster Not Encrypted<br/><sup><sub>f11aec39-858f-4b6f-b946-0a1bf46c0c87</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/f11aec39-858f-4b6f-b946-0a1bf46c0c87" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/daxcluster#enabled">Documentation</a><br/>| |DB Instance Storage Not Encrypted<br/><sup><sub>08bd0760-8752-44e1-9779-7bb369b2b4e4</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/08bd0760-8752-44e1-9779-7bb369b2b4e4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance#storage_encrypted">Documentation</a><br/>| |DOCDB Cluster Not Encrypted<br/><sup><sub>bc1f9009-84a0-490f-ae09-3e0ea6d74ad6</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/bc1f9009-84a0-490f-ae09-3e0ea6d74ad6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdbcluster#storage_encrypted">Documentation</a><br/>| |DOCDB Cluster Without KMS<br/><sup><sub>4766d3ea-241c-4ee6-93ff-c380c996bd1a</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/4766d3ea-241c-4ee6-93ff-c380c996bd1a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdbcluster#kmskeyid">Documentation</a><br/>| |DynamoDB Table Not Encrypted<br/><sup><sub>ce089fd4-1406-47bd-8aad-c259772bb294</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/ce089fd4-1406-47bd-8aad-c259772bb294" target="blank">Query

href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dynamodbtable#serversideencryption">Documentation</a><br/>| |EBS Default Encryption Disabled<br/><sup><sub>3d3f6270-546b-443c-adb4-bb6fb2187ca6</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/3d3f6270-546b-443c-adb4-bb6fb2187ca6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ebsencryptionbydefault">Documentation</a><br/>| |EBS Volume Encryption Disabled<br/><sup><sub>cc997676-481b-4e93-aa81-d19f8c5e9b12</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/cc997676-481b-4e93-aa81-d19f8c5e9b12" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ebsvolume#encrypted">Documentation</a><br/>| |EBS Volume Snapshot Not Encrypted<br/><sup><sub>e6b4b943-6883-47a9-9739-7ada9568f8ca</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/e6b4b943-6883-47a9-9739-7ada9568f8ca" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ebssnapshot#encrypted">Documentation</a><br/>| |ECS Task Definition Volume Not Encrypted<br/><sup><sub>4d46ff3b-7160-41d1-a310-71d6d370b08f</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/4d46ff3b-7160-41d1-a310-71d6d370b08f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecstaskdefinition#transitencryption">Documentation</a><br/>| |EFS Not Encrypted<br/><sup><sub>48207659-729f-4b5c-9402-f884257d794f</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/48207659-729f-4b5c-9402-f884257d794f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/efsfile_system#encrypted">Documentation</a><br/>| |EKS Cluster Encryption Disabled<br/><sup><sub>63ebcb19-2739-4d3f-aa5c-e8bbb9b85281</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/63ebcb19-2739-4d3f-aa5c-e8bbb9b85281" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ekscluster#encryption_config">Documentation</a><br/>| |ElastiCache Replication Group Not Encrypted At Rest<br/><sup><sub>76976de7-c7b1-4f64-a94f-90c1345914c2</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/76976de7-c7b1-4f64-a94f-90c1345914c2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachereplicationgroup#atrestencryptionenabled">Documentation</a><br/>| |ElasticSearch Encryption With KMS Disabled<br/><sup><sub>7af2f4a3-00d9-47f3-8d15-ca0888f4e5b2</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/7af2f4a3-00d9-47f3-8d15-ca0888f4e5b2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomain">Documentation</a><br/>| |ElasticSearch Not Encrypted At Rest<br/><sup><sub>24e16922-4330-4e9d-be8a-caa90299466a</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/24e16922-4330-4e9d-be8a-caa90299466a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomain">Documentation</a><br/>| |ELB Using Weak Ciphers<br/><sup><sub>4a800e14-c94a-442d-9067-5a2e9f6c0a4c</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/4a800e14-c94a-442d-9067-5a2e9f6c0a4c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/loadbalancer_policy">Documentation</a><br/>| |Glue Data Catalog Encryption Disabled<br/><sup><sub>01d50b14-e933-4c99-b314-6d08cd37ad35</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/01d50b14-e933-4c99-b314-6d08cd37ad35" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/gluedatacatalogencryptionsettings#datacatalogencryptionsettings">Documentation</a><br/>| |Glue Security Configuration Encryption Disabled<br/><sup><sub>ad5b4e97-2850-4adf-be17-1d293e0b85ee</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/ad5b4e97-2850-4adf-be17-1d293e0b85ee" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/gluesecurityconfiguration#encryptionconfiguration">Documentation</a><br/>| |Kinesis Not Encrypted With KMS<br/><sup><sub>862fe4bf-3eec-4767-a517-40f378886b88</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/862fe4bf-3eec-4767-a517-40f378886b88" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kinesisstream">Documentation</a><br/>| |Kinesis SSE Not Configured<br/><sup><sub>5c6dd5e7-1fe0-4cae-8f81-4c122717cef3</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/5c6dd5e7-1fe0-4cae-8f81-4c122717cef3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kinesisfirehosedeliverystream#serversideencryption">Documentation</a><br/>| |Launch Configuration Is Not Encrypted<br/><sup><sub>4de9de27-254e-424f-bd70-4c1e95790838</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/4de9de27-254e-424f-bd70-4c1e95790838" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/launchconfiguration#encrypted">Documentation</a><br/>| |MSK Cluster Encryption Disabled<br/><sup><sub>6db52fa6-d4da-4608-908a-89f0c59e743e</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/6db52fa6-d4da-4608-908a-89f0c59e743e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/mskcluster#encryption_info">Documentation</a><br/>| |Neptune Database Cluster Encryption Disabled<br/><sup><sub>98d59056-f745-4ef5-8613-32bca8d40b7e</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/98d59056-f745-4ef5-8613-32bca8d40b7e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/neptunecluster#storage_encrypted">Documentation</a><br/>| |RDS Database Cluster not Encrypted<br/><sup><sub>656880aa-1388-488f-a6d4-8f73c23149b2</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/656880aa-1388-488f-a6d4-8f73c23149b2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbcluster_snapshot">Documentation</a><br/>| |RDS Storage Not Encrypted<br/><sup><sub>3199c26c-7871-4cb3-99c2-10a59244ce7f</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/3199c26c-7871-4cb3-99c2-10a59244ce7f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rdscluster#storage_encrypted">Documentation</a><br/>| |Redis Not Compliant<br/><sup><sub>254c932d-e3bf-44b2-bc9d-eb5fdb09f8d4</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/254c932d-e3bf-44b2-bc9d-eb5fdb09f8d4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachecluster#engine_version">Documentation</a><br/>| |Redshift Not Encrypted<br/><sup><sub>cfdcabb0-fc06-427c-865b-c59f13e898ce</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/cfdcabb0-fc06-427c-865b-c59f13e898ce" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/redshiftcluster#encrypted">Documentation</a><br/>| |S3 Bucket Object Not Encrypted<br/><sup><sub>5fb49a69-8d46-4495-a2f8-9c8c622b2b6e</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/5fb49a69-8d46-4495-a2f8-9c8c622b2b6e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucketobject#serverside_encryption">Documentation</a><br/>| |Sagemaker Endpoint Configuration Encryption Disabled<br/><sup><sub>58b35504-0287-4154-bf69-02c0573deab8</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/58b35504-0287-4154-bf69-02c0573deab8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sagemakerendpointconfiguration#kmskey_arn">Documentation</a><br/>| |Sagemaker Notebook Instance Without KMS<br/><sup><sub>f3674e0c-f6be-43fa-b71c-bf346d1aed99</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/f3674e0c-f6be-43fa-b71c-bf346d1aed99" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sagemakernotebookinstance#kmskey_id">Documentation</a><br/>| |SNS Topic Not Encrypted<br/><sup><sub>28545147-2fc6-42d5-a1f9-cf226658e591</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/28545147-2fc6-42d5-a1f9-cf226658e591" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/snstopic#kmsmasterkey_id">Documentation</a><br/>| |User Data Contains Encoded Private Key<br/><sup><sub>443488f5-c734-460b-a36d-5b3f330174dc</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/443488f5-c734-460b-a36d-5b3f330174dc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/launchconfiguration#userdatabase64">Documentation</a><br/>| |Workspaces Workspace Volume Not Encrypted<br/><sup><sub>b9033580-6886-401a-8631-5f19f5bb24c7</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/aws/b9033580-6886-401a-8631-5f19f5bb24c7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/workspacesworkspace#rootvolumeencryption_enabled">Documentation</a><br/>| |Batch Job Definition With Privileged Container Properties<br/><sup><sub>66cd88ac-9ddf-424a-b77e-e55e17630bee</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/66cd88ac-9ddf-424a-b77e-e55e17630bee" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/batchjob_definition">Documentation</a><br/>| |DB Security Group Has Public Interface<br/><sup><sub>f0d8781f-99bf-4958-9917-d39283b168a0</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/f0d8781f-99bf-4958-9917-d39283b168a0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbsecurity_group">Documentation</a><br/>| |KMS Key With Vulnerable Policy<br/><sup><sub>7ebc9038-0bde-479a-acc4-6ed7b6758899</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/7ebc9038-0bde-479a-acc4-6ed7b6758899" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kmskey">Documentation</a><br/>| |Lambda Function With Privileged Role<br/><sup><sub>1b3af2f9-af8c-4dfc-a0f1-a03adb70deb2</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/1b3af2f9-af8c-4dfc-a0f1-a03adb70deb2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambdafunction">Documentation</a><br/>| |MQ Broker Is Publicly Accessible<br/><sup><sub>4eb5f791-c861-4afd-9f94-f2a6a3fe49cb</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/4eb5f791-c861-4afd-9f94-f2a6a3fe49cb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/mqbroker">Documentation</a><br/>| |Redshift Publicly Accessible<br/><sup><sub>af173fde-95ea-4584-b904-bb3923ac4bda</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/af173fde-95ea-4584-b904-bb3923ac4bda" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/redshiftcluster">Documentation</a><br/>| |Root Account Has Active Access Keys<br/><sup><sub>970d224d-b42a-416b-81f9-8f4dfe70c4bc</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/970d224d-b42a-416b-81f9-8f4dfe70c4bc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamaccess_key">Documentation</a><br/>| |S3 Static Website Host Enabled<br/><sup><sub>42bb6b7f-6d54-4428-b707-666f669d94fb</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/aws/42bb6b7f-6d54-4428-b707-666f669d94fb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket#website">Documentation</a><br/>| |DB Security Group Open To Large Scope<br/><sup><sub>4f615f3e-fb9c-4fad-8b70-2e9f781806ce</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/4f615f3e-fb9c-4fad-8b70-2e9f781806ce" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbsecurity_group">Documentation</a><br/>| |Default Security Groups With Unrestricted Traffic<br/><sup><sub>46883ce1-dc3e-4b17-9195-c6a601624c73</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/46883ce1-dc3e-4b17-9195-c6a601624c73" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/defaultsecurity_group">Documentation</a><br/>| |Network ACL With Unrestricted Access To RDP<br/><sup><sub>a20be318-cac7-457b-911d-04cc6e812c25</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/a20be318-cac7-457b-911d-04cc6e812c25" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/networkacl">Documentation</a><br/>| |Remote Desktop Port Open To Internet<br/><sup><sub>151187cb-0efc-481c-babd-ad24e3c9bc22</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/151187cb-0efc-481c-babd-ad24e3c9bc22" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |Route53 Record Undefined<br/><sup><sub>25db74bf-fa3b-44da-934e-8c3e005c0453</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/25db74bf-fa3b-44da-934e-8c3e005c0453" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53record">Documentation</a><br/>| |Sensitive Port Is Exposed To Entire Network<br/><sup><sub>381c3f2a-ef6f-4eff-99f7-b169cda3422c</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/381c3f2a-ef6f-4eff-99f7-b169cda3422c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |Unknown Port Exposed To Internet<br/><sup><sub>590d878b-abdc-428f-895a-e2b68a0e1998</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/590d878b-abdc-428f-895a-e2b68a0e1998" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |Unrestricted Security Group Ingress<br/><sup><sub>4728cd65-a20c-49da-8b31-9c08b423e4db</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/4728cd65-a20c-49da-8b31-9c08b423e4db" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/aws/r/securitygroup.html">Documentation</a><br/>| |VPC Default Security Group Accepts All Traffic<br/><sup><sub>9a4ef195-74b9-4c58-b8ed-2b2fe4353a75</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/9a4ef195-74b9-4c58-b8ed-2b2fe4353a75" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/defaultsecurity_group">Documentation</a><br/>| |VPC Peering Route Table with Unrestricted CIDR<br/><sup><sub>b3a41501-f712-4c4f-81e5-db9a7dc0e34e</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/aws/b3a41501-f712-4c4f-81e5-db9a7dc0e34e" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route">Documentation</a><br/>| |CloudTrail Log Files S3 Bucket is Publicly Accessible<br/><sup><sub>bd0088a5-c133-4b20-b129-ec9968b16ef3</sub></sup>|<span style="color:#bb2124">High</span>|Observability|<a href="../terraform-queries/aws/bd0088a5-c133-4b20-b129-ec9968b16ef3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#s3bucket_name">Documentation</a><br/>| |Hardcoded AWS Access Key<br/><sup><sub>d7b9d850-3e06-4a75-852f-c46c2e92240b</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../terraform-queries/aws/d7b9d850-3e06-4a75-852f-c46c2e92240b" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance">Documentation</a><br/>| |Hardcoded AWS Access Key In Lambda<br/><sup><sub>1402afd8-a95c-4e84-8b0b-6fb43758e6ce</sub></sup>|<span style="color:#bb2124">High</span>|Secret Management|<a href="../terraform-queries/aws/1402afd8-a95c-4e84-8b0b-6fb43758e6ce" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambdafunction">Documentation</a><br/>| |AMI Shared With Multiple Accounts<br/><sup><sub>ba4e0031-3e9d-4d7d-b0d6-bd8f003f8698</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/ba4e0031-3e9d-4d7d-b0d6-bd8f003f8698" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/amilaunch_permission">Documentation</a><br/>| |API Gateway Method Does Not Contains An API Key<br/><sup><sub>671211c5-5d2a-4e97-8867-30fc28b02216</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/671211c5-5d2a-4e97-8867-30fc28b02216" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigateway_method">Documentation</a><br/>| |API Gateway Without Configured Authorizer<br/><sup><sub>0a96ce49-4163-4ee6-8169-eb3b0797d694</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/0a96ce49-4163-4ee6-8169-eb3b0797d694" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigateway_authorizer">Documentation</a><br/>| |Certificate Has Expired<br/><sup><sub>c3831315-5ae6-4fa8-b458-3d4d5ab7a3f6</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/c3831315-5ae6-4fa8-b458-3d4d5ab7a3f6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewayrestapi">Documentation</a><br/>| |EC2 Instance Using Default Security Group<br/><sup><sub>f1adc521-f79a-4d71-b55b-a68294687432</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/f1adc521-f79a-4d71-b55b-a68294687432" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#securitygroups">Documentation</a><br/>| |EFS With Vulnerable Policy<br/><sup><sub>fae52418-bb8b-4ac2-b287-0b9082d6a3fd</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/fae52418-bb8b-4ac2-b287-0b9082d6a3fd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/efsfilesystempolicy#policy">Documentation</a><br/>| |Elasticsearch Domain With Vulnerable

style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/16c4216a-50d3-4785-bfb2-4adb5144a8ba" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomainpolicy#accesspolicies">Documentation</a><br/>| |Elasticsearch Without IAM Authentication<br/><sup><sub>e7530c3c-b7cf-4149-8db9-d037a0b5268e</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/e7530c3c-b7cf-4149-8db9-d037a0b5268e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomain">Documentation</a><br/>| |Glue With Vulnerable Policy<br/><sup><sub>d25edb51-07fb-4a73-97d4-41cecdc53a22</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/d25edb51-07fb-4a73-97d4-41cecdc53a22" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/glueresource_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'cloudformation:CreateStack' And 'iam:PassRole'<br/><sup><sub>9b0ffadc-a61f-4c2a-b1e6-68fab60f6267</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/9b0ffadc-a61f-4c2a-b1e6-68fab60f6267" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'ec2:RunInstances' And 'iam:PassRole'<br/><sup><sub>15e6ad8c-f420-49a6-bafb-074f5eb1ec74</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/15e6ad8c-f420-49a6-bafb-074f5eb1ec74" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'glue:CreateDevEndpoint' And 'iam:PassRole'<br/><sup><sub>7d544dad-8a6c-431c-84c1-5f07fe9afc0e</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/7d544dad-8a6c-431c-84c1-5f07fe9afc0e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'glue:UpdateDevEndpoint'<br/><sup><sub>8f3c16b3-354d-45db-8ad5-5066778a9485</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/8f3c16b3-354d-45db-8ad5-5066778a9485" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:AddUserToGroup'<br/><sup><sub>970ed7a2-0aca-4425-acf1-0453c9ecbca1</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/970ed7a2-0aca-4425-acf1-0453c9ecbca1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:AttachGroupPolicy'<br/><sup><sub>70b42736-efee-4bce-80d5-50358ed94990</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/70b42736-efee-4bce-80d5-50358ed94990" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:AttachRolePolicy'<br/><sup><sub>3dd96caa-0b5f-4a85-b929-acfac4646cc2</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/3dd96caa-0b5f-4a85-b929-acfac4646cc2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:AttachUserPolicy'<br/><sup><sub>db78d14b-10e5-4e6e-84b1-dace6327b1ec</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/db78d14b-10e5-4e6e-84b1-dace6327b1ec" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:CreateAccessKey'<br/><sup><sub>846646e3-2af1-428c-ac5d-271eccfa6faf</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/846646e3-2af1-428c-ac5d-271eccfa6faf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:CreateLoginProfile'<br/><sup><sub>04c686f1-e0cd-4812-88e1-4e038410074c</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/04c686f1-e0cd-4812-88e1-4e038410074c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:CreatePolicyVersion'<br/><sup><sub>ec49cbfd-fae4-45f3-81b1-860526d66e3f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/ec49cbfd-fae4-45f3-81b1-860526d66e3f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:PutGroupPolicy'<br/><sup><sub>e77c89f6-9c85-49ea-b95b-5f960fe5be92</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/e77c89f6-9c85-49ea-b95b-5f960fe5be92" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:PutRolePolicy'<br/><sup><sub>c0c1e744-0f37-445e-924a-1846f0839f69</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/c0c1e744-0f37-445e-924a-1846f0839f69" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:PutUserPolicy'<br/><sup><sub>60263b4a-6801-4587-911d-919c37ed733b</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/60263b4a-6801-4587-911d-919c37ed733b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:SetDefaultPolicyVersion'<br/><sup><sub>7782d4b3-e23e-432b-9742-d9528432e771</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/7782d4b3-e23e-432b-9742-d9528432e771" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:UpdateAssumeRolePolicy' And 