- AWS Audit
- Security Groups Audit
Checks performed
- Unused Virtual Private Gateways Should Be Removed
- Flow Logs on VPC Should Be Enabled
- Flow Logs Should be Enabled on Subnet
- Unused Network ACLs Should Be Removed
- Unused Security Groups Should Be Removed
- Default Security Groups Should Not Allow Unrestricted Inbound Access
- Default Security Groups Should Block All Traffic
- Default Security Group Should Not Be Publicly Accessible
- Excessive Number of Security Groups Should Not Be Present
- EC2 instances Should Not Be Publicly Accessible
- Ports Should Not Be Open for External Traffic
- Ports Should Not Be Open for Internal Traffic
- EC2 Instance Should Not Have Open ICMP ports
- RDS Instances Should Not Be Publicly Accessible
- Redshift Should Not Be Publicly Accessible
- MQ Broker Should Not Be Publicly Accessible