Kics #140
HariSekhonAnnotations
1 error and 12 warnings
|
Kics / Kics Scan
KICS scan failed with exit code 50
|
|
Kics / Kics Scan
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
[HIGH] Cloud Storage Bucket Logging Not Enabled:
bucket.tf#L67
Cloud storage bucket should have logging enabled
|
|
[HIGH] Cloud Storage Bucket Versioning Disabled:
bucket.tf#L67
Cloud Storage Bucket should have versioning enabled
|
|
[HIGH] S3 Bucket Without Enabled MFA Delete:
bucket.tf#L37
S3 bucket without MFA Delete Enabled. MFA delete cannot be enabled through Terraform, it can be done by adding a MFA device (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable.html) and enabling versioning and MFA delete by using AWS CLI: 'aws s3api put-bucket-versioning --versioning-configuration=Status=Enabled,MFADelete=Enabled --bucket=<BUCKET_NAME> --mfa=<MFA_SERIAL_NUMBER>'. Please, also notice that MFA delete can not be used with lifecycle configurations
|
|
[MEDIUM] Project-wide SSH Keys Are Enabled In VM Instances:
instance/main.tf#L22
VM Instance should block project-wide SSH keys
|
|
[MEDIUM] S3 Bucket Logging Disabled:
bucket.tf#L28
Server Access Logging should be enabled on S3 Buckets so that all changes are logged and trackable
|
|
[MEDIUM] SNS Topic Not Encrypted:
sns.tf#L20
SNS (Simple Notification Service) Topic should be encrypted
|
|
[MEDIUM] SNS Topic Not Encrypted:
aws_budgets/sns.tf#L1
SNS (Simple Notification Service) Topic should be encrypted
|
|
[MEDIUM] SSO Permission With Inadequate User Session Duration:
aws_sso.tf#L119
SSO permissions should be configured to limit user sessions to no longer than 1 hour. Allowing longer sessions can increase the risk of unauthorized access or session hijacking. This is a best practice for security and should be implemented in SSO permission settings.
|
|
[MEDIUM] SSO Permission With Inadequate User Session Duration:
aws_sso.tf#L82
SSO permissions should be configured to limit user sessions to no longer than 1 hour. Allowing longer sessions can increase the risk of unauthorized access or session hijacking. This is a best practice for security and should be implemented