'sts:AssumeRole'<br/><sup><sub>78f1ec6f-5659-41ea-bd48-d0a142dce4f2</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/78f1ec6f-5659-41ea-bd48-d0a142dce4f2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'iam:UpdateLoginProfile'<br/><sup><sub>ad296c0d-8131-4d6b-b030-1b0e73a99ad3</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/ad296c0d-8131-4d6b-b030-1b0e73a99ad3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'lambda:CreateFunction' And 'iam:PassRole' And 'lambda:InvokeFunction'<br/><sup><sub>034d0aee-620f-4bf7-b7fb-efdf661fdb9e</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/034d0aee-620f-4bf7-b7fb-efdf661fdb9e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |Group With Privilege Escalation By Actions 'lambda:UpdateFunctionCode'<br/><sup><sub>571254d8-aa6a-432e-9725-535d3ef04d69</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/571254d8-aa6a-432e-9725-535d3ef04d69" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_policy#policy">Documentation</a><br/>| |IAM Access Key Is Exposed<br/><sup><sub>7081f85c-b94d-40fd-8b45-a4f1cac75e46</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/7081f85c-b94d-40fd-8b45-a4f1cac75e46" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamaccess_key">Documentation</a><br/>| |IAM Group Without Users<br/><sup><sub>fc101ca7-c9dd-4198-a1eb-0fbe92e80044</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/fc101ca7-c9dd-4198-a1eb-0fbe92e80044" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamgroup_membership#users">Documentation</a><br/>| |IAM Policies Attached To User<br/><sup><sub>b4378389-a9aa-44ee-91e7-ef183f11079e</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/b4378389-a9aa-44ee-91e7-ef183f11079e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iampolicy_attachment">Documentation</a><br/>| |IAM Policies With Full Privileges<br/><sup><sub>2f37c4a3-58b9-4afe-8a87-d7f1d2286f84</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/2f37c4a3-58b9-4afe-8a87-d7f1d2286f84" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy">Documentation</a><br/>| |IAM Policy Grants 'AssumeRole' Permission Across All Services<br/><sup><sub>bcdcbdc6-a350-4855-ae7c-d1e6436f7c97</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/bcdcbdc6-a350-4855-ae7c-d1e6436f7c97" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole">Documentation</a><br/>| |IAM Role Allows All Principals To Assume<br/><sup><sub>12b7e704-37f0-4d1e-911a-44bf60c48c21</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/12b7e704-37f0-4d1e-911a-44bf60c48c21" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole">Documentation</a><br/>| |IAM Role Policy passRole Allows All<br/><sup><sub>e39bee8c-fe54-4a3f-824d-e5e2d1cca40a</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/e39bee8c-fe54-4a3f-824d-e5e2d1cca40a" target="_blank">Query details</a><br><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-reference-policy-checks.html#access-analyzer-reference-policy-checks-security-warning-pass-role-with-star-in-resource">Documentation</a><br/>| |IAM User With Access To Console<br/><sup><sub>9ec311bf-dfd9-421f-8498-0b063c8bc552</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/9ec311bf-dfd9-421f-8498-0b063c8bc552" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuserloginprofile">Documentation</a><br/>| |Lambda Permission Principal Is Wildcard<br/><sup><sub>e08ed7eb-f3ef-494d-9d22-2e3db756a347</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/e08ed7eb-f3ef-494d-9d22-2e3db756a347" target="blank">Query details</a><br><a href="https://docs.ansible.com/ansible/latest/collections/community/aws/lambdapolicy_module.html">Documentation</a><br/>| |Policy Without Principal<br/><sup><sub>bbe3dd3d-fea9-4b68-a785-cfabe2bbbc54</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/bbe3dd3d-fea9-4b68-a785-cfabe2bbbc54" target="blank">Query details</a><br><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/referencepolicieselementsprincipal.html">Documentation</a><br/>| |Public and Private EC2 Share Role<br/><sup><sub>c53c7a89-f9d7-4c7b-8b66-8a555be99593</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/c53c7a89-f9d7-4c7b-8b66-8a555be99593" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#iaminstance_profile">Documentation</a><br/>| |Public Lambda via API Gateway<br/><sup><sub>3ef8696c-e4ae-4872-92c7-520bb44dfe77</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/3ef8696c-e4ae-4872-92c7-520bb44dfe77" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambdapermission">Documentation</a><br/>| |REST API With Vulnerable Policy<br/><sup><sub>b161c11b-a59b-4431-9a29-4e19f63e6b27</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/b161c11b-a59b-4431-9a29-4e19f63e6b27" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewayrestapi_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'cloudformation:CreateStack' And 'iam:PassRole'<br/><sup><sub>be2aa235-bd93-4b68-978a-1cc65d49082f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/be2aa235-bd93-4b68-978a-1cc65d49082f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'ec2:RunInstances' And 'iam:PassRole'<br/><sup><sub>30b88745-eebe-4ecb-a3a9-5cf886e96204</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/30b88745-eebe-4ecb-a3a9-5cf886e96204" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'glue:CreateDevEndpoint' And 'iam:PassRole'<br/><sup><sub>0a592060-8166-49f5-8e65-99ac6dce9871</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/0a592060-8166-49f5-8e65-99ac6dce9871" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'glue:UpdateDevEndpoint'<br/><sup><sub>eda48c88-2b7d-4e34-b6ca-04c0194aee17</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/eda48c88-2b7d-4e34-b6ca-04c0194aee17" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:AddUserToGroup'<br/><sup><sub>b8a31292-509d-4b61-bc40-13b167db7e9c</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/b8a31292-509d-4b61-bc40-13b167db7e9c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:AttachGroupPolicy'<br/><sup><sub>f906113d-cdc0-415a-ba60-609cc6daaf4d</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/f906113d-cdc0-415a-ba60-609cc6daaf4d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:AttachRolePolicy'<br/><sup><sub>f465fff1-0a0f-457d-aa4d-1bddb6f204ff</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/f465fff1-0a0f-457d-aa4d-1bddb6f204ff" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:AttachUserPolicy'<br/><sup><sub>7c96920c-6fd0-449d-9a52-0aa431b6beaf</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/7c96920c-6fd0-449d-9a52-0aa431b6beaf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:CreateAccessKey'<br/><sup><sub>5b4d4aee-ac94-4810-9611-833636e5916d</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/5b4d4aee-ac94-4810-9611-833636e5916d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:CreateLoginProfile'<br/><sup><sub>9a205ba3-0dd1-42eb-8d54-2ffec836b51a</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/9a205ba3-0dd1-42eb-8d54-2ffec836b51a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:CreatePolicyVersion'<br/><sup><sub>ee49557d-750c-4cc1-aa95-94ab36cbefde</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/ee49557d-750c-4cc1-aa95-94ab36cbefde" target="blank">Query

href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:PutGroupPolicy'<br/><sup><sub>d6047119-a0b2-4b59-a4f2-127a36fb685b</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/d6047119-a0b2-4b59-a4f2-127a36fb685b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:PutRolePolicy'<br/><sup><sub>eb64f1e9-f67d-4e35-8a3c-3d6a2f9efea7</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/eb64f1e9-f67d-4e35-8a3c-3d6a2f9efea7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:PutUserPolicy'<br/><sup><sub>8f75840d-9ee7-42f3-b203-b40e3979eb12</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/8f75840d-9ee7-42f3-b203-b40e3979eb12" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:SetDefaultPolicyVersion'<br/><sup><sub>118281d0-6471-422e-a7c5-051bc667926e</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/118281d0-6471-422e-a7c5-051bc667926e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:UpdateAssumeRolePolicy' And 'sts:AssumeRole'<br/><sup><sub>f1173d8c-3264-4148-9fdb-61181e031b51</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/f1173d8c-3264-4148-9fdb-61181e031b51" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'iam:UpdateLoginProfile'<br/><sup><sub>35ccf766-0e4d-41ed-9ec4-2dab155082b4</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/35ccf766-0e4d-41ed-9ec4-2dab155082b4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'lambda:CreateFunction' And 'iam:PassRole' And 'lambda:InvokeFunction'<br/><sup><sub>fa62ac4f-f5b9-45b9-97c1-625c8b6253ca</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/fa62ac4f-f5b9-45b9-97c1-625c8b6253ca" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |Role With Privilege Escalation By Actions 'lambda:UpdateFunctionCode'<br/><sup><sub>c583f0f9-7dfd-476b-a056-f47c62b47b46</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/c583f0f9-7dfd-476b-a056-f47c62b47b46" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamrole_policy#policy">Documentation</a><br/>| |S3 Bucket Allows Public ACL<br/><sup><sub>d0cc8694-fcad-43ff-ac86-32331d7e867f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/d0cc8694-fcad-43ff-ac86-32331d7e867f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucketpublicaccess_block">Documentation</a><br/>| |SNS Topic Publicity Has Allow and NotAction Simultaneously<br/><sup><sub>5ea624e4-c8b1-4bb3-87a4-4235a776adcc</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/5ea624e4-c8b1-4bb3-87a4-4235a776adcc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/snstopic_policy">Documentation</a><br/>| |SQS Policy With Public Access<br/><sup><sub>730675f9-52ed-49b6-8ead-0acb5dd7df7f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/730675f9-52ed-49b6-8ead-0acb5dd7df7f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sqsqueue_policy">Documentation</a><br/>| |SSO Identity User Unsafe Creation<br/><sup><sub>4003118b-046b-4640-b200-b8c7a4c8b89f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/4003118b-046b-4640-b200-b8c7a4c8b89f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/identitystoreuser">Documentation</a><br/>| |SSO Policy with full privileges<br/><sup><sub>132a8c31-9837-4203-9fd1-15ca210c7b73</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/132a8c31-9837-4203-9fd1-15ca210c7b73" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssoadminpermissionsetinline_policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'cloudformation:CreateStack' And 'iam:PassRole'<br/><sup><sub>19ffbe31-9d72-4379-9768-431195eae328</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/19ffbe31-9d72-4379-9768-431195eae328" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'ec2:RunInstances' And 'iam:PassRole'<br/><sup><sub>89561b03-cb35-44a9-a7e9-8356e71606f4</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/89561b03-cb35-44a9-a7e9-8356e71606f4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'glue:CreateDevEndpoint' And 'iam:PassRole'<br/><sup><sub>94fbe150-27e3-4eba-9ca6-af32865e4503</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/94fbe150-27e3-4eba-9ca6-af32865e4503" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'glue:UpdateDevEndpoint'<br/><sup><sub>9b877bd8-94b4-4c10-a060-8e0436cc09fa</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/9b877bd8-94b4-4c10-a060-8e0436cc09fa" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:AddUserToGroup'<br/><sup><sub>bf9d42c7-c2f9-4dfe-942c-c8cc8249a081</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/bf9d42c7-c2f9-4dfe-942c-c8cc8249a081" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:AttachGroupPolicy'<br/><sup><sub>6d23d87e-1c5b-4308-b224-92624300f29b</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/6d23d87e-1c5b-4308-b224-92624300f29b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:AttachRolePolicy'<br/><sup><sub>e227091e-2228-4b40-b046-fc13650d8e88</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/e227091e-2228-4b40-b046-fc13650d8e88" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:AttachUserPolicy'<br/><sup><sub>70cb518c-d990-46f6-bc05-44a5041493d6</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/70cb518c-d990-46f6-bc05-44a5041493d6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:CreateAccessKey'<br/><sup><sub>113208f2-a886-4526-9ecc-f3218600e12c</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/113208f2-a886-4526-9ecc-f3218600e12c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:CreateLoginProfile'<br/><sup><sub>0fd7d920-4711-46bd-aff2-d307d82cd8b7</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/0fd7d920-4711-46bd-aff2-d307d82cd8b7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:CreatePolicyVersion'<br/><sup><sub>1743f5f1-0bb0-4934-acef-c80baa5dadfa</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/1743f5f1-0bb0-4934-acef-c80baa5dadfa" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:PutGroupPolicy'<br/><sup><sub>8bfbf7ab-d5e8-4100-8618-798956e101e0</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/8bfbf7ab-d5e8-4100-8618-798956e101e0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:PutRolePolicy'<br/><sup><sub>eeb4d37a-3c59-4789-a00c-1509bc3af1e5</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/eeb4d37a-3c59-4789-a00c-1509bc3af1e5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:PutUserPolicy'<br/><sup><sub>0c10d7da-85c4-4d62-b2a8-d6c104f1bd77</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/0c10d7da-85c4-4d62-b2a8-d6c104f1bd77" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:SetDefaultPolicyVersion'<br/><sup><sub>43a41523-386a-4cb1-becb-42af6b414433</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/43a41523-386a-4cb1-becb-42af6b414433" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:UpdateAssumeRolePolicy' And 'sts:AssumeRole'<br/><sup><sub>33627268-1445-4385-988a-318fd9d1a512</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/33627268-1445-4385-988a-318fd9d1a512" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'iam:UpdateLoginProfile'<br/><sup><sub>6deb34e2-5d9c-499a-801b-ea6d9eda894f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/6deb34e2-5d9c-499a-801b-ea6d9eda894f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'lambda:CreateFunction' And 'iam:PassRole' And 'lambda:InvokeFunction'<br/><sup><sub>8055dec2-efb8-4fe6-8837-d9bed6ff202a</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/8055dec2-efb8-4fe6-8837-d9bed6ff202a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |User With Privilege Escalation By Actions 'lambda:UpdateFunctionCode'<br/><sup><sub>b69247e5-7e73-464e-ba74-ec9b715c6e12</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/aws/b69247e5-7e73-464e-ba74-ec9b715c6e12" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy#policy">Documentation</a><br/>| |Auto Scaling Group With No Associated ELB<br/><sup><sub>8e94dced-9bcc-4203-8eb7-7e41202b2505</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../terraform-queries/aws/8e94dced-9bcc-4203-8eb7-7e41202b2505" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/autoscalinggroup#load_balancers">Documentation</a><br/>| |CMK Is Unusable<br/><sup><sub>7350fa23-dcf7-4938-916d-6a60b0c73b50</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../terraform-queries/aws/7350fa23-dcf7-4938-916d-6a60b0c73b50" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kmskey#is_enabled">Documentation</a><br/>| |ElastiCache Nodes Not Created Across Multi AZ<br/><sup><sub>6db03a91-f933-4f13-ab38-a8b87a7de54d</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../terraform-queries/aws/6db03a91-f933-4f13-ab38-a8b87a7de54d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachecluster">Documentation</a><br/>| |ElastiCache Redis Cluster Without Backup<br/><sup><sub>8fdb08a0-a868-4fdf-9c27-ccab0237f1ab</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/aws/8fdb08a0-a868-4fdf-9c27-ccab0237f1ab" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachecluster#snapshotretentionlimit">Documentation</a><br/>| |RDS Cluster With Backup Disabled<br/><sup><sub>e542bd46-58c4-4e0f-a52a-1fb4f9548e02</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/aws/e542bd46-58c4-4e0f-a52a-1fb4f9548e02" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rdscluster#backupretentionperiod">Documentation</a><br/>| |RDS With Backup Disabled<br/><sup><sub>1dc73fb4-5b51-430c-8c5f-25dcf9090b02</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/aws/1dc73fb4-5b51-430c-8c5f-25dcf9090b02" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance">Documentation</a><br/>| |S3 Bucket Without Versioning<br/><sup><sub>568a4d22-3517-44a6-a7ad-6a7eed88722c</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/aws/568a4d22-3517-44a6-a7ad-6a7eed88722c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket#versioning">Documentation</a><br/>| |Stack Retention Disabled<br/><sup><sub>6e0e2f68-3fd9-4cd8-a5e4-e2213ef0df97</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/aws/6e0e2f68-3fd9-4cd8-a5e4-e2213ef0df97" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudformationstacksetinstance#stacksetname">Documentation</a><br/>| |ALB Not Dropping Invalid Headers<br/><sup><sub>6e3fd2ed-5c83-4c68-9679-7700d224d379</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../terraform-queries/aws/6e3fd2ed-5c83-4c68-9679-7700d224d379" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lb#dropinvalidheaderfields">Documentation</a><br/>| |AMI Not Encrypted<br/><sup><sub>8bbb242f-6e38-4127-86d4-d8f0b2687ae2</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/8bbb242f-6e38-4127-86d4-d8f0b2687ae2" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/ami">Documentation</a><br/>| |CA Certificate Identifier Is Outdated<br/><sup><sub>9f40c07e-699e-4410-8856-3ba0f2e3a2dd</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/9f40c07e-699e-4410-8856-3ba0f2e3a2dd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance">Documentation</a><br/>| |Cloudfront Viewer Protocol Policy Allows HTTP<br/><sup><sub>55af1353-2f62-4fa0-a8e1-a210ca2708f5</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/55af1353-2f62-4fa0-a8e1-a210ca2708f5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfrontdistribution">Documentation</a><br/>| |CloudWatch Log Group Without KMS<br/><sup><sub>0afbcfe9-d341-4b92-a64c-7e6de0543879</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/0afbcfe9-d341-4b92-a64c-7e6de0543879" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlog_group">Documentation</a><br/>| |ElastiCache Replication Group Not Encrypted At Transit<br/><sup><sub>1afbb3fa-cf6c-4a3d-b730-95e9f4df343e</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/1afbb3fa-cf6c-4a3d-b730-95e9f4df343e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachereplicationgroup#transitencryption_enabled">Documentation</a><br/>| |Elasticsearch Domain Not Encrypted Node To Node<br/><sup><sub>967eb3e6-26fc-497d-8895-6428beb6e8e2</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/967eb3e6-26fc-497d-8895-6428beb6e8e2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomain#nodetonode_encryption">Documentation</a><br/>| |ELB Using Insecure Protocols<br/><sup><sub>126c1788-23c2-4a10-906c-ef179f4f96ec</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/126c1788-23c2-4a10-906c-ef179f4f96ec" target="blank">Query details</a><br><a

