Project: KICS (Provisioning / Security & Compliance)
File: serverlessfw-queries.md

This page contains all queries from ServerlessFW. | Query |Severity|Category|More info| ||--|--|--| |Serverless Role With Full Privileges<br/><sup><sub>59ebb4f3-2a6c-46dc-b4f0-cc5418dcddcd</sub></sup>|<span style="color:#bb2124">High</span>|Access Control|<a href="../serverlessfw-queries/59ebb4f3-2a6c-46dc-b4f0-cc5418dcddcd" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/guide/iam">Documentation</a><br/>| |Serverless Function Without Unique IAM Role<br/><sup><sub>165aae3b-a56a-48f3-b76d-d2b5083f5b8f</sub></sup>|<span style="color:#bb2124">High</span>|Insecure Configurations|<a href="../serverlessfw-queries/165aae3b-a56a-48f3-b76d-d2b5083f5b8f" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/guide/serverless.yml#functions">Documentation</a><br/>| |Serverless Function Environment Variables Not Encrypted<br/><sup><sub>4495bc5d-4d1e-4a26-ae92-152d18195648</sub></sup>|<span style="color:#ff7213">Medium</span>|Encryption|<a href="../serverlessfw-queries/4495bc5d-4d1e-4a26-ae92-152d18195648" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/guide/functions#kms-keys">Documentation</a><br/>| |Serverless API Endpoint Config Not Private<br/><sup><sub>4d424558-c6d1-453c-be98-9a7f877abd9a</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../serverlessfw-queries/4d424558-c6d1-453c-be98-9a7f877abd9a" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/events/apigateway#configuring-endpoint-types">Documentation</a><br/>| |Serverless API Access Logging Setting Undefined<br/><sup><sub>a4d32883-aac7-42e1-b403-9415af0f3846</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../serverlessfw-queries/a4d32883-aac7-42e1-b403-9415af0f3846" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/guide/serverless.yml#logs">Documentation</a><br/>| |Serverless API X-Ray Tracing Disabled<br/><sup><sub>434945e5-4dfd-41b1-aba1-47075ccd9265</sub></sup>|<span style="color:#ff7213">Medium</span>|Observability|<a href="../serverlessfw-queries/434945e5-4dfd-41b1-aba1-47075ccd9265" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/events/apigateway#aws-x-ray-tracing">Documentation</a><br/>| |Serverless API Without Content Encoding<br/><sup><sub>d5d1fe08-89db-440c-8725-b93223387309</sub></sup>|<span style="color:#edd57e">Low</span>|Encryption|<a href="../serverlessfw-queries/d5d1fe08-89db-440c-8725-b93223387309" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/events/apigateway#compression">Documentation</a><br/>| |Serverless Function Without Dead Letter Queue<br/><sup><sub>dec7bc85-d156-4f64-9a33-96ed3d9f3fed</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../serverlessfw-queries/dec7bc85-d156-4f64-9a33-96ed3d9f3fed" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/guide/functions#dead-letter-queue-dlq">Documentation</a><br/>| |Serverless Function Without Tags<br/><sup><sub>f99d3482-fa8c-4f79-bad9-35212dded164</sub></sup>|<span style="color:#edd57e">Low</span>|Insecure Configurations|<a href="../serverlessfw-queries/f99d3482-fa8c-4f79-bad9-35212dded164" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/guide/functions#tags">Documentation</a><br/>| |Serverless Function Without X-Ray Tracing<br/><sup><sub>0d7ef70f-e176-44e6-bdba-add3e429788d</sub></sup>|<span style="color:#edd57e">Low</span>|Observability|<a href="../serverlessfw-queries/0d7ef70f-e176-44e6-bdba-add3e429788d" target="_blank">Query details</a><br><a href="https://www.serverless.com/framework/docs/providers/aws/guide/functions#aws-x-ray-tracing">Documentation</a><br/>|