tigergate - Robuta Search

https://www.tigergate.dev/products/kspm/aks/ Azure AKS Security - Kubernetes Security for Azure | TigerGate KSPM | TigerGate Secure Azure Kubernetes Service clusters with 83+ CIS Benchmark checks. AKS-specific security controls, Azure AD integration, Defender for Containers, and... azure aks security kubernetes tigergate https://www.tigergate.dev/solutions/cspm/azure/checks/azure-keyvault-11/ Ensure Key Vault access policies follow least privilege | Azure Security Check | TigerGate CSPM |... Access policies should grant minimum required permissions. Learn how to remediate this high severity security issue and ensure compliance with SOC 2, PCI-DSS,... access policies least privilege security check ensure key https://docs.tigergate.dev/cloud-security/checks/aws/kafka_cluster_in_transit_encryption_enabled/ Kafka cluster has encryption in transit enabled - TigerGate Amazon MSK clusters are evaluated for encryption in transit on both paths: clientbroker set to TLS only and inter-broker encryption enabled. in transit kafka cluster encryption enabled https://docs.tigergate.dev/cloud-security/checks/aws/iam_user_with_temporary_credentials/ IAM user uses temporary credentials outside IAM and STS - TigerGate IAM users are assessed for activity using long-lived access keys. iam user uses temporary credentials https://www.tigergate.dev/solutions/cspm/aws/checks/aws-lambda-13/ Ensure Lambda functions do not share execution roles | AWS Security Check | TigerGate CSPM |... Each Lambda function should have its own execution role with function-specific permissions. Learn how to remediate this medium severity security issue and... do not share lambda functions security check ensure execution https://docs.tigergate.dev/cloud-security/checks/aws/redshift_cluster_audit_logging/ Redshift cluster has audit logging enabled - TigerGate Amazon Redshift clusters are evaluated for database audit logging that exports connection, user, and user-activity events to Amazon S3 or CloudWatch. redshift cluster audit logging enabled Sponsored https://www.camsoda.ai/?id=robuta&ad_id=ai_300x250_20 Camsoda AI: AI Girlfriend App for Chatting, Photos, and Voice Camsoda AI is the AI girlfriend app for real-time chat, photos, and voice. Pick from 200+ characters or create your own. Free to start. https://docs.tigergate.dev/cloud-security/checks/aws/elbv2_desync_mitigation_mode/ Application Load Balancer mitigates desync attacks - TigerGate Application Load Balancer settings are reviewed for HTTP desync protections. load balancer application mitigates desync attacks https://docs.tigergate.dev/cloud-security/checks/aws/s3_bucket_level_public_access_block/ S3 bucket has Block Public Access enabled - TigerGate Amazon S3 buckets are evaluated for Block Public Access settings. public access bucket block enabled tigergate https://www.tigergate.dev/solutions/cspm/aws/checks/aws-cloudtrail-23/ Ensure metric filters exist for VPC changes | AWS Security Check | TigerGate CSPM | TigerGate CloudWatch metric filters should detect VPC changes including gateway and route table modifications. Learn how to remediate this medium severity security issue... security check ensure metric filters exist https://www.tigergate.dev/solutions/cspm/aws/checks/aws-cloudtrail-10/ Ensure data events are logged for Lambda functions | AWS Security Check | TigerGate CSPM | TigerGate CloudTrail data events should be enabled for Lambda functions to log function invocations. Learn how to remediate this medium severity security issue and... lambda functions security check ensure data events https://docs.tigergate.dev/cloud-security/checks/aws/inspector2_active_findings_exist/ Inspector2 is enabled with no active findings - TigerGate Amazon Inspector2 active findings are assessed across eligible resources when the service is ENABLED. enabled active findings tigergate https://docs.tigergate.dev/platform/api-keys/ API keys - TigerGate Create, scope, and revoke API keys for the runtime agent, CI pipelines, IDE extensions, AI assistants and compliance platforms. api keys tigergate https://docs.tigergate.dev/cloud-security/checks/aws/autoscaling_group_multiple_instance_types/ Auto Scaling group spans multiple AZs and instance types - TigerGate EC2 Auto Scaling groups are evaluated for using multiple instance types in each Availability Zone and spanning more than one AZ. auto scaling group spans multiple azs https://docs.tigergate.dev/cloud-security/checks/kubernetes/kubelet_conf_file_permissions/ kubelet.conf permissions are 600 or more restrictive - TigerGate Kubernetes Kubelet kubeconfig at /etc/kubernetes/kubelet.conf must have owner-only permissions (0600 or stricter). conf permissions restrictive tigergate https://www.tigergate.dev/solutions/cspm/aws/checks/aws-securityhub-10/ Ensure Security Hub is integrated with AWS Organizations | AWS Security Check | TigerGate CSPM |... Organizations integration enables centralized Security Hub management with automatic enrollment of new accounts and finding aggregation. Learn how to remediate... security hub aws organizations ensure integrated check https://www.tigergate.dev/solutions/cspm/aws/checks/aws-glue-5/ Ensure Glue jobs are configured with job bookmarks | AWS Security Check | TigerGate CSPM | TigerGate Job bookmarks track processed data to prevent reprocessing and ensure exactly-once semantics in incremental ETL jobs. Learn how to remediate this low severity... security check ensure glue jobs configured