|IAM Database Auth Not Enabled<br/><sup><sub>88fd05e0-ac0e-43d2-ba6d-fc0ba60ae1a6</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/88fd05e0-ac0e-43d2-ba6d-fc0ba60ae1a6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance#iamdatabaseauthentication_enabled">Documentation</a><br/>| |S3 Bucket Policy Accepts HTTP Requests<br/><sup><sub>4bc4dd4c-7d8d-405e-a0fb-57fa4c31b4d9</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/4bc4dd4c-7d8d-405e-a0fb-57fa4c31b4d9" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket_policy#policy">Documentation</a><br/>| |Secretsmanager Secret Encrypted With AWS Managed Key<br/><sup><sub>b0d3ef3f-845d-4b1b-83d6-63a5a380375f</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/b0d3ef3f-845d-4b1b-83d6-63a5a380375f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/secretsmanagersecret#kmskeyid">Documentation</a><br/>| |Secretsmanager Secret Without KMS<br/><sup><sub>a2f548f2-188c-4fff-b172-e9a6acb216bd</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/a2f548f2-188c-4fff-b172-e9a6acb216bd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/secretsmanagersecret#kmskeyid">Documentation</a><br/>| |Secure Ciphers Disabled<br/><sup><sub>5c0003fb-9aa0-42c1-9da3-eb0e332bef21</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/5c0003fb-9aa0-42c1-9da3-eb0e332bef21" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfrontdistribution">Documentation</a><br/>| |SNS Topic Encrypted With AWS Managed Key<br/><sup><sub>b1a72f66-2236-4f3b-87ba-0da1b366956f</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/b1a72f66-2236-4f3b-87ba-0da1b366956f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/snstopic#kmsmasterkey_id">Documentation</a><br/>| |SQS With SSE Disabled<br/><sup><sub>6e8849c1-3aa7-40e3-9063-b85ee300f29f</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/6e8849c1-3aa7-40e3-9063-b85ee300f29f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/sqsqueue">Documentation</a><br/>| |SSM Session Transit Encryption Disabled<br/><sup><sub>ce60cc6b-6831-4bd7-84a2-cc7f8ee71433</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/aws/ce60cc6b-6831-4bd7-84a2-cc7f8ee71433" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssmdocument#content">Documentation</a><br/>| |ALB Deletion Protection Disabled<br/><sup><sub>afecd1f1-6378-4f7e-bb3b-60c35801fdd4</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/afecd1f1-6378-4f7e-bb3b-60c35801fdd4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lb#enabledeletion_protection">Documentation</a><br/>| |API Gateway With Open Access<br/><sup><sub>15ccec05-5476-4890-ad19-53991eba1db8</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/15ccec05-5476-4890-ad19-53991eba1db8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigateway_method">Documentation</a><br/>| |API Gateway Without Security Policy<br/><sup><sub>4e1cc5d3-2811-4fb2-861c-ee9b3cb7f90b</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/4e1cc5d3-2811-4fb2-861c-ee9b3cb7f90b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewaydomainname#security_policy">Documentation</a><br/>| |API Gateway Without SSL Certificate<br/><sup><sub>0b4869fc-a842-4597-aa00-1294df425440</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/0b4869fc-a842-4597-aa00-1294df425440" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewaystage#clientcertificate_id">Documentation</a><br/>| |Certificate RSA Key Bytes Lower Than 256<br/><sup><sub>874d68a3-bfbe-4a4b-aaa0-9e74d7da634b</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/874d68a3-bfbe-4a4b-aaa0-9e74d7da634b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewayrestapi">Documentation</a><br/>| |CloudFront Without Minimum Protocol TLS 1.2<br/><sup><sub>00e5e55e-c2ff-46b3-a757-a7a1cd802456</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/00e5e55e-c2ff-46b3-a757-a7a1cd802456" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfrontdistribution">Documentation</a><br/>| |ECR Image Tag Not Immutable<br/><sup><sub>d1846b12-20c5-4d45-8798-fc35b79268eb</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/d1846b12-20c5-4d45-8798-fc35b79268eb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecrrepository">Documentation</a><br/>| |ECS Task Definition Network Mode Not Recommended<br/><sup><sub>9f4a9409-9c60-4671-be96-9716dbf63db1</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/9f4a9409-9c60-4671-be96-9716dbf63db1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecstaskdefinition#networkmode">Documentation</a><br/>| |EKS Cluster Has Public Access<br/><sup><sub>42f4b905-3736-4213-bfe9-c0660518cda8</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/42f4b905-3736-4213-bfe9-c0660518cda8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ekscluster">Documentation</a><br/>| |IAM User Has Too Many Access Keys<br/><sup><sub>3561130e-9c5f-485b-9e16-2764c82763e5</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/3561130e-9c5f-485b-9e16-2764c82763e5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamaccess_key#user">Documentation</a><br/>| |No Password Policy Enabled<br/><sup><sub>b592ffd4-0577-44b6-bd35-8c5ee81b5918</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/b592ffd4-0577-44b6-bd35-8c5ee81b5918" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuserloginprofile">Documentation</a><br/>| |S3 Bucket with Unsecured CORS Rule<br/><sup><sub>98a8f708-121b-455b-ae2f-da3fb59d17e1</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/98a8f708-121b-455b-ae2f-da3fb59d17e1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket#cors_rule">Documentation</a><br/>| |S3 Bucket Without Ignore Public ACL<br/><sup><sub>4fa66806-0dd9-4f8d-9480-3174d39c7c91</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/4fa66806-0dd9-4f8d-9480-3174d39c7c91" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucketpublicaccess_block">Documentation</a><br/>| |S3 Bucket Without Restriction Of Public Bucket<br/><sup><sub>1ec253ab-c220-4d63-b2de-5b40e0af9293</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/1ec253ab-c220-4d63-b2de-5b40e0af9293" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucketpublicaccess_block">Documentation</a><br/>| |Service Control Policies Disabled<br/><sup><sub>5ba6229c-8057-433e-91d0-21cf13569ca9</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/aws/5ba6229c-8057-433e-91d0-21cf13569ca9" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/organizationspolicy">Documentation</a><br/>| |Default VPC Exists<br/><sup><sub>96ed3526-0179-4c73-b1b2-372fde2e0d13</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/aws/96ed3526-0179-4c73-b1b2-372fde2e0d13" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/defaultvpc">Documentation</a><br/>| |Vulnerable Default SSL Certificate<br/><sup><sub>3a1e94df-6847-4c0e-a3b6-6c6af4e128ef</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/aws/3a1e94df-6847-4c0e-a3b6-6c6af4e128ef" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfrontdistribution">Documentation</a><br/>| |ALB Is Not Integrated With WAF<br/><sup><sub>0afa6ab8-a047-48cf-be07-93a2f8c34cf7</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/0afa6ab8-a047-48cf-be07-93a2f8c34cf7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/wafregionalwebaclassociation">Documentation</a><br/>| |ALB Listening on HTTP<br/><sup><sub>de7f5e83-da88-4046-871f-ea18504b1d43</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/de7f5e83-da88-4046-871f-ea18504b1d43" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lblistener">Documentation</a><br/>| |API Gateway Endpoint Config is Not Private<br/><sup><sub>6b2739db-9c49-4db7-b980-7816e0c248c1</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/6b2739db-9c49-4db7-b980-7816e0c248c1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewayrestapi">Documentation</a><br/>| |API Gateway without WAF<br/><sup><sub>a186e82c-1078-4a7b-85d8-579561fde884</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/a186e82c-1078-4a7b-85d8-579561fde884" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/wafregionalwebaclassociation#resource_arn">Documentation</a><br/>| |CloudFront Without WAF<br/><sup><sub>1419b4c6-6d5c-4534-9cf6-6a5266085333</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/1419b4c6-6d5c-4534-9cf6-6a5266085333" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfrontdistribution">Documentation</a><br/>| |EC2 Instance Has Public IP<br/><sup><sub>5a2486aa-facf-477d-a5c1-b010789459ce</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/5a2486aa-facf-477d-a5c1-b010789459ce" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#associatepublicipaddress">Documentation</a><br/>| |EKS Cluster Has Public Access CIDRs<br/><sup><sub>61cf9883-1752-4768-b18c-0d57f2737709</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/61cf9883-1752-4768-b18c-0d57f2737709" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ekscluster">Documentation</a><br/>| |EKS node group remote access disabled<br/><sup><sub>ba40ace1-a047-483c-8a8d-bc2d3a67a82d</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/ba40ace1-a047-483c-8a8d-bc2d3a67a82d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/eksnodegroup#remoteaccess">Documentation</a><br/>| |Elasticsearch with HTTPS disabled<br/><sup><sub>2e9e0729-66d5-4148-9d39-5e6fb4bf2a4e</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/2e9e0729-66d5-4148-9d39-5e6fb4bf2a4e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomain#enforce_https">Documentation</a><br/>| |HTTP Port Open To Internet<br/><sup><sub>ffac8a12-322e-42c1-b9b9-81ff85c39ef7</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/ffac8a12-322e-42c1-b9b9-81ff85c39ef7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |Network ACL With Unrestricted Access To SSH<br/><sup><sub>3af7f2fd-06e6-4dab-b996-2912bea19ba4</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/3af7f2fd-06e6-4dab-b996-2912bea19ba4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/networkacl">Documentation</a><br/>| |Security Group With Unrestricted Access To SSH<br/><sup><sub>65905cec-d691-4320-b320-2000436cb696</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/65905cec-d691-4320-b320-2000436cb696" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |Sensitive Port Is Exposed To Small Public Network<br/><sup><sub>e35c16a2-d54e-419d-8546-a804d8e024d0</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/e35c16a2-d54e-419d-8546-a804d8e024d0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |SQL Analysis Services Port 2383 (TCP) Is Publicly Accessible<br/><sup><sub>54c417bf-c762-48b9-9d31-b3d87047e3f0</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/54c417bf-c762-48b9-9d31-b3d87047e3f0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |VPC Subnet Assigns Public IP<br/><sup><sub>52f04a44-6bfa-4c41-b1d3-4ae99a2de05c</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/52f04a44-6bfa-4c41-b1d3-4ae99a2de05c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/subnet#mappublicipon_launch">Documentation</a><br/>| |VPC Without Network Firewall<br/><sup><sub>fd632aaf-b8a1-424d-a4d1-0de22fd3247a</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/aws/fd632aaf-b8a1-424d-a4d1-0de22fd3247a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/networkfirewallfirewall#vpc_id">Documentation</a><br/>| |API Gateway Access Logging Disabled<br/><sup><sub>1b6799eb-4a7a-4b04-9001-8cceb9999326</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/1b6799eb-4a7a-4b04-9001-8cceb9999326" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewaystage#accesslog_settings">Documentation</a><br/>| |API Gateway Deployment Without Access Log Setting<br/><sup><sub>625abc0e-f980-4ac9-a775-f7519ee34296</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/625abc0e-f980-4ac9-a775-f7519ee34296" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigateway_deployment">Documentation</a><br/>| |API Gateway With CloudWatch Logging Disabled<br/><sup><sub>982aa526-6970-4c59-8b9b-2ce7e019fe36</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/982aa526-6970-4c59-8b9b-2ce7e019fe36" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigateway_stage#managing-the-api-logging-cloudwatch-log-group">Documentation</a><br/>| |CloudFront Logging Disabled<br/><sup><sub>94690d79-b3b0-43de-b656-84ebef5753e5</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/94690d79-b3b0-43de-b656-84ebef5753e5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfrontdistribution">Documentation</a><br/>| |CloudTrail Log Files S3 Bucket with Logging Disabled<br/><sup><sub>ee9e50e8-b2ed-4176-ad42-8fc0cf7593f4</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/ee9e50e8-b2ed-4176-ad42-8fc0cf7593f4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#s3bucket_name">Documentation</a><br/>| |CloudTrail Logging Disabled<br/><sup><sub>4bb76f17-3d63-4529-bdca-2b454529d774</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/4bb76f17-3d63-4529-bdca-2b454529d774" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#enablelogging">Documentation</a><br/>| |CloudWatch AWS Config Configuration Changes Alarm Missing<br/><sup><sub>5b8d7527-de8e-4114-b9dd-9d988f1f418f</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/5b8d7527-de8e-4114-b9dd-9d988f1f418f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch Changes To NACL Alarm Missing<br/><sup><sub>0a8e8dc5-b6fc-44fc-b5a1-969ec950f9b0</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/0a8e8dc5-b6fc-44fc-b5a1-969ec950f9b0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |Cloudwatch Cloudtrail Configuration Changes Alarm Missing<br/><sup><sub>0f6cbf69-41bb-47dc-93f3-3844640bf480</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/0f6cbf69-41bb-47dc-93f3-3844640bf480" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch Disabling Or Scheduled Deletion Of Customer Created CMK Alarm Missing<br/><sup><sub>56a585f5-555c-48b2-8395-e64e4740a9cf</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/56a585f5-555c-48b2-8395-e64e4740a9cf" target="blank">Query

href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch Logging Disabled<br/><sup><sub>7dbba512-e244-42dc-98bb-422339827967</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/7dbba512-e244-42dc-98bb-422339827967" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/route53query_log">Documentation</a><br/>| |CloudWatch Management Console Auth Failed Alarm Missing<br/><sup><sub>5864d189-ee9a-4009-ac0c-8a582e6b7919</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/5864d189-ee9a-4009-ac0c-8a582e6b7919" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch Metrics Disabled<br/><sup><sub>081069cb-588b-4ce1-884c-2a1ce3029fe5</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/081069cb-588b-4ce1-884c-2a1ce3029fe5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewaymethodsettings#metrics_enabled">Documentation</a><br/>| |CloudWatch Root Account Use Missing<br/><sup><sub>8b1b1e67-6248-4dca-bbad-93486bb181c0</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/8b1b1e67-6248-4dca-bbad-93486bb181c0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch S3 policy Change Alarm Missing<br/><sup><sub>27c6a499-895a-4dc7-9617-5c485218db13</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/27c6a499-895a-4dc7-9617-5c485218db13" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |Cloudwatch Security Group Changes Alarm Missing<br/><sup><sub>4beaf898-9f8b-4237-89e2-5ffdc7ee6006</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/4beaf898-9f8b-4237-89e2-5ffdc7ee6006" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch VPC Changes Alarm Missing<br/><sup><sub>9d0d4512-1959-43a2-a17f-72360ff06d1b</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/9d0d4512-1959-43a2-a17f-72360ff06d1b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |DocDB Logging Is Disabled<br/><sup><sub>56f6a008-1b14-4af4-b9b2-ab7cf7e27641</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/56f6a008-1b14-4af4-b9b2-ab7cf7e27641" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdbcluster#enabledcloudwatchlogs_exports">Documentation</a><br/>| |EC2 Instance Monitoring Disabled<br/><sup><sub>23b70e32-032e-4fa6-ba5c-82f56b9980e6</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/23b70e32-032e-4fa6-ba5c-82f56b9980e6" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#monitoring">Documentation</a><br/>| |EKS cluster logging is not enabled<br/><sup><sub>37304d3f-f852-40b8-ae3f-725e87a7cedf</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/37304d3f-f852-40b8-ae3f-725e87a7cedf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ekscluster#enabledclusterlog_types">Documentation</a><br/>| |Elasticsearch Log Disabled<br/><sup><sub>acb6b4e2-a086-4f35-aefd-4db6ea51ada2</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/acb6b4e2-a086-4f35-aefd-4db6ea51ada2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomain#logpublishingoptions">Documentation</a><br/>| |ELB Access Log Disabled<br/><sup><sub>20018359-6fd7-4d05-ab26-d4dffccbdf79</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/20018359-6fd7-4d05-ab26-d4dffccbdf79" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elb#enabled">Documentation</a><br/>| |Global Accelerator Flow Logs Disabled<br/><sup><sub>96e8183b-e985-457b-90cd-61c0503a3369</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/96e8183b-e985-457b-90cd-61c0503a3369" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/globalacceleratoraccelerator#flowlogsenabled">Documentation</a><br/>| |GuardDuty Detector Disabled<br/><sup><sub>704dadd3-54fc-48ac-b6a0-02f170011473</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/704dadd3-54fc-48ac-b6a0-02f170011473" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/guarddutydetector#example-usage">Documentation</a><br/>| |Missing Cluster Log Types<br/><sup><sub>66f130d9-b81d-4e8e-9b08-da74b9c891df</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/66f130d9-b81d-4e8e-9b08-da74b9c891df" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/aws/r/ekscluster.html">Documentation</a><br/>| |MQ Broker Logging Disabled<br/><sup><sub>31245f98-a6a9-4182-9fc1-45482b9d030a</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/31245f98-a6a9-4182-9fc1-45482b9d030a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/mqbroker">Documentation</a><br/>| |MSK Cluster Logging Disabled<br/><sup><sub>2f56b7ab-7fba-4e93-82f0-247e5ddeb239</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/2f56b7ab-7fba-4e93-82f0-247e5ddeb239" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/mskcluster#broker_logs">Documentation</a><br/>| |Neptune Logging Is Disabled<br/><sup><sub>45cff7b6-3b80-40c1-ba7b-2cf480678bb8</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/45cff7b6-3b80-40c1-ba7b-2cf480678bb8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/neptunecluster#enablecloudwatchlogs_exports">Documentation</a><br/>| |RDS Without