{"repo":"aquasecurity/cloud-security-remediation-guides","free":true,"listed":false,"github":"https://github.com/aquasecurity/cloud-security-remediation-guides","clone":"git clone https://github.com/aquasecurity/cloud-security-remediation-guides.git","description":"Security Remediation Guides","language":null,"stars":746,"topics":["cloud","cloud-security","aws","azure"],"license":null,"category":"security-tools","readme_excerpt":"CloudSploit Security Remediation Guides CloudSploit's remediation guides are intended to be an open-source resource for improving cloud security. Many cloud IaaS providers like AWS, Azure, and Google Cloud have a shared responsibility model. They provide the physical and architectural security, along with tools to properly secure the services they offer, but it is up to the user to configure those settings properly. Background This repository is an extension of CloudSploit's open-source scanning engine. We first released the scanning engine in 2015, and this documentation repository is a natural follow up to that tool. The goal of these guides are to provide detailed steps on remediation common security issues in cloud services. Table of Contents AWS ACM ACM Certificate Validation AutoScaling ASG Multiple AZ CloudFront CloudFront HTTPS Only CloudFront Logging Enabled Insecure CloudFront Protocols Public S3 CloudFront Origin Secure CloudFront Origin CloudTrail CloudTrail Bucket Access Logging CloudTrail Bucket Delete Policy CloudTrail Bucket Private CloudTrail Enabled CloudTrail Encryption CloudTrail File Validation CloudTrail To CloudWatch CloudWatchLogs CloudWatch Monitoring Metrics ConfigService Config Service Enabled EC2 Cross VPC Public Private Communication Default Security Group Default VPC In Use Detect EC2 Classic Instances EBS Encrypted Snapshots EBS Encryption Enabled EC2 Instance Key Based Login EC2 Max Instances Elastic IP Limit Encrypted AMI Excessive Security Gr","default_branch":null,"files":null,"tree":[],"storefront":"/r/aquasecurity","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/aquasecurity/cloud-security-remediation-guides/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}