Logging<br/><sup><sub>8d7f7b8c-6c7c-40f8-baa6-62006c6c7b56</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/8d7f7b8c-6c7c-40f8-baa6-62006c6c7b56" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance#enabledcloudwatchlogs_exports">Documentation</a><br/>| |Redshift Cluster Logging Disabled<br/><sup><sub>15ffbacc-fa42-4f6f-a57d-2feac7365caa</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/15ffbacc-fa42-4f6f-a57d-2feac7365caa" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/redshiftcluster#enable">Documentation</a><br/>| |S3 Bucket Logging Disabled<br/><sup><sub>f861041c-8c9f-4156-acfc-5e6e524f5884</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/f861041c-8c9f-4156-acfc-5e6e524f5884" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket">Documentation</a><br/>| |S3 Bucket Object Level CloudTrail Logging Disabled<br/><sup><sub>a8fc2180-b3ac-4c93-bd0d-a55b974e4b07</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/a8fc2180-b3ac-4c93-bd0d-a55b974e4b07" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#eventselector">Documentation</a><br/>| |Stack Notifications Disabled<br/><sup><sub>b72d0026-f649-4c91-a9ea-15d8f681ac09</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/b72d0026-f649-4c91-a9ea-15d8f681ac09" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudformationstack">Documentation</a><br/>| |VPC FlowLogs Disabled<br/><sup><sub>f83121ea-03da-434f-9277-9cd247ab3047</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/aws/f83121ea-03da-434f-9277-9cd247ab3047" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc">Documentation</a><br/>| |No Stack Policy<br/><sup><sub>2f01fb2d-828a-499d-b98e-b83747305052</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/aws/2f01fb2d-828a-499d-b98e-b83747305052" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudformationstack">Documentation</a><br/>| |Authentication Without MFA<br/><sup><sub>3ddfa124-6407-4845-a501-179f90c65097</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/aws/3ddfa124-6407-4845-a501-179f90c65097" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamuser_policy">Documentation</a><br/>| |CloudWatch Logs Destination With Vulnerable Policy<br/><sup><sub>db0ec4c4-852c-46a2-b4f3-7ec13cdb12a8</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/aws/db0ec4c4-852c-46a2-b4f3-7ec13cdb12a8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogdestinationpolicy#access_policy">Documentation</a><br/>| |EC2 Instance Using API Keys<br/><sup><sub>0b93729a-d882-4803-bdc3-ac429a21f158</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/aws/0b93729a-d882-4803-bdc3-ac429a21f158" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#iaminstance_profile">Documentation</a><br/>| |SSO Permission With Inadequate User Session Duration<br/><sup><sub>ce9dfce0-5fc8-433b-944a-3b16153111a8</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/aws/ce9dfce0-5fc8-433b-944a-3b16153111a8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ssoadminpermission_set">Documentation</a><br/>| |Autoscaling Groups Supply Tags<br/><sup><sub>ba48df05-eaa1-4d64-905e-4a4b051e7587</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/aws/ba48df05-eaa1-4d64-905e-4a4b051e7587" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/autoscalinggroup#tag-and-tags">Documentation</a><br/>| |ECS Service Without Running Tasks<br/><sup><sub>91f16d09-689e-4926-aca7-155157f634ed</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/aws/91f16d09-689e-4926-aca7-155157f634ed" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecsservice">Documentation</a><br/>| |Automatic Minor Upgrades Disabled<br/><sup><sub>3b6d777b-76e3-4133-80a3-0d6f667ade7f</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/3b6d777b-76e3-4133-80a3-0d6f667ade7f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance#autominorversion_upgrade">Documentation</a><br/>| |CDN Configuration Is Missing<br/><sup><sub>1bc367f6-901d-4870-ad0c-71d79762ef52</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/1bc367f6-901d-4870-ad0c-71d79762ef52" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfrontdistribution">Documentation</a><br/>| |Cognito UserPool Without MFA<br/><sup><sub>ec28bf61-a474-4dbe-b414-6dd3a067d6f0</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/ec28bf61-a474-4dbe-b414-6dd3a067d6f0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cognitouser_pool">Documentation</a><br/>| |ECR Repository Without Policy<br/><sup><sub>69e7c320-b65d-41bb-be02-d63ecc0bcc9d</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/69e7c320-b65d-41bb-be02-d63ecc0bcc9d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecrrepository_policy">Documentation</a><br/>| |IAM Access Analyzer Not Enabled<br/><sup><sub>e592a0c5-5bdb-414c-9066-5dba7cdea370</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/e592a0c5-5bdb-414c-9066-5dba7cdea370" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/accessanalyzeranalyzer">Documentation</a><br/>| |IAM Password Without Minimum Length<br/><sup><sub>1bc1c685-e593-450e-88fb-19db4c82aa1d</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/1bc1c685-e593-450e-88fb-19db4c82aa1d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamaccountpasswordpolicy">Documentation</a><br/>| |Lambda IAM InvokeFunction Misconfigured<br/><sup><sub>0ca1017d-3b80-423e-bb9c-6cd5898d34bd</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/0ca1017d-3b80-423e-bb9c-6cd5898d34bd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambdapermission">Documentation</a><br/>| |Lambda Permission Misconfigured<br/><sup><sub>75ec6890-83af-4bf1-9f16-e83726df0bd0</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/75ec6890-83af-4bf1-9f16-e83726df0bd0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambdapermission">Documentation</a><br/>| |Misconfigured Password Policy Expiration<br/><sup><sub>ce60d060-efb8-4bfd-9cf7-ff8945d00d90</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/ce60d060-efb8-4bfd-9cf7-ff8945d00d90" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamaccountpasswordpolicy">Documentation</a><br/>| |Password Without Reuse Prevention<br/><sup><sub>89806cdc-9c2e-4bd1-a0dc-53f339bcfb2a</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/aws/89806cdc-9c2e-4bd1-a0dc-53f339bcfb2a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamaccountpasswordpolicy#passwordreuseprevention">Documentation</a><br/>| |Stack Without Template<br/><sup><sub>91bea7b8-0c31-4863-adc9-93f6177266c4</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../terraform-queries/aws/91bea7b8-0c31-4863-adc9-93f6177266c4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudformationstack">Documentation</a><br/>| |API Gateway With Invalid Compression<br/><sup><sub>ed35928e-195c-4405-a252-98ccb664ab7b</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/aws/ed35928e-195c-4405-a252-98ccb664ab7b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewayrestapi">Documentation</a><br/>| |CloudTrail Log Files Not Encrypted With KMS<br/><sup><sub>5d9e3164-9265-470c-9a10-57ae454ac0c7</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/aws/5d9e3164-9265-470c-9a10-57ae454ac0c7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#kmskey_id">Documentation</a><br/>| |CodeBuild Project Encrypted With AWS Managed Key<br/><sup><sub>3deec14b-03d2-4d27-9670-7d79322e3340</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/aws/3deec14b-03d2-4d27-9670-7d79322e3340" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/codebuildproject#encryption_key">Documentation</a><br/>| |DOCDB Cluster Encrypted With AWS Managed Key<br/><sup><sub>2134641d-30a4-4b16-8ffc-2cd4c4ffd15d</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/aws/2134641d-30a4-4b16-8ffc-2cd4c4ffd15d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdbcluster#kmskeyid">Documentation</a><br/>| |ECR Repository Not Encrypted With CMK<br/><sup><sub>0e32d561-4b5a-4664-a6e3-a3fa85649157</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/aws/0e32d561-4b5a-4664-a6e3-a3fa85649157" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecrrepository#encryption_configuration">Documentation</a><br/>| |EFS Without KMS<br/><sup><sub>25d251f3-f348-4f95-845c-1090e41a615c</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/aws/25d251f3-f348-4f95-845c-1090e41a615c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/efsfilesystem#kmskey_id">Documentation</a><br/>| |AWS Password Policy With Unchangeable Passwords<br/><sup><sub>9ef7d25d-9764-4224-9968-fa321c56ef76</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/aws/9ef7d25d-9764-4224-9968-fa321c56ef76" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/iamaccountpasswordpolicy">Documentation</a><br/>| |IAM User Policy Without MFA<br/><sup><sub>b5681959-6c09-4f55-b42b-c40fa12d03ec</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/aws/b5681959-6c09-4f55-b42b-c40fa12d03ec" target="blank">Query details</a><br><a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/idcredentialsmfaconfigure-api-require.html">Documentation</a><br/>| |Instance With No VPC<br/><sup><sub>a31a5a29-718a-4ff4-8001-a69e5e4d029e</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/aws/a31a5a29-718a-4ff4-8001-a69e5e4d029e" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance">Documentation</a><br/>| |Redis Disabled<br/><sup><sub>4bd15dd9-8d5e-4008-8532-27eb0c3706d3</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/aws/4bd15dd9-8d5e-4008-8532-27eb0c3706d3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachecluster#engine">Documentation</a><br/>| |Redshift Cluster Without VPC<br/><sup><sub>0a494a6a-ebe2-48a0-9d77-cf9d5125e1b3</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/aws/0a494a6a-ebe2-48a0-9d77-cf9d5125e1b3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/redshiftcluster#vpcsecuritygroup_ids">Documentation</a><br/>| |S3 Bucket Without Enabled MFA Delete<br/><sup><sub>c5b31ab9-0f26-4a49-b8aa-4cc064392f4d</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/aws/c5b31ab9-0f26-4a49-b8aa-4cc064392f4d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3bucket#mfa_delete">Documentation</a><br/>| |Dynamodb VPC Endpoint Without Route Table Association<br/><sup><sub>0bc534c5-13d1-4353-a7fe-b8665d5c1d7d</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/0bc534c5-13d1-4353-a7fe-b8665d5c1d7d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpcendpoint#vpc_id">Documentation</a><br/>| |EC2 Instance Using Default VPC<br/><sup><sub>7e4a6e76-568d-43ef-8c4e-36dea481bff1</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/7e4a6e76-568d-43ef-8c4e-36dea481bff1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#subnetid">Documentation</a><br/>| |ElastiCache Using Default Port<br/><sup><sub>5d89db57-8b51-4b38-bb76-b9bd42bd40f0</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/5d89db57-8b51-4b38-bb76-b9bd42bd40f0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachecluster#port">Documentation</a><br/>| |ElastiCache Without VPC<br/><sup><sub>8c849af7-a399-46f7-a34c-32d3dc96f1fc</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/8c849af7-a399-46f7-a34c-32d3dc96f1fc" target="blank">Query

href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticachecluster#subnetgroupname">Documentation</a><br/>| |EMR Without VPC<br/><sup><sub>2b3c8a6d-9856-43e6-ab1d-d651094f03b4</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/2b3c8a6d-9856-43e6-ab1d-d651094f03b4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/emrcluster#subnet_id">Documentation</a><br/>| |RDS Using Default Port<br/><sup><sub>bca7cc4d-b3a4-4345-9461-eb69c68fcd26</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/bca7cc4d-b3a4-4345-9461-eb69c68fcd26" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dbinstance#port">Documentation</a><br/>| |Redshift Using Default Port<br/><sup><sub>41abc6cc-dde1-4217-83d3-fb5f0cc09d8f</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/41abc6cc-dde1-4217-83d3-fb5f0cc09d8f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/redshiftcluster#port">Documentation</a><br/>| |Sensitive Port Is Exposed To Wide Private Network<br/><sup><sub>92fe237e-074c-4262-81a4-2077acb928c1</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/92fe237e-074c-4262-81a4-2077acb928c1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |Shield Advanced Not In Use<br/><sup><sub>084c6686-2a70-4710-91b1-000393e54c12</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/084c6686-2a70-4710-91b1-000393e54c12" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/shieldprotection#resource_arn">Documentation</a><br/>| |SQS VPC Endpoint Without DNS Resolution<br/><sup><sub>e9b7acf9-9ba0-4837-a744-31e7df1e434d</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/aws/e9b7acf9-9ba0-4837-a744-31e7df1e434d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/vpc#enabledns_support">Documentation</a><br/>| |API Gateway Deployment Without API Gateway UsagePlan Associated<br/><sup><sub>b3a59b8e-94a3-403e-b6e2-527abaf12034</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/b3a59b8e-94a3-403e-b6e2-527abaf12034" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigateway_deployment">Documentation</a><br/>| |API Gateway X-Ray Disabled<br/><sup><sub>5813ef56-fa94-406a-b35d-977d4a56ff2b</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/5813ef56-fa94-406a-b35d-977d4a56ff2b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigatewaystage#xraytracing_enabled">Documentation</a><br/>| |CloudTrail Log File Validation Disabled<br/><sup><sub>52ffcfa6-6c70-4ea6-8376-d828d3961669</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/52ffcfa6-6c70-4ea6-8376-d828d3961669" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#enablelogfilevalidation">Documentation</a><br/>| |CloudTrail Multi Region Disabled<br/><sup><sub>8173d5eb-96b5-4aa6-a71b-ecfa153c123d</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/8173d5eb-96b5-4aa6-a71b-ecfa153c123d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail#ismultiregiontrail">Documentation</a><br/>| |CloudTrail Not Integrated With CloudWatch<br/><sup><sub>17b30f8f-8dfb-4597-adf6-57600b6cf25e</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/17b30f8f-8dfb-4597-adf6-57600b6cf25e" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail">Documentation</a><br/>| |CloudTrail SNS Topic Name Undefined<br/><sup><sub>482b7d26-0bdb-4b5f-bf6f-545826c0a3dd</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/482b7d26-0bdb-4b5f-bf6f-545826c0a3dd" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudtrail">Documentation</a><br/>| |CloudWatch Console Sign-in Without MFA Alarm Missing<br/><sup><sub>44ceb4fa-0897-4fd2-b676-30e7a58f2933</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/44ceb4fa-0897-4fd2-b676-30e7a58f2933" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch IAM Policy Changes Alarm Missing<br/><sup><sub>eaaba502-2f94-411a-a3c2-83d63cc1776d</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/eaaba502-2f94-411a-a3c2-83d63cc1776d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch Network Gateways Changes Alarm Missing<br/><sup><sub>6b6874fe-4c2f-4eea-8b90-7cceaa4a125e</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/6b6874fe-4c2f-4eea-8b90-7cceaa4a125e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch Route Table Changes Alarm Missing<br/><sup><sub>2285e608-ddbc-47f3-ba54-ce7121e31216</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/2285e608-ddbc-47f3-ba54-ce7121e31216" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CMK Rotation Disabled<br/><sup><sub>22fbfeac-7b5a-421a-8a27-7a2178bb910b</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/22fbfeac-7b5a-421a-8a27-7a2178bb910b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kmskey#enablekeyrotation">Documentation</a><br/>| |Configuration Aggregator to All Regions Disabled<br/><sup><sub>ac5a0bc0-a54c-45aa-90c3-15f7703b9132</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/ac5a0bc0-a54c-45aa-90c3-15f7703b9132" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/configconfigurationaggregator#allregions">Documentation</a><br/>| |ECS Cluster with Container Insights Disabled<br/><sup><sub>97cb0688-369a-4d26-b1f7-86c4c91231bc</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/97cb0688-369a-4d26-b1f7-86c4c91231bc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecscluster#setting">Documentation</a><br/>| |ElasticSearch Without Slow Logs<br/><sup><sub>e979fcbc-df6c-422d-9458-c33d65e71c45</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/e979fcbc-df6c-422d-9458-c33d65e71c45" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearchdomain#logpublishingoptions">Documentation</a><br/>| |KMS Key With No Deletion Window<br/><sup><sub>0b530315-0ea4-497f-b34c-4ff86268f59d</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/0b530315-0ea4-497f-b34c-4ff86268f59d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/kmskey">Documentation</a><br/>| |Lambda Functions Without X-Ray Tracing<br/><sup><sub>8152e0cf-d2f0-47ad-96d5-d003a76eabd1</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/8152e0cf-d2f0-47ad-96d5-d003a76eabd1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lambdafunction#tracing_config">Documentation</a><br/>| |Unscanned ECR Image<br/><sup><sub>9630336b-3fed-4096-8173-b9afdfe346a7</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/aws/9630336b-3fed-4096-8173-b9afdfe346a7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecrrepository#scanonpush">Documentation</a><br/>| |API Gateway Stage Without API Gateway UsagePlan Associated<br/><sup><sub>c999cf62-0920-40f8-8dda-0caccd66ed7e</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../terraform-queries/aws/c999cf62-0920-40f8-8dda-0caccd66ed7e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/apigateway_stage">Documentation</a><br/>| |Security Group Not Used<br/><sup><sub>4849211b-ac39-479e-ae78-5694d506cb24</sub></sup>|<span style="color:#5bc0de">Info</span>|Access Control|<a href="../terraform-queries/aws/4849211b-ac39-479e-ae78-5694d506cb24" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup">Documentation</a><br/>| |DynamoDB Table Point In Time Recovery Disabled<br/><sup><sub>741f1291-47ac-4a85-a07b-3d32a9d6bd3e</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/aws/741f1291-47ac-4a85-a07b-3d32a9d6bd3e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/dynamodbtable#pointintime_recovery">Documentation</a><br/>| |EC2 Not EBS Optimized<br/><sup><sub>60224630-175a-472a-9e23-133827040766</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/aws/60224630-175a-472a-9e23-133827040766" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#ebsoptimized">Documentation</a><br/>| |Resource Not Using Tags<br/><sup><sub>e38a8e0a-b88b-4902-b3fe-b0fcb17d5c10</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/aws/e38a8e0a-b88b-4902-b3fe-b0fcb17d5c10" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/guides/resource-tagging">Documentation</a><br/>| |Security Group Rule Without Description<br/><sup><sub>68eb4bf3-f9bf-463d-b5cf-e029bb446d2e</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/aws/68eb4bf3-f9bf-463d-b5cf-e029bb446d2e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup#description">Documentation</a><br/>| |Security Group Rule Without Description<br/><sup><sub>cb3f5ed6-0d18-40de-a93d-b3538db31e8c</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/aws/cb3f5ed6-0d18-40de-a93d-b3538db31e8c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/securitygroup#description">Documentation</a><br/>| |CloudWatch AWS Organizations Changes Missing Alarm<br/><sup><sub>38b85c45-e772-4de8-a247-69619ca137b3</sub></sup>|<span style="color:#5bc0de">Info</span>|Observability|<a href="../terraform-queries/aws/38b85c45-e772-4de8-a247-69619ca137b3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlogmetricfilter#pattern">Documentation</a><br/>| |CloudWatch Without Retention Period Specified<br/><sup><sub>ef0b316a-211e-42f1-888e-64efe172b755</sub></sup>|<span style="color:#5bc0de">Info</span>|Observability|<a href="../terraform-queries/aws/ef0b316a-211e-42f1-888e-64efe172b755" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatchlog_group">Documentation</a><br/>| Below are listed queries related to Terraform AWS_BOM: | Query |Severity|Category|More info| ||--|--|--| |BOM - AWS DynamoDB<br/><sup><sub>23edf35f-7c22-4ff9-87e6-0ca74261cfbf</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/23edf35f-7c22-4ff9-87e6-0ca74261cfbf" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS EBS<br/><sup><sub>86571149-eef3-4280-a645-01e60df854b0</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/86571149-eef3-4280-a645-01e60df854b0" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS EFS<br/><sup><sub>f53f16d6-46a9-4277-9fbe-617b1e24cdca</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/f53f16d6-46a9-4277-9fbe-617b1e24cdca" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS Elasticache<br/><sup><sub>54229498-850b-4f78-b3a7-218d24ef2c37</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/54229498-850b-4f78-b3a7-218d24ef2c37" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS Kinesis<br/><sup><sub>0e59d33e-bba2-4037-8f88-9765647ca7ad</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/0e59d33e-bba2-4037-8f88-9765647ca7ad" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS MQ<br/><sup><sub>fcb1b388-f558-4b7f-9b6e-f4e98abb7380</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/fcb1b388-f558-4b7f-9b6e-f4e98abb7380" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS MSK<br/><sup><sub>051f2063-2517-4295-ad8e-ba88c1bf5cfc</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/051f2063-2517-4295-ad8e-ba88c1bf5cfc" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS RDS<br/><sup><sub>12933609-c5bf-44b4-9a41-a6467c3b685b</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/12933609-c5bf-44b4-9a41-a6467c3b685b" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS S3 Buckets<br/><sup><sub>2d16c3fb-35ba-4ec0-b4e4-06ee3cbd4045</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/2d16c3fb-35ba-4ec0-b4e4-06ee3cbd4045" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS SNS<br/><sup><sub>eccc4d59-74b9-4974-86f1-74386e0c7f33</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/eccc4d59-74b9-4974-86f1-74386e0c7f33" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - AWS SQS<br/><sup><sub>baecd2da-492a-4d59-b9dc-29540a1398e0</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/aws/baecd2da-492a-4d59-b9dc-29540a1398e0" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| Below are listed queries related to Terraform AZURE: | Query |Severity|Category|More info| ||--|--|--| |CosmosDB Account IP Range Filter Not Set<br/><sup><sub>c2a3efb6-8a58-481c-82f2-bfddf34bb4b7</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../terraform-queries/azure/c2a3efb6-8a58-481c-82f2-bfddf34bb4b7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/cosmosdbaccount#iprangefilter">Documentation</a><br/>| |Redis Entirely Accessible<br/><sup><sub>fd8da341-6760-4450-b26c-9f6d8850575e</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../terraform-queries/azure/fd8da341-6760-4450-b26c-9f6d8850575e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/redisfirewall_rule">Documentation</a><br/>| |Redis Publicly Accessible<br/><sup><sub>5089d055-53ff-421b-9482-a5267bdce629</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../terraform-queries/azure/5089d055-53ff-421b-9482-a5267bdce629" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/redisfirewall_rule">Documentation</a><br/>| |SQLServer Ingress From Any IP<br/><sup><sub>25c0ea09-f1c5-4380-b055-3b83863f2bb8</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../terraform-queries/azure/25c0ea09-f1c5-4380-b055-3b83863f2bb8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/sqlfirewall_rule">Documentation</a><br/>| |Unrestricted SQL Server Access<br/><sup><sub>d7ba74da-2da0-4d4b-83c8-2fd72a3f6c28</sub></sup>|<span style="color:#ff0000">Critical</span>|Networking and Firewall|<a href="../terraform-queries/azure/d7ba74da-2da0-4d4b-83c8-2fd72a3f6c28" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/sqlfirewall_rule">Documentation</a><br/>| |Public Storage Account<br/><sup><sub>17f75827-0684-48f4-8747-61129c7e4198</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/azure/17f75827-0684-48f4-8747-61129c7e4198" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storageaccount">Documentation</a><br/>| |Storage Container Is Publicly Accessible<br/><sup><sub>dd5230f8-a577-4bbb-b7ac-f2c2fe7d5299</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/azure/dd5230f8-a577-4bbb-b7ac-f2c2fe7d5299" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storagecontainer#containeraccesstype">Documentation</a><br/>| |Azure Container Registry With No Locks<br/><sup><sub>a187ac47-8163-42ce-8a63-c115236be6fb</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/azure/a187ac47-8163-42ce-8a63-c115236be6fb" target="blank">Query details</a><br><a

|Security Group is Not Configured<br/><sup><sub>5c822443-e1ea-46b8-84eb-758ec602e844</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/azure/5c822443-e1ea-46b8-84eb-758ec602e844" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/azure/r/virtualnetwork.html">Documentation</a><br/>| |MariaDB Server Public Network Access Enabled<br/><sup><sub>7f0a8696-7159-4337-ad0d-8a3ab4a78195</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/azure/7f0a8696-7159-4337-ad0d-8a3ab4a78195" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mariadbserver#publicnetworkaccess_enabled">Documentation</a><br/>| |MSSQL Server Public Network Access Enabled<br/><sup><sub>ade36cf4-329f-4830-a83d-9db72c800507</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/azure/ade36cf4-329f-4830-a83d-9db72c800507" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssqlserver#publicnetworkaccess_enabled">Documentation</a><br/>| |MySQL Server Public Access Enabled<br/><sup><sub>f118890b-2468-42b1-9ce9-af35146b425b</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/azure/f118890b-2468-42b1-9ce9-af35146b425b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mysqlserver#publicnetworkaccess_enabled">Documentation</a><br/>| |RDP Is Exposed To The Internet<br/><sup><sub>efbf6449-5ec5-4cfe-8f15-acc51e0d787c</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/azure/efbf6449-5ec5-4cfe-8f15-acc51e0d787c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networksecurity_rule">Documentation</a><br/>| |Sensitive Port Is Exposed To Entire Network<br/><sup><sub>594c198b-4d79-41b8-9b36-fde13348b619</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/azure/594c198b-4d79-41b8-9b36-fde13348b619" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networksecurity_rule">Documentation</a><br/>| |Admin User Enabled For Container Registry<br/><sup><sub>b897dfbf-322c-45a8-b67c-1e698beeaa51</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/b897dfbf-322c-45a8-b67c-1e698beeaa51" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/azurerm/r/containerregistry.html">Documentation</a><br/>| |AKS RBAC Disabled<br/><sup><sub>86f92117-eed8-4614-9c6c-b26da20ff37f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/86f92117-eed8-4614-9c6c-b26da20ff37f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/kubernetescluster#rolebasedaccess_control">Documentation</a><br/>| |App Service Authentication Disabled<br/><sup><sub>c7fc1481-2899-4490-bbd8-544a3a61a2f3</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/c7fc1481-2899-4490-bbd8-544a3a61a2f3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#enabled">Documentation</a><br/>| |Function App Authentication Disabled<br/><sup><sub>e65a0733-94a0-4826-82f4-df529f4c593f</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/e65a0733-94a0-4826-82f4-df529f4c593f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/functionapp#auth_settings">Documentation</a><br/>| |Role Assignment Not Limit Guest User Permissions<br/><sup><sub>8e75e431-449f-49e9-b56a-c8f1378025cf</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/8e75e431-449f-49e9-b56a-c8f1378025cf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/roleassignment">Documentation</a><br/>| |Role Definition Allows Custom Role Creation<br/><sup><sub>3fa5900f-9aac-4982-96b2-a6143d9c99fb</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/3fa5900f-9aac-4982-96b2-a6143d9c99fb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/roledefinition#actions">Documentation</a><br/>| |Storage Share File Allows All ACL Permissions<br/><sup><sub>48bbe0fd-57e4-4678-a4a1-119e79c90fc3</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/48bbe0fd-57e4-4678-a4a1-119e79c90fc3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storageshare_file">Documentation</a><br/>| |Storage Table Allows All ACL Permissions<br/><sup><sub>3ac3e75c-6374-4a32-8ba0-6ed69bda404e</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/azure/3ac3e75c-6374-4a32-8ba0-6ed69bda404e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storagetable#permissions">Documentation</a><br/>| |Azure Instance Using Basic Authentication<br/><sup><sub>dafe30ec-325d-4516-85d1-e8e6776f012c</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../terraform-queries/azure/dafe30ec-325d-4516-85d1-e8e6776f012c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/linuxvirtualmachine#adminssh_key">Documentation</a><br/>| |Key Vault Secrets Content Type Undefined<br/><sup><sub>f8e08a38-fc6e-4915-abbe-a7aadf1d59ef</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../terraform-queries/azure/f8e08a38-fc6e-4915-abbe-a7aadf1d59ef" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/keyvaultsecret#contenttype">Documentation</a><br/>| |Security Contact Email<br/><sup><sub>34664094-59e0-4524-b69f-deaa1a68cce3</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../terraform-queries/azure/34664094-59e0-4524-b69f-deaa1a68cce3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/securitycenter_contact#email">Documentation</a><br/>| |App Service Not Using Latest TLS Encryption Version<br/><sup><sub>b7b9d1c7-2d3b-49b4-b867-ebbe68d0b643</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/azure/b7b9d1c7-2d3b-49b4-b867-ebbe68d0b643" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#mintlsversion">Documentation</a><br/>| |Encryption On Managed Disk Disabled<br/><sup><sub>a99130ab-4c0e-43aa-97f8-78d4fcb30024</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/azure/a99130ab-4c0e-43aa-97f8-78d4fcb30024" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/manageddisk#encryption_settings">Documentation</a><br/>| |Function App Not Using Latest TLS Encryption Version<br/><sup><sub>45fc717a-bd86-415c-bdd8-677901be1aa6</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/azure/45fc717a-bd86-415c-bdd8-677901be1aa6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/functionapp#mintlsversion">Documentation</a><br/>| |MySQL SSL Connection Disabled<br/><sup><sub>73e42469-3a86-4f39-ad78-098f325b4e9f</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/azure/73e42469-3a86-4f39-ad78-098f325b4e9f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mysqlserver">Documentation</a><br/>| |SSL Enforce Disabled<br/><sup><sub>0437633b-daa6-4bbc-8526-c0d2443b946e</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/azure/0437633b-daa6-4bbc-8526-c0d2443b946e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlserver">Documentation</a><br/>| |Storage Account Not Forcing HTTPS<br/><sup><sub>12944ec4-1fa0-47be-8b17-42a034f937c2</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/azure/12944ec4-1fa0-47be-8b17-42a034f937c2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storageaccount">Documentation</a><br/>| |Storage Account Not Using Latest TLS Encryption Version<br/><sup><sub>8263f146-5e03-43e0-9cfe-db960d56d1e7</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/azure/8263f146-5e03-43e0-9cfe-db960d56d1e7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storageaccount">Documentation</a><br/>| |AD Admin Not Configured For SQL Server<br/><sup><sub>a3a055d2-9a2e-4cc9-b9fb-12850a1a3a4b</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/a3a055d2-9a2e-4cc9-b9fb-12850a1a3a4b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/sqlactivedirectoryadministrator">Documentation</a><br/>| |AKS Private Cluster Disabled<br/><sup><sub>599318f2-6653-4569-9e21-041d06c63a89</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/599318f2-6653-4569-9e21-041d06c63a89" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/kubernetescluster#privateclusterenabled">Documentation</a><br/>| |App Service FTPS Enforce Disabled<br/><sup><sub>85da374f-b00f-4832-9d44-84a1ca1e89f8</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/85da374f-b00f-4832-9d44-84a1ca1e89f8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#ftps_state">Documentation</a><br/>| |App Service HTTP2 Disabled<br/><sup><sub>525b53be-62ed-4244-b4df-41aecfcb4071</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/525b53be-62ed-4244-b4df-41aecfcb4071" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#http2_enabled">Documentation</a><br/>| |Azure App Service Client Certificate Disabled<br/><sup><sub>a81573f9-3691-4d83-88a0-7d4af63e17a3</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/a81573f9-3691-4d83-88a0-7d4af63e17a3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#clientcertenabled">Documentation</a><br/>| |Function App Client Certificates Unrequired<br/><sup><sub>9bb3c639-5edf-458c-8ee5-30c17c7d671d</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/9bb3c639-5edf-458c-8ee5-30c17c7d671d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/functionapp#clientcertmode">Documentation</a><br/>| |Function App FTPS Enforce Disabled<br/><sup><sub>9dab0179-433d-4dff-af8f-0091025691df</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/9dab0179-433d-4dff-af8f-0091025691df" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/functionapp#ftps_state">Documentation</a><br/>| |Function App HTTP2 Disabled<br/><sup><sub>ace823d1-4432-4dee-945b-cdf11a5a6bd0</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/ace823d1-4432-4dee-945b-cdf11a5a6bd0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/functionapp#http2_enabled">Documentation</a><br/>| |Function App Managed Identity Disabled<br/><sup><sub>c87749b3-ff10-41f5-9df2-c421e8151759</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/c87749b3-ff10-41f5-9df2-c421e8151759" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/functionapp#identity">Documentation</a><br/>| |Network Watcher Flow Disabled<br/><sup><sub>b90842e5-6779-44d4-9760-972f4c03ba1c</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/b90842e5-6779-44d4-9760-972f4c03ba1c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networkwatcherflowlog">Documentation</a><br/>| |Redis Cache Allows Non SSL Connections<br/><sup><sub>e29a75e6-aba3-4896-b42d-b87818c16b58</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/e29a75e6-aba3-4896-b42d-b87818c16b58" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/rediscache">Documentation</a><br/>| |Redis Not Updated Regularly<br/><sup><sub>b947809d-dd2f-4de9-b724-04d101c515aa</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/b947809d-dd2f-4de9-b724-04d101c515aa" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/rediscache#patch_schedule">Documentation</a><br/>| |Security Center Pricing Tier Is Not Standard<br/><sup><sub>819d50fd-1cdf-45c3-9936-be408aaad93e</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/819d50fd-1cdf-45c3-9936-be408aaad93e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/securitycentersubscriptionpricing">Documentation</a><br/>| |Small Flow Logs Retention Period<br/><sup><sub>7750fcca-dd03-4d38-b663-4b70289bcfd4</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/7750fcca-dd03-4d38-b663-4b70289bcfd4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networkwatcherflowlog">Documentation</a><br/>| |VM Not Attached To Network<br/><sup><sub>bbf6b3df-4b65-4f87-82cc-da9f30f8c033</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/bbf6b3df-4b65-4f87-82cc-da9f30f8c033" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtualmachine#networkinterfaceids">Documentation</a><br/>| |Web App Accepting Traffic Other Than HTTPS<br/><sup><sub>11e9a948-c6c3-4a0f-8dcf-b5cf1763cdbe</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/azure/11e9a948-c6c3-4a0f-8dcf-b5cf1763cdbe" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#https_only">Documentation</a><br/>| |Default Azure Storage Account Network Access Is Too Permissive<br/><sup><sub>a5613650-32ec-4975-a305-31af783153ea</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/azure/a5613650-32ec-4975-a305-31af783153ea" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storageaccountnetworkrules#default_action">Documentation</a><br/>| |Azure Cognitive Search Public Network Access Enabled<br/><sup><sub>4a9e0f00-0765-4f72-a0d4-d31110b78279</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/4a9e0f00-0765-4f72-a0d4-d31110b78279" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/searchservice#publicnetworkaccess_enabled">Documentation</a><br/>| |Firewall Rule Allows Too Many Hosts To Access Redis Cache<br/><sup><sub>a829b715-cf75-4e92-b645-54c9b739edfb</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/a829b715-cf75-4e92-b645-54c9b739edfb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/redisfirewall_rule">Documentation</a><br/>| |Network Interfaces IP Forwarding Enabled<br/><sup><sub>4216ebac-d74c-4423-b437-35025cb88af5</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/4216ebac-d74c-4423-b437-35025cb88af5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networkinterface#enableipforwarding">Documentation</a><br/>| |Network Interfaces With Public IP<br/><sup><sub>c1573577-e494-4417-8854-7e119368dc8b</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/c1573577-e494-4417-8854-7e119368dc8b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networkinterface#publicipaddress_id">Documentation</a><br/>| |Sensitive Port Is Exposed To Small Public Network<br/><sup><sub>e9dee01f-2505-4df2-b9bf-7804d1fd9082</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/e9dee01f-2505-4df2-b9bf-7804d1fd9082" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networksecurity_rule">Documentation</a><br/>| |SSH Is Exposed To The Internet<br/><sup><sub>3e3c175e-aadf-4e2b-a464-3fdac5748d24</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/3e3c175e-aadf-4e2b-a464-3fdac5748d24" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networksecurity_rule">Documentation</a><br/>| |Trusted Microsoft Services Not Enabled<br/><sup><sub>5400f379-a347-4bdd-a032-446465fdcc6f</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/5400f379-a347-4bdd-a032-446465fdcc6f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/storageaccount#bypass">Documentation</a><br/>| |WAF Is Disabled For Azure Application Gateway<br/><sup><sub>2e48d91c-50e4-45c8-9312-27b625868a72</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/azure/2e48d91c-50e4-45c8-9312-27b625868a72" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/applicationgateway">Documentation</a><br/>| |Email Alerts Disabled<br/><sup><sub>9db38e87-f6aa-4b5e-a1ec-7266df259409</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/9db38e87-f6aa-4b5e-a1ec-7266df259409" target="blank">Query details</a><br><a

|Log Retention Is Not Set<br/><sup><sub>ffb02aca-0d12-475e-b77c-a726f7aeff4b</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/ffb02aca-0d12-475e-b77c-a726f7aeff4b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlconfiguration">Documentation</a><br/>| |MSSQL Server Auditing Disabled<br/><sup><sub>609839ae-bd81-4375-9910-5bce72ae7b92</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/609839ae-bd81-4375-9910-5bce72ae7b92" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssqlserver">Documentation</a><br/>| |PostgreSQL Log Checkpoints Disabled<br/><sup><sub>3790d386-be81-4dcf-9850-eaa7df6c10d9</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/3790d386-be81-4dcf-9850-eaa7df6c10d9" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlconfiguration">Documentation</a><br/>| |PostgreSQL Log Connections Not Set<br/><sup><sub>c640d783-10c5-4071-b6c1-23507300d333</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/c640d783-10c5-4071-b6c1-23507300d333" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlconfiguration">Documentation</a><br/>| |PostgreSQL Log Disconnections Not Set<br/><sup><sub>07f7134f-9f37-476e-8664-670c218e4702</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/07f7134f-9f37-476e-8664-670c218e4702" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlconfiguration">Documentation</a><br/>| |PostgreSQL Log Duration Not Set<br/><sup><sub>16e0879a-c4ae-4ff8-a67d-a2eed5d67b8f</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/16e0879a-c4ae-4ff8-a67d-a2eed5d67b8f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlconfiguration">Documentation</a><br/>| |PostgreSQL Server Without Connection Throttling<br/><sup><sub>2b3c671f-1b76-4741-8789-ed1fe0785dc4</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/2b3c671f-1b76-4741-8789-ed1fe0785dc4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlconfiguration">Documentation</a><br/>| |SQL Server Auditing Disabled<br/><sup><sub>f7e296b0-6660-4bc5-8f87-22ac4a815edf</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/f7e296b0-6660-4bc5-8f87-22ac4a815edf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/sqlserver">Documentation</a><br/>| |Vault Auditing Disabled<br/><sup><sub>38c71c00-c177-4cd7-8d36-cd1007cdb190</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/azure/38c71c00-c177-4cd7-8d36-cd1007cdb190" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/azurerm/r/keyvault.html">Documentation</a><br/>| |PostgreSQL Server Threat Detection Policy Disabled<br/><sup><sub>c407c3cf-c409-4b29-b590-db5f4138d332</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/azure/c407c3cf-c409-4b29-b590-db5f4138d332" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlserver#threatdetectionpolicy">Documentation</a><br/>| |SQL Database Audit Disabled<br/><sup><sub>83a229ba-483e-47c6-8db7-dc96969bce5a</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/azure/83a229ba-483e-47c6-8db7-dc96969bce5a" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/azurerm/r/sqldatabase.html">Documentation</a><br/>| |Key Expiration Not Set<br/><sup><sub>4d080822-5ee2-49a4-8984-68f3d4c890fc</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/azure/4d080822-5ee2-49a4-8984-68f3d4c890fc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/keyvault_key">Documentation</a><br/>| |Secret Expiration Not Set<br/><sup><sub>dfa20ffa-f476-428f-a490-424b41e91c7f</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/azure/dfa20ffa-f476-428f-a490-424b41e91c7f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/keyvault_secret">Documentation</a><br/>| |Azure Active Directory Authentication<br/><sup><sub>a21c8da9-41bf-40cf-941d-330cf0d11fc7</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/azure/a21c8da9-41bf-40cf-941d-330cf0d11fc7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/servicefabriccluster#tenantid">Documentation</a><br/>| |Virtual Network with DDoS Protection Plan disabled<br/><sup><sub>b4cc2c52-34a6-4b43-b57c-4bdeb4514a5a</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/azure/b4cc2c52-34a6-4b43-b57c-4bdeb4514a5a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/virtualnetwork#ddosprotectionplan">Documentation</a><br/>| |Geo Redundancy Is Disabled<br/><sup><sub>8b042c30-e441-453f-b162-7696982ebc58</sub></sup>|<span style="color:#edd57e">Low</span>|Backup|<a href="../terraform-queries/azure/8b042c30-e441-453f-b162-7696982ebc58" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlserver">Documentation</a><br/>| |MariaDB Server Geo-redundant Backup Disabled<br/><sup><sub>0a70d5f3-1ecd-4c8e-9292-928fc9a8c4f1</sub></sup>|<span style="color:#edd57e">Low</span>|Backup|<a href="../terraform-queries/azure/0a70d5f3-1ecd-4c8e-9292-928fc9a8c4f1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mariadbserver#georedundantbackup_enabled">Documentation</a><br/>| |AKS Uses Azure Policies Add-On Disabled<br/><sup><sub>43789711-161b-4708-b5bb-9d1c626f7492</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/azure/43789711-161b-4708-b5bb-9d1c626f7492" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/kubernetescluster#azure_policy">Documentation</a><br/>| |App Service Without Latest PHP Version<br/><sup><sub>96fe318e-d631-4156-99fa-9080d57280ae</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/azure/96fe318e-d631-4156-99fa-9080d57280ae" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#php_version">Documentation</a><br/>| |App Service Without Latest Python Version<br/><sup><sub>cc4aaa9d-1070-461a-b519-04e00f42db8a</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/azure/cc4aaa9d-1070-461a-b519-04e00f42db8a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#python_version">Documentation</a><br/>| |SQL Server Predictable Active Directory Account Name<br/><sup><sub>bcd3fc01-5902-4f2a-b05a-227f9bbf5450</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/azure/bcd3fc01-5902-4f2a-b05a-227f9bbf5450" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/sqlactivedirectoryadministrator">Documentation</a><br/>| |SQL Server Predictable Admin Account Name<br/><sup><sub>2ab6de9a-0136-415c-be92-79d2e4fd750f</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/azure/2ab6de9a-0136-415c-be92-79d2e4fd750f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/sqlserver">Documentation</a><br/>| |Cosmos DB Account Without Tags<br/><sup><sub>56dad03e-e94f-4dd6-93a4-c253a03ff7a0</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../terraform-queries/azure/56dad03e-e94f-4dd6-93a4-c253a03ff7a0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/cosmosdbaccount">Documentation</a><br/>| |AKS Disk Encryption Set ID Undefined<br/><sup><sub>b17d8bb8-4c08-4785-867e-cb9e62a622aa</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/azure/b17d8bb8-4c08-4785-867e-cb9e62a622aa" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/kubernetescluster#diskencryptionset_id">Documentation</a><br/>| |PostgreSQL Server Infrastructure Encryption Disabled<br/><sup><sub>6425c98b-ca4e-41fe-896a-c78772c131f8</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../terraform-queries/azure/6425c98b-ca4e-41fe-896a-c78772c131f8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlserver#infrastructureencryptionenabled">Documentation</a><br/>| |AKS Network Policy Misconfigured<br/><sup><sub>f5342045-b935-402d-adf1-8dbbd09c0eef</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/azure/f5342045-b935-402d-adf1-8dbbd09c0eef" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/kubernetescluster">Documentation</a><br/>| |Dashboard Is Enabled<br/><sup><sub>61c3cb8b-0715-47e4-b788-86dde40dd2db</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/azure/61c3cb8b-0715-47e4-b788-86dde40dd2db" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/kubernetescluster">Documentation</a><br/>| |Azure Front Door WAF Disabled<br/><sup><sub>835a4f2f-df43-437d-9943-545ccfc55961</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/azure/835a4f2f-df43-437d-9943-545ccfc55961" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/frontdoor#webapplicationfirewallpolicylinkid">Documentation</a><br/>| |Sensitive Port Is Exposed To Wide Private Network<br/><sup><sub>c6c7b33d-d7f6-4ab8-8c82-ca0431ecdb7e</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/azure/c6c7b33d-d7f6-4ab8-8c82-ca0431ecdb7e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/networksecurity_rule">Documentation</a><br/>| |Small Activity Log Retention Period<br/><sup><sub>2b856bf9-8e8c-4005-875f-303a8cba3918</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/azure/2b856bf9-8e8c-4005-875f-303a8cba3918" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/monitorlog_profile">Documentation</a><br/>| |Small MSSQL Audit Retention Period<br/><sup><sub>9c301481-e6ec-44f7-8a49-8ec63e2969ea</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/azure/9c301481-e6ec-44f7-8a49-8ec63e2969ea" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssqlserver">Documentation</a><br/>| |Small MSSQL Server Audit Retention<br/><sup><sub>59acb56b-2b10-4c2c-ba38-f2223c3f5cfc</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/azure/59acb56b-2b10-4c2c-ba38-f2223c3f5cfc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/sqlserver">Documentation</a><br/>| |Small PostgreSQL DB Server Log Retention Period<br/><sup><sub>261a83f8-dd72-4e8c-b5e1-ebf06e8fe606</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/azure/261a83f8-dd72-4e8c-b5e1-ebf06e8fe606" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/postgresqlconfiguration">Documentation</a><br/>| |App Service Managed Identity Disabled<br/><sup><sub>b61cce4b-0cc4-472b-8096-15617a6d769b</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../terraform-queries/azure/b61cce4b-0cc4-472b-8096-15617a6d769b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/appservice#identity">Documentation</a><br/>| |SQL Server Alert Email Disabled<br/><sup><sub>55975007-f6e7-4134-83c3-298f1fe4b519</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/azure/55975007-f6e7-4134-83c3-298f1fe4b519" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/mssqlserversecurityalertpolicy#emailaccount_admins">Documentation</a><br/>| Below are listed queries related to Terraform DATABRICKS: | Query |Severity|Category|More info| ||--|--|--| |Databricks Cluster or Job With None Or Insecure Permission(s)<br/><sup><sub>a4edb7e1-c0e0-4f7f-9d7c-d1b603e81ad5</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/a4edb7e1-c0e0-4f7f-9d7c-d1b603e81ad5" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/permissions">Documentation</a><br/>| |Unrestricted Databricks ACL<br/><sup><sub>2c4fe4a9-f44b-4c70-b09b-5b75cd251805</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/2c4fe4a9-f44b-4c70-b09b-5b75cd251805" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/ipaccess_list">Documentation</a><br/>| |Job's Task is Legacy (sparksubmittask)<br/><sup><sub>375cdab9-3f94-4ae0-b1e3-8fbdf9cdf4d7</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../terraform-queries/375cdab9-3f94-4ae0-b1e3-8fbdf9cdf4d7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/job#sparksubmit_task-configuration-block">Documentation</a><br/>| |Indefinitely Databricks OBO Token Lifetime<br/><sup><sub>23e1f5f0-12b7-4d7e-9087-f60f42ccd514</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/23e1f5f0-12b7-4d7e-9087-f60f42ccd514" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/obotoken">Documentation</a><br/>| |Indefinitely Databricks Token Lifetime<br/><sup><sub>7d05ca25-91b4-42ee-b6f6-b06611a87ce8</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/7d05ca25-91b4-42ee-b6f6-b06611a87ce8" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/token">Documentation</a><br/>| |Databricks Autoscale Badly Setup<br/><sup><sub>953c0cc6-5f30-44cb-a803-bf4ef2571be8</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/953c0cc6-5f30-44cb-a803-bf4ef2571be8" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/cluster">Documentation</a><br/>| |Databricks Group Without User Or Instance Profile<br/><sup><sub>23c3067a-8cc9-480c-b645-7c1e0ad4bf60</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/23c3067a-8cc9-480c-b645-7c1e0ad4bf60" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/resources/group">Documentation</a><br/>| |Check Databricks Cluster AWS Attribute Best Practices<br/><sup><sub>b0749c53-e3ff-4d09-bbe4-dca94e2e7a38</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/b0749c53-e3ff-4d09-bbe4-dca94e2e7a38" target="_blank">Query details</a><br><a href="https://docs.databricks.com/clusters/cluster-config-best-practices.html">Documentation</a><br/>| |Check Databricks Cluster Azure Attribute Best Practices<br/><sup><sub>38028698-e663-4ef7-aa92-773fef0ca86f</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/38028698-e663-4ef7-aa92-773fef0ca86f" target="_blank">Query details</a><br><a href="https://docs.databricks.com/clusters/cluster-config-best-practices.html">Documentation</a><br/>| |Check Databricks Cluster GCP Attribute Best Practices<br/><sup><sub>539e4557-d2b5-4d57-a001-cb01140a4e2d</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/539e4557-d2b5-4d57-a001-cb01140a4e2d" target="_blank">Query details</a><br><a href="https://docs.databricks.com/clusters/cluster-config-best-practices.html">Documentation</a><br/>| |Check use no LTS Spark Version<br/><sup><sub>5a627dfa-a4dd-4020-a4c6-5f3caf4abcd6</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/5a627dfa-a4dd-4020-a4c6-5f3caf4abcd6" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/databricks/databricks/latest/docs/data-sources/sparkversion">Documentation</a><br/>| Below are listed queries related to Terraform GCP: | Query |Severity|Category|More info| ||--|--|--| |Cloud Storage Anonymous or Publicly Accessible<br/><sup><sub>a6cd52a1-3056-4910-96a5-894de9f3f3b3</sub></sup>|<span style="color:#ff0000">Critical</span>|Access Control|<a href="../terraform-queries/gcp/a6cd52a1-3056-4910-96a5-894de9f3f3b3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storagebucketiam#googlestoragebucketiam_binding">Documentation</a><br/>| |SQL DB Instance Publicly Accessible<br/><sup><sub>b187edca-b81e-4fdc-aff4-aab57db45edb</sub></sup>|<span style="color:#ff0000">Critical</span>|Insecure Configurations|<a href="../terraform-queries/gcp/b187edca-b81e-4fdc-aff4-aab57db45edb" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/sqldatabase_instance">Documentation</a><br/>| |BigQuery Dataset Is Public<br/><sup><sub>e576ce44-dd03-4022-a8c0-3906acca2ab4</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/gcp/e576ce44-dd03-4022-a8c0-3906acca2ab4" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/google/r/bigquerydataset.html">Documentation</a><br/>| |Google Project IAM Binding Service Account has Token Creator or Account User Role<br/><sup><sub>617ef6ff-711e-4bd7-94ae-e965911b1b40</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/gcp/617ef6ff-711e-4bd7-94ae-e965911b1b40" target="blank">Query

href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googleprojectiam#googleprojectiambinding">Documentation</a><br/>| |Google Project IAM Member Service Account Has Admin Role<br/><sup><sub>84d36481-fd63-48cb-838e-635c44806ec2</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/gcp/84d36481-fd63-48cb-838e-635c44806ec2" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googleprojectiam#googleprojectiammember">Documentation</a><br/>| |Google Project IAM Member Service Account has Token Creator or Account User Role<br/><sup><sub>c68b4e6d-4e01-4ca1-b256-1e18e875785c</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/gcp/c68b4e6d-4e01-4ca1-b256-1e18e875785c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googleprojectiam#googleprojectiammember">Documentation</a><br/>| |KMS Crypto Key is Publicly Accessible<br/><sup><sub>16cc87d1-dd47-4f46-b3ce-4dfcac8fd2f5</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/gcp/16cc87d1-dd47-4f46-b3ce-4dfcac8fd2f5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googlekmscryptokeyiam#googlekmscryptokeyiampolicy">Documentation</a><br/>| |SQL DB Instance With SSL Disabled<br/><sup><sub>02474449-71aa-40a1-87ae-e14497747b00</sub></sup>|<span style="color:#bb2124">High</span>|Encryption|<a href="../terraform-queries/gcp/02474449-71aa-40a1-87ae-e14497747b00" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/sqldatabaseinstance#requiressl">Documentation</a><br/>| |GKE Legacy Authorization Enabled<br/><sup><sub>5baa92d2-d8ee-4c75-88a4-52d9d8bb8067</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/gcp/5baa92d2-d8ee-4c75-88a4-52d9d8bb8067" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster">Documentation</a><br/>| |Google Storage Bucket Level Access Disabled<br/><sup><sub>bb0db090-5509-4853-a827-75ced0b3caa0</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/gcp/bb0db090-5509-4853-a827-75ced0b3caa0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storagebucket">Documentation</a><br/>| |RDP Access Is Not Restricted<br/><sup><sub>678fd659-96f2-454a-a2a0-c2571f83a4a3</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/gcp/678fd659-96f2-454a-a2a0-c2571f83a4a3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computefirewall">Documentation</a><br/>| |Cloud Storage Bucket Is Publicly Accessible<br/><sup><sub>c010082c-76e0-4b91-91d9-6e8439e455dd</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/gcp/c010082c-76e0-4b91-91d9-6e8439e455dd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storagebucket_iam#member/members">Documentation</a><br/>| |KMS Admin and CryptoKey Roles In Use<br/><sup><sub>92e4464a-4139-4d57-8742-b5acc0347680</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/gcp/92e4464a-4139-4d57-8742-b5acc0347680" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googleprojectiam#policydata">Documentation</a><br/>| |OSLogin Disabled<br/><sup><sub>32ecd6eb-0711-421f-9627-1a28d9eff217</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/gcp/32ecd6eb-0711-421f-9627-1a28d9eff217" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computeproject_metadata#metadata">Documentation</a><br/>| |VM With Full Cloud Access<br/><sup><sub>bc280331-27b9-4acb-a010-018e8098aa5d</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/gcp/bc280331-27b9-4acb-a010-018e8098aa5d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computeinstance#scopes">Documentation</a><br/>| |SQL DB Instance Backup Disabled<br/><sup><sub>cf3c7631-cd1e-42f3-8801-a561214a6e79</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/gcp/cf3c7631-cd1e-42f3-8801-a561214a6e79" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/sqldatabase_instance">Documentation</a><br/>| |Disk Encryption Disabled<br/><sup><sub>b1d51728-7270-4991-ac2f-fc26e2695b38</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/gcp/b1d51728-7270-4991-ac2f-fc26e2695b38" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computedisk">Documentation</a><br/>| |DNSSEC Using RSASHA1<br/><sup><sub>ccc3100c-0fdd-4a5e-9908-c10107291860</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/gcp/ccc3100c-0fdd-4a5e-9908-c10107291860" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/dnsmanaged_zone#algorithm">Documentation</a><br/>| |Google Compute SSL Policy Weak Cipher In Use<br/><sup><sub>14a457f0-473d-4d1d-9e37-6d99b355b336</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/gcp/14a457f0-473d-4d1d-9e37-6d99b355b336" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computessl_policy">Documentation</a><br/>| |Cloud DNS Without DNSSEC<br/><sup><sub>5ef61c88-bbb4-4725-b1df-55d23c9676bb</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/5ef61c88-bbb4-4725-b1df-55d23c9676bb" target="blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/google/d/dnsmanaged_zone.html">Documentation</a><br/>| |Google Container Node Pool Auto Repair Disabled<br/><sup><sub>acfdbec6-4a17-471f-b412-169d77553332</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/acfdbec6-4a17-471f-b412-169d77553332" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containernode_pool">Documentation</a><br/>| |Google Project Auto Create Network Disabled<br/><sup><sub>59571246-3f62-4965-a96f-c7d97e269351</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/59571246-3f62-4965-a96f-c7d97e269351" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googleproject">Documentation</a><br/>| |IP Aliasing Disabled<br/><sup><sub>c606ba1d-d736-43eb-ac24-e16108f3a9e0</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/c606ba1d-d736-43eb-ac24-e16108f3a9e0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster">Documentation</a><br/>| |Network Policy Disabled<br/><sup><sub>11e7550e-c4b6-472e-adff-c698f157cdd7</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/11e7550e-c4b6-472e-adff-c698f157cdd7" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster">Documentation</a><br/>| |OSLogin Is Disabled For VM Instance<br/><sup><sub>d0b4d550-c001-46c3-bbdb-d5d75d33f05f</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/d0b4d550-c001-46c3-bbdb-d5d75d33f05f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computeinstance">Documentation</a><br/>| |Pod Security Policy Disabled<br/><sup><sub>9192e0f9-eca5-4056-9282-ae2a736a4088</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/9192e0f9-eca5-4056-9282-ae2a736a4088" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster">Documentation</a><br/>| |Private Cluster Disabled<br/><sup><sub>6ccb85d7-0420-4907-9380-50313f80946b</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/6ccb85d7-0420-4907-9380-50313f80946b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster">Documentation</a><br/>| |Shielded GKE Nodes Disabled<br/><sup><sub>579a0727-9c29-4d58-8195-fc5802a8bdb4</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/579a0727-9c29-4d58-8195-fc5802a8bdb4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster#enableshieldednodes">Documentation</a><br/>| |Shielded VM Disabled<br/><sup><sub>1b44e234-3d73-41a8-9954-0b154135280e</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/gcp/1b44e234-3d73-41a8-9954-0b154135280e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computeinstance#shieldedinstanceconfig">Documentation</a><br/>| |GKE Using Default Service Account<br/><sup><sub>1c8eef02-17b1-4a3e-b01d-dcc3292d2c38</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/gcp/1c8eef02-17b1-4a3e-b01d-dcc3292d2c38" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster#node_config">Documentation</a><br/>| |Using Default Service Account<br/><sup><sub>3cb4af0b-056d-4fb1-8b95-fdc4593625ff</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/gcp/3cb4af0b-056d-4fb1-8b95-fdc4593625ff" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computeinstance">Documentation</a><br/>| |Google Compute Network Using Default Firewall Rule<br/><sup><sub>40abce54-95b1-478c-8e5f-ea0bf0bb0e33</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/gcp/40abce54-95b1-478c-8e5f-ea0bf0bb0e33" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computefirewall#name">Documentation</a><br/>| |Google Compute Network Using Firewall Rule that Allows All Ports<br/><sup><sub>22ef1d26-80f8-4a6c-8c15-f35aab3cac78</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/gcp/22ef1d26-80f8-4a6c-8c15-f35aab3cac78" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computefirewall#allow">Documentation</a><br/>| |IP Forwarding Enabled<br/><sup><sub>f34c0c25-47b4-41eb-9c79-249b4dd47b89</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/gcp/f34c0c25-47b4-41eb-9c79-249b4dd47b89" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/computeinstance">Documentation</a><br/>| |Serial Ports Are Enabled For VM Instances<br/><sup><sub>97fa667a-d05b-4f16-9071-58b939f34751</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/gcp/97fa667a-d05b-4f16-9071-58b939f34751" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computeinstance">Documentation</a><br/>| |SSH Access Is Not Restricted<br/><sup><sub>c4dcdcdf-10dd-4bf4-b4a0-8f6239e6aaa0</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/gcp/c4dcdcdf-10dd-4bf4-b4a0-8f6239e6aaa0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computefirewall">Documentation</a><br/>| |Cloud Storage Bucket Logging Not Enabled<br/><sup><sub>d6cabc3a-d57e-48c2-b341-bf3dd4f4a120</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/gcp/d6cabc3a-d57e-48c2-b341-bf3dd4f4a120" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storagebucket#log_bucket">Documentation</a><br/>| |Cloud Storage Bucket Versioning Disabled<br/><sup><sub>e7e961ac-d17e-4413-84bc-8a1fbe242944</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/gcp/e7e961ac-d17e-4413-84bc-8a1fbe242944" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storagebucket#enabled">Documentation</a><br/>| |Google Compute Subnetwork Logging Disabled<br/><sup><sub>40430747-442d-450a-a34f-dc57149f4609</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/gcp/40430747-442d-450a-a34f-dc57149f4609" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computesubnetwork">Documentation</a><br/>| |Stackdriver Logging Disabled<br/><sup><sub>4c7ebcb2-eae2-461e-bc83-456ee2d4f694</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/gcp/4c7ebcb2-eae2-461e-bc83-456ee2d4f694" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster#logging_service">Documentation</a><br/>| |Stackdriver Monitoring Disabled<br/><sup><sub>30e8dfd2-3591-4d19-8d11-79e93106c93d</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../terraform-queries/gcp/30e8dfd2-3591-4d19-8d11-79e93106c93d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster#monitoring_service">Documentation</a><br/>| |Node Auto Upgrade Disabled<br/><sup><sub>b139213e-7d24-49c2-8025-c18faa21ecaa</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/gcp/b139213e-7d24-49c2-8025-c18faa21ecaa" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containernodepool#autoupgrade">Documentation</a><br/>| |Service Account with Improper Privileges<br/><sup><sub>cefdad16-0dd5-4ac5-8ed2-a37502c78672</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/gcp/cefdad16-0dd5-4ac5-8ed2-a37502c78672" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/iampolicy#role">Documentation</a><br/>| |High Google KMS Crypto Key Rotation Period<br/><sup><sub>d8c57c4e-bf6f-4e32-a2bf-8643532de77b</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/gcp/d8c57c4e-bf6f-4e32-a2bf-8643532de77b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/kmscrypto_key">Documentation</a><br/>| |Project-wide SSH Keys Are Enabled In VM Instances<br/><sup><sub>3e4d5ce6-3280-4027-8010-c26eeea1ec01</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/gcp/3e4d5ce6-3280-4027-8010-c26eeea1ec01" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computeinstance">Documentation</a><br/>| |User with IAM Role<br/><sup><sub>704fcc44-a58f-4af5-82e2-93f2a58ef918</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/gcp/704fcc44-a58f-4af5-82e2-93f2a58ef918" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/iampolicy#role">Documentation</a><br/>| |Outdated GKE Version<br/><sup><sub>128df7ec-f185-48bc-8913-ce756a3ccb85</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/gcp/128df7ec-f185-48bc-8913-ce756a3ccb85" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster#master_version">Documentation</a><br/>| |Cluster Labels Disabled<br/><sup><sub>65c1bc7a-4835-4ac4-a2b6-13d310b0648d</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/gcp/65c1bc7a-4835-4ac4-a2b6-13d310b0648d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster">Documentation</a><br/>| |COS Node Image Not Used<br/><sup><sub>8a893e46-e267-485a-8690-51f39951de58</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/gcp/8a893e46-e267-485a-8690-51f39951de58" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containernodepool#nodeconfig">Documentation</a><br/>| |Legacy Client Certificate Auth Enabled<br/><sup><sub>73fb21a1-b19a-45b1-b648-b47b1678681e</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/gcp/73fb21a1-b19a-45b1-b648-b47b1678681e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/containercluster">Documentation</a><br/>| |Not Proper Email Account In Use<br/><sup><sub>9356962e-4a4f-4d06-ac59-dc8008775eaa</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/gcp/9356962e-4a4f-4d06-ac59-dc8008775eaa" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googleprojectiam#googleprojectiambinding">Documentation</a><br/>| |Google Compute Network Using Firewall Rule that Allows Port Range<br/><sup><sub>e6f61c37-106b-449f-a5bb-81bfcaceb8b4</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/gcp/e6f61c37-106b-449f-a5bb-81bfcaceb8b4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computefirewall#allow">Documentation</a><br/>| |Google Compute Subnetwork with Private Google Access Disabled<br/><sup><sub>ee7b93c1-b3f8-4a3b-9588-146d481814f5</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/gcp/ee7b93c1-b3f8-4a3b-9588-146d481814f5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/computesubnetwork#privateipgoogle_access">Documentation</a><br/>| |IAM Audit Not Properly Configured<br/><sup><sub>89fe890f-b480-460c-8b6b-7d8b1468adb4</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../terraform-queries/gcp/89fe890f-b480-460c-8b6b-7d8b1468adb4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/googleprojectiam#googleprojectiamaudit_config">Documentation</a><br/>| Below are listed queries related to Terraform GCP_BOM: | Query |Severity|Category|More info| ||--|--|--| |BOM - GCP Dataflow<br/><sup><sub>895ed0d9-6fec-4567-8614-d7a74b599a53</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/gcp/895ed0d9-6fec-4567-8614-d7a74b599a53" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - GCP

style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/gcp/c9d81239-c818-4869-9917-1570c62b81fd" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - GCP PD<br/><sup><sub>dd7d70aa-a6ec-460d-b5d2-38b40253b16f</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/gcp/dd7d70aa-a6ec-460d-b5d2-38b40253b16f" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - GCP PST<br/><sup><sub>4b82202a-b18e-4891-a1eb-a0989850bbb3</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/gcp/4b82202a-b18e-4891-a1eb-a0989850bbb3" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - GCP Redis<br/><sup><sub>bc75ce52-a60a-4660-b533-bce837a5019b</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/gcp/bc75ce52-a60a-4660-b533-bce837a5019b" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| |BOM - GCP SB<br/><sup><sub>2f06d22c-56bd-4f73-8a51-db001fcf2150</sub></sup>|<span style="color:#CCCCCC">Trace</span>|Bill Of Materials|<a href="../terraform-queries/gcp/2f06d22c-56bd-4f73-8a51-db001fcf2150" target="_blank">Query details</a><br><a href="https://kics.io">Documentation</a><br/>| Below are listed queries related to Terraform GITHUB: | Query |Severity|Category|More info| ||--|--|--| |Github Organization Webhook With SSL Disabled<br/><sup><sub>ce7c874e-1b88-450b-a5e4-cb76ada3c8a9</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/ce7c874e-1b88-450b-a5e4-cb76ada3c8a9" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/github/latest/docs/resources/organizationwebhook">Documentation</a><br/>| |GitHub Repository Set To Public<br/><sup><sub>15d8a7fd-465a-4d15-a868-add86552f17b</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/15d8a7fd-465a-4d15-a868-add86552f17b" target="_blank">Query details</a><br><a href="https://www.terraform.io/docs/providers/github/r/repository.html">Documentation</a><br/>| Below are listed queries related to Terraform KUBERNETES: | Query |Severity|Category|More info| ||--|--|--| |Non Kube System Pod With Host Mount<br/><sup><sub>86a947ea-f577-4efb-a8b0-5fc00257d521</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../terraform-queries/86a947ea-f577-4efb-a8b0-5fc00257d521" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod">Documentation</a><br/>| |Cluster Allows Unsafe Sysctls<br/><sup><sub>a9174d31-d526-4ad9-ace4-ce7ddbf52e03</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/a9174d31-d526-4ad9-ace4-ce7ddbf52e03" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#allowedunsafe_sysctls">Documentation</a><br/>| |Container Is Privileged<br/><sup><sub>87065ef8-de9b-40d8-9753-f4a4303e27a4</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/87065ef8-de9b-40d8-9753-f4a4303e27a4" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#privileged">Documentation</a><br/>| |Container Runs Unmasked<br/><sup><sub>0ad60203-c050-4115-83b6-b94bde92541d</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/0ad60203-c050-4115-83b6-b94bde92541d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#allowedprocmounttypes">Documentation</a><br/>| |Containers With Sys Admin Capabilities<br/><sup><sub>3f55386d-75cd-4e9a-ac47-167b26c04724</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/3f55386d-75cd-4e9a-ac47-167b26c04724" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#capabilities-1">Documentation</a><br/>| |Privilege Escalation Allowed<br/><sup><sub>c878abb4-cca5-4724-92b9-289be68bd47c</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/c878abb4-cca5-4724-92b9-289be68bd47c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#allowprivilege_escalation">Documentation</a><br/>| |PSP Allows Containers To Share The Host Network Namespace<br/><sup><sub>4950837c-0ce5-4e42-9bee-a25eae73740b</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/4950837c-0ce5-4e42-9bee-a25eae73740b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#hostnetwork">Documentation</a><br/>| |PSP Allows Privilege Escalation<br/><sup><sub>2bff9906-4e9b-4f71-9346-8ebedfdf43ef</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/2bff9906-4e9b-4f71-9346-8ebedfdf43ef" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#allowprivilege_escalation">Documentation</a><br/>| |PSP Allows Sharing Host IPC<br/><sup><sub>51bed0ac-a8ae-407a-895e-90c6cb0610ce</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/51bed0ac-a8ae-407a-895e-90c6cb0610ce" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#hostipc">Documentation</a><br/>| |PSP Set To Privileged<br/><sup><sub>a6a4d4fc-4e8f-47d1-969f-e9d4a084f3b9</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/a6a4d4fc-4e8f-47d1-969f-e9d4a084f3b9" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#privileged">Documentation</a><br/>| |PSP With Added Capabilities<br/><sup><sub>48388bd2-7201-4dcc-b56d-e8a9efa58fad</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/48388bd2-7201-4dcc-b56d-e8a9efa58fad" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#allowedcapabilities">Documentation</a><br/>| |Tiller (Helm v2) Is Deployed<br/><sup><sub>ca2fba76-c1a7-4afd-be67-5249f861cb0e</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/ca2fba76-c1a7-4afd-be67-5249f861cb0e" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#image">Documentation</a><br/>| |Workload Mounting With Sensitive OS Directory<br/><sup><sub>a737be28-37d8-4bff-aa6d-1be8aa0a0015</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/a737be28-37d8-4bff-aa6d-1be8aa0a0015" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#hostpath">Documentation</a><br/>| |Volume Mount With OS Directory Write Permissions<br/><sup><sub>a62a99d1-8196-432f-8f80-3c100b05d62a</sub></sup>|<span style="color:#bb2124">High</span>|Resource Management|<a href="../terraform-queries/a62a99d1-8196-432f-8f80-3c100b05d62a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#volumemount">Documentation</a><br/>| |Docker Daemon Socket is Exposed to Containers<br/><sup><sub>4e203a65-c8d8-49a2-b749-b124d43c9dc1</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/4e203a65-c8d8-49a2-b749-b124d43c9dc1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#hostpath">Documentation</a><br/>| |Missing App Armor Config<br/><sup><sub>bd6bd46c-57db-4887-956d-d372f21291b6</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/bd6bd46c-57db-4887-956d-d372f21291b6" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#annotations">Documentation</a><br/>| |Permissive Access to Create Pods<br/><sup><sub>522d4a64-4dc9-44bd-9240-7d8a0d5cb5ba</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/522d4a64-4dc9-44bd-9240-7d8a0d5cb5ba" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/role#rule">Documentation</a><br/>| |RBAC Roles with Read Secrets Permissions<br/><sup><sub>826abb30-3cd5-4e0b-a93b-67729b4f7e63</sub></sup>|<span style="color:#ff7213">Medium</span>|Access Control|<a href="../terraform-queries/826abb30-3cd5-4e0b-a93b-67729b4f7e63" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/role#rule">Documentation</a><br/>| |Readiness Probe Is Not Configured<br/><sup><sub>8657197e-3f87-4694-892b-8144701d83c1</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../terraform-queries/8657197e-3f87-4694-892b-8144701d83c1" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#readinessprobe">Documentation</a><br/>| |Root Containers Admitted<br/><sup><sub>4c415497-7410-4559-90e8-f2c8ac64ee38</sub></sup>|<span style="color:#ff7213">Medium</span>|Best Practices|<a href="../terraform-queries/4c415497-7410-4559-90e8-f2c8ac64ee38" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#runas_user">Documentation</a><br/>| |Incorrect Volume Claim Access Mode ReadWriteOnce<br/><sup><sub>26b047a9-0329-48fd-8fb7-05bbe5ba80ee</sub></sup>|<span style="color:#ff7213">Medium</span>|Build Process|<a href="../terraform-queries/26b047a9-0329-48fd-8fb7-05bbe5ba80ee" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/statefulset#volumeclaimtemplate">Documentation</a><br/>| |Container Host Pid Is True<br/><sup><sub>587d5d82-70cf-449b-9817-f60f9bccb88c</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/587d5d82-70cf-449b-9817-f60f9bccb88c" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#hostpid">Documentation</a><br/>| |Container Resources Limits Undefined<br/><sup><sub>60af03ff-a421-45c8-b214-6741035476fa</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/60af03ff-a421-45c8-b214-6741035476fa" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod">Documentation</a><br/>| |Containers With Added Capabilities<br/><sup><sub>fe771ff7-ba15-4f8f-ad7a-8aa232b49a28</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/fe771ff7-ba15-4f8f-ad7a-8aa232b49a28" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#capabilities-1">Documentation</a><br/>| |Ingress Controller Exposes Workload<br/><sup><sub>e2c83c1f-84d7-4467-966c-ed41fd015bb9</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/e2c83c1f-84d7-4467-966c-ed41fd015bb9" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/ingress#http">Documentation</a><br/>| |NETRAW Capabilities Disabled for PSP<br/><sup><sub>9aa32890-ac1a-45ee-81ca-5164e2098556</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/9aa32890-ac1a-45ee-81ca-5164e2098556" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/podsecuritypolicy#requireddropcapabilities">Documentation</a><br/>| |NETRAW Capabilities Not Being Dropped<br/><sup><sub>e5587d53-a673-4a6b-b3f2-ba07ec274def</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/e5587d53-a673-4a6b-b3f2-ba07ec274def" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#drop">Documentation</a><br/>| |Seccomp Profile Is Not Configured<br/><sup><sub>455f2e0c-686d-4fcb-8b5f-3f953f12c43c</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Configurations|<a href="../terraform-queries/455f2e0c-686d-4fcb-8b5f-3f953f12c43c" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#annotations">Documentation</a><br/>| |Role Binding To Default Service Account<br/><sup><sub>3360c01e-c8c0-4812-96a2-a6329b9b7f9f</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/3360c01e-c8c0-4812-96a2-a6329b9b7f9f" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/rolebinding#subject">Documentation</a><br/>| |Service Account Name Undefined Or Empty<br/><sup><sub>24b132df-5cc7-4823-8029-f898e1c50b72</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/24b132df-5cc7-4823-8029-f898e1c50b72" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#serviceaccount_name">Documentation</a><br/>| |Service Account Token Automount Not Disabled<br/><sup><sub>a9a13d4f-f17a-491b-b074-f54bffffcb4a</sub></sup>|<span style="color:#ff7213">Medium</span>|Insecure Defaults|<a href="../terraform-queries/a9a13d4f-f17a-491b-b074-f54bffffcb4a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#automountserviceaccounttoken">Documentation</a><br/>| |Service With External Load Balancer<br/><sup><sub>2a52567c-abb8-4651-a038-52fa27c77aed</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../terraform-queries/2a52567c-abb8-4651-a038-52fa27c77aed" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/service">Documentation</a><br/>| |Memory Limits Not Defined<br/><sup><sub>fd097ed0-7fe6-4f58-8b71-fef9f0820a21</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/fd097ed0-7fe6-4f58-8b71-fef9f0820a21" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#limits">Documentation</a><br/>| |Memory Requests Not Defined<br/><sup><sub>21719347-d02b-497d-bda4-04a03c8e5b61</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/21719347-d02b-497d-bda4-04a03c8e5b61" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#requests">Documentation</a><br/>| |Shared Host IPC Namespace<br/><sup><sub>e94d3121-c2d1-4e34-a295-139bfeb73ea3</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/e94d3121-c2d1-4e34-a295-139bfeb73ea3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#hostipc">Documentation</a><br/>| |Shared Host Network Namespace<br/><sup><sub>ac1564a3-c324-4747-9fa1-9dfc234dace0</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../terraform-queries/ac1564a3-c324-4747-9fa1-9dfc234dace0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#hostnetwork">Documentation</a><br/>| |Service Account Allows Access Secrets<br/><sup><sub>07fc3413-e572-42f7-9877-5c8fc6fccfb5</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/07fc3413-e572-42f7-9877-5c8fc6fccfb5" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/rolebinding#subject">Documentation</a><br/>| |Shared Service Account<br/><sup><sub>f74b9c43-161a-4799-bc95-0b0ec81801b9</sub></sup>|<span style="color:#ff7213">Medium</span>|Secret Management|<a href="../terraform-queries/f74b9c43-161a-4799-bc95-0b0ec81801b9" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#serviceaccount_name">Documentation</a><br/>| |Cluster Admin Rolebinding With Superuser Permissions<br/><sup><sub>17172bc2-56fb-4f17-916f-a014147706cd</sub></sup>|<span style="color:#edd57e">Low</span>|Access Control|<a href="../terraform-queries/17172bc2-56fb-4f17-916f-a014147706cd" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/clusterrole_binding#name">Documentation</a><br/>| |Deployment Without PodDisruptionBudget<br/><sup><sub>a05331ee-1653-45cb-91e6-13637a76e4f0</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/a05331ee-1653-45cb-91e6-13637a76e4f0" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/deployment#selector">Documentation</a><br/>| |HPA Targets Invalid Object<br/><sup><sub>17e52ca3-ddd0-4610-9d56-ce107442e110</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/17e52ca3-ddd0-4610-9d56-ce107442e110" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/horizontalpod_autoscaler#metric">Documentation</a><br/>| |StatefulSet Without PodDisruptionBudget<br/><sup><sub>7249e3b0-9231-4af3-bc5f-5daf4988ecbf</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/7249e3b0-9231-4af3-bc5f-5daf4988ecbf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/statefulset#selector">Documentation</a><br/>| |StatefulSet Without Service Name<br/><sup><sub>420e6360-47bb-46f6-9072-b20ed22c842d</sub></sup>|<span style="color:#edd57e">Low</span>|Availability|<a href="../terraform-queries/420e6360-47bb-46f6-9072-b20ed22c842d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/statefulset#selector">Documentation</a><br/>| |Metadata Label Is Invalid<br/><sup><sub>bc3dabb6-fd50-40f8-b9ba-7429c9f1fb0e</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/bc3dabb6-fd50-40f8-b9ba-7429c9f1fb0e" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#labels">Documentation</a><br/>| |No Drop Capabilities for Containers<br/><sup><sub>21cef75f-289f-470e-8038-c7cee0664164</sub></sup>|<span style="color:#edd57e">Low</span>|Best Practices|<a href="../terraform-queries/21cef75f-289f-470e-8038-c7cee0664164" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#drop">Documentation</a><br/>| |Root Container Not Mounted As Read-only<br/><sup><sub>d532566b-8d9d-4f3b-80bd-361fe802f9c2</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a

target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#readonlyrootfilesystem">Documentation</a><br/>| |StatefulSet Requests Storage<br/><sup><sub>fcc2612a-1dfe-46e4-8ce6-0320959f0040</sub></sup>|<span style="color:#edd57e">Low</span>|Build Process|<a href="../terraform-queries/fcc2612a-1dfe-46e4-8ce6-0320959f0040" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/statefulset#volumeclaimtemplate">Documentation</a><br/>| |Default Service Account In Use<br/><sup><sub>737a0dd9-0aaa-4145-8118-f01778262b8a</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/737a0dd9-0aaa-4145-8118-f01778262b8a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/serviceaccount#automountserviceaccount_token">Documentation</a><br/>| |Image Pull Policy Of The Container Is Not Set To Always<br/><sup><sub>aa737abf-6b1d-4aba-95aa-5c160bd7f96e</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/aa737abf-6b1d-4aba-95aa-5c160bd7f96e" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#imagepull_policy">Documentation</a><br/>| |Image Without Digest<br/><sup><sub>228c4c19-feeb-4c18-848c-800ac70fdfb7</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/228c4c19-feeb-4c18-848c-800ac70fdfb7" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#image">Documentation</a><br/>| |Pod or Container Without Security Context<br/><sup><sub>ad69e38a-d92e-4357-a8da-f2f29d545883</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/ad69e38a-d92e-4357-a8da-f2f29d545883" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#securitycontext">Documentation</a><br/>| |Using Default Namespace<br/><sup><sub>abcb818b-5af7-4d72-aba9-6dd84956b451</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../terraform-queries/abcb818b-5af7-4d72-aba9-6dd84956b451" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#namespace">Documentation</a><br/>| |Network Policy Is Not Targeting Any Pod<br/><sup><sub>b80b14c6-aaa2-4876-b651-8a48b6c32fbf</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/b80b14c6-aaa2-4876-b651-8a48b6c32fbf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/networkpolicy#match_labels">Documentation</a><br/>| |Service Type is NodePort<br/><sup><sub>5c281bf8-d9bb-47f2-b909-3f6bb11874ad</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/5c281bf8-d9bb-47f2-b909-3f6bb11874ad" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/service#type">Documentation</a><br/>| |Workload Host Port Not Specified<br/><sup><sub>4e74cf4f-ff65-4c1a-885c-67ab608206ce</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/4e74cf4f-ff65-4c1a-885c-67ab608206ce" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#hostport">Documentation</a><br/>| |CPU Limits Not Set<br/><sup><sub>5f4735ce-b9ba-4d95-a089-a37a767b716f</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../terraform-queries/5f4735ce-b9ba-4d95-a089-a37a767b716f" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#limits">Documentation</a><br/>| |CPU Requests Not Set<br/><sup><sub>577ac19c-6a77-46d7-9f14-e049cdd15ec2</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../terraform-queries/577ac19c-6a77-46d7-9f14-e049cdd15ec2" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#requests">Documentation</a><br/>| |CronJob Deadline Not Configured<br/><sup><sub>58876b44-a690-4e9f-9214-7735fa0dd15d</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../terraform-queries/58876b44-a690-4e9f-9214-7735fa0dd15d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/cronjob#startingdeadlineseconds">Documentation</a><br/>| |Deployment Has No PodAntiAffinity<br/><sup><sub>461ed7e4-f8d5-4bc1-b3c6-64ddb4fd00a3</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../terraform-queries/461ed7e4-f8d5-4bc1-b3c6-64ddb4fd00a3" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/deployment#affinity">Documentation</a><br/>| |Secrets As Environment Variables<br/><sup><sub>6d8f1a10-b6cd-48f0-b960-f7c535d5cdb8</sub></sup>|<span style="color:#edd57e">Low</span>|Secret Management|<a href="../terraform-queries/6d8f1a10-b6cd-48f0-b960-f7c535d5cdb8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#secretkey_ref">Documentation</a><br/>| |Invalid Image<br/><sup><sub>e76cca7c-c3f9-4fc9-884c-b2831168ebd8</sub></sup>|<span style="color:#edd57e">Low</span>|Supply-Chain|<a href="../terraform-queries/e76cca7c-c3f9-4fc9-884c-b2831168ebd8" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#image">Documentation</a><br/>| |Liveness Probe Is Not Defined<br/><sup><sub>5b6d53dd-3ba3-4269-b4d7-f82e880e43c3</sub></sup>|<span style="color:#5bc0de">Info</span>|Availability|<a href="../terraform-queries/5b6d53dd-3ba3-4269-b4d7-f82e880e43c3" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/hashicorp/kubernetes/latest/docs/resources/pod#livenessprobe">Documentation</a><br/>| Below are listed queries related to Terraform NIFCLOUD: | Query |Severity|Category|More info| ||--|--|--| |Nifcloud DNS Has Verified Record<br/><sup><sub>a1defcb6-55e8-4511-8c2a-30b615b0e057</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/nifcloud/a1defcb6-55e8-4511-8c2a-30b615b0e057" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/dnsrecord#record">Documentation</a><br/>| |Nifcloud ELB Listener Use HTTP Protocol<br/><sup><sub>afcb0771-4f94-44ed-ad4a-9f73f11ce6e0</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/nifcloud/afcb0771-4f94-44ed-ad4a-9f73f11ce6e0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/elblistener#protocol">Documentation</a><br/>| |Nifcloud ELB Use HTTP Protocol<br/><sup><sub>e2de2b80-2fc2-4502-a764-40930dfcc70a</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/nifcloud/e2de2b80-2fc2-4502-a764-40930dfcc70a" target="_blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/elb#protocol">Documentation</a><br/>| |Nifcloud LB Listener Use HTTP Port<br/><sup><sub>9f751a80-31f0-43a3-926c-20772791a038</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/nifcloud/9f751a80-31f0-43a3-926c-20772791a038" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/loadbalancerlistener#loadbalancer_port">Documentation</a><br/>| |Nifcloud LB Use HTTP Port<br/><sup><sub>94e47f3f-b90b-43a1-a36d-521580bae863</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/nifcloud/94e47f3f-b90b-43a1-a36d-521580bae863" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/loadbalancer#loadbalancerport">Documentation</a><br/>| |Nifcloud LB Use Insecure TLS Policy ID<br/><sup><sub>944439c7-b4b8-476a-8f83-14641ea876ba</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/nifcloud/944439c7-b4b8-476a-8f83-14641ea876ba" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/loadbalancer#sslpolicyid">Documentation</a><br/>| |Nifcloud LB Use Insecure TLS Policy Name<br/><sup><sub>675e8eaa-2754-42b7-bf33-bfa295d1601d</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../terraform-queries/nifcloud/675e8eaa-2754-42b7-bf33-bfa295d1601d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/loadbalancer#sslpolicyname">Documentation</a><br/>| |Nifcloud Computing Has Public Ingress Security Group Rule<br/><sup><sub>b2ea2367-8dc9-4231-a035-d0b28bfa3dde</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/b2ea2367-8dc9-4231-a035-d0b28bfa3dde" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/securitygrouprule#cidrip">Documentation</a><br/>| |Nifcloud Computing Undefined Security Group To Instance<br/><sup><sub>89218b48-75c9-4cb3-aaba-5299e852e8bc</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/89218b48-75c9-4cb3-aaba-5299e852e8bc" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/instance#securitygroup">Documentation</a><br/>| |Nifcloud NAS Has Public Ingress NAS Security Group Rule<br/><sup><sub>8d7758a7-d9cd-499a-a83e-c9bdcbff728d</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/8d7758a7-d9cd-499a-a83e-c9bdcbff728d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/nassecuritygroup#cidrip">Documentation</a><br/>| |Nifcloud RDB Has Public DB Access<br/><sup><sub>fb387023-e4bb-42a8-9a70-6708aa7ff21b</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/fb387023-e4bb-42a8-9a70-6708aa7ff21b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/dbinstance#publicly_accessible">Documentation</a><br/>| |Nifcloud RDB Has Public DB Ingress Security Group Rule<br/><sup><sub>a0b846e8-815f-4f15-b660-bc4ab9fa1e1a</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/a0b846e8-815f-4f15-b660-bc4ab9fa1e1a" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/dbsecuritygroup#cidrip">Documentation</a><br/>| |Nifcloud Router Undefined Security Group To Router<br/><sup><sub>e7dada38-af20-4899-8955-dabea84ab1f0</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/e7dada38-af20-4899-8955-dabea84ab1f0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/router#securitygroup">Documentation</a><br/>| |Nifcloud Vpn Gateway Undefined Security Group To Vpn Gateway<br/><sup><sub>b3535a48-910c-47f8-8b3b-14222f29ef80</sub></sup>|<span style="color:#bb2124">High</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/b3535a48-910c-47f8-8b3b-14222f29ef80" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/vpngateway#security_group">Documentation</a><br/>| |Nifcloud RDB Has Backup Retention Less Than 2 Day<br/><sup><sub>e5071f76-cbe7-468d-bb2b-d10f02d2b713</sub></sup>|<span style="color:#ff7213">Medium</span>|Backup|<a href="../terraform-queries/nifcloud/e5071f76-cbe7-468d-bb2b-d10f02d2b713" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/dbinstance#backupretentionperiod">Documentation</a><br/>| |Nifcloud Computing Has Common Private Network<br/><sup><sub>df58dd45-8009-43c2-90f7-c90eb9d53ed9</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/df58dd45-8009-43c2-90f7-c90eb9d53ed9" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/instance#networkid">Documentation</a><br/>| |Nifcloud Computing Undefined Description To Security Group<br/><sup><sub>41c127a9-3a85-4bc3-a333-ed374eb9c3e4</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/41c127a9-3a85-4bc3-a333-ed374eb9c3e4" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/securitygroup#description">Documentation</a><br/>| |Nifcloud Computing Undefined Description To Security Group Rule<br/><sup><sub>e4610872-0b1c-4fb7-ab57-d81c0afdb291</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/e4610872-0b1c-4fb7-ab57-d81c0afdb291" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/securitygroup_rule#description">Documentation</a><br/>| |Nifcloud ELB Has Common Private Network<br/><sup><sub>5061f84c-ab66-4660-90b9-680c9df346c0</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/5061f84c-ab66-4660-90b9-680c9df346c0" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/elb#networkid">Documentation</a><br/>| |Nifcloud NAS Has Common Private Network<br/><sup><sub>4b801c38-ebb4-4c81-984b-1ba525d43adf</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/4b801c38-ebb4-4c81-984b-1ba525d43adf" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/nasinstance#network_id">Documentation</a><br/>| |Nifcloud NAS Undefined Description To NAS Security Group<br/><sup><sub>e840c54a-7a4c-405f-b8c1-c49a54b87d11</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/e840c54a-7a4c-405f-b8c1-c49a54b87d11" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/nassecurity_group#description">Documentation</a><br/>| |Nifcloud RDB Has Common Private Network<br/><sup><sub>9bf57c23-fbab-4222-85f3-3f207a53c6a8</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/9bf57c23-fbab-4222-85f3-3f207a53c6a8" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/dbinstance#network_id">Documentation</a><br/>| |Nifcloud RDB Undefined Description To DB Security Group<br/><sup><sub>940ddce2-26bd-4e31-a9b4-382714f73231</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/940ddce2-26bd-4e31-a9b4-382714f73231" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/dbsecurity_group#description">Documentation</a><br/>| |Nifcloud Router Has Common Private Network<br/><sup><sub>30c2760c-740e-4672-9d7f-2c29e0cb385d</sub></sup>|<span style="color:#edd57e">Low</span>|Networking and Firewall|<a href="../terraform-queries/nifcloud/30c2760c-740e-4672-9d7f-2c29e0cb385d" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/nifcloud/nifcloud/latest/docs/resources/router#networkid">Documentation</a><br/>| Below are listed queries related to Terraform SHARED (V2/V3): | Query |Severity|Category|More info| ||--|--|--| |Generic Git Module Without Revision<br/><sup><sub>3a81fc06-566f-492a-91dd-7448e409e2cd</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/3a81fc06-566f-492a-91dd-7448e409e2cd" target="_blank">Query details</a><br><a href="https://www.terraform.io/docs/language/modules/sources.html#selecting-a-revision">Documentation</a><br/>| |Name Is Not Snake Case<br/><sup><sub>1e434b25-8763-4b00-a5ca-ca03b7abbb66</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/1e434b25-8763-4b00-a5ca-ca03b7abbb66" target="_blank">Query details</a><br><a href="https://www.terraform.io/docs/extend/best-practices/naming.html#naming">Documentation</a><br/>| |Output Without Description<br/><sup><sub>59312e8a-a64e-41e7-a252-618533dd1ea8</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/59312e8a-a64e-41e7-a252-618533dd1ea8" target="_blank">Query details</a><br><a href="https://www.terraform.io/docs/language/values/outputs.html#description-output-value-documentation">Documentation</a><br/>| |Variable Without Description<br/><sup><sub>2a153952-2544-4687-bcc9-cc8fea814a9b</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/2a153952-2544-4687-bcc9-cc8fea814a9b" target="_blank">Query details</a><br><a href="https://www.terraform.io/docs/language/values/variables.html#input-variable-documentation">Documentation</a><br/>| |Variable Without Type<br/><sup><sub>fc5109bf-01fd-49fb-8bde-4492b543c34a</sub></sup>|<span style="color:#5bc0de">Info</span>|Best Practices|<a href="../terraform-queries/fc5109bf-01fd-49fb-8bde-4492b543c34a" target="_blank">Query details</a><br><a href="https://www.terraform.io/docs/language/values/variables.html#input-variable-documentation">Documentation</a><br/>| Below are listed queries related to Terraform TENCENTCLOUD: | Query |Severity|Category|More info| ||--|--|--| |Disk Encryption Disabled<br/><sup><sub>1ee0f202-31da-49ba-bbce-04a989912e4b</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../terraform-queries/tencentcloud/1ee0f202-31da-49ba-bbce-04a989912e4b" target="blank">Query details</a><br><a href="https://registry.terraform.io/providers/tencentcloudstack/tencentcloud/latest/docs/resources/cbsstorage#encrypt">Documentation</a><br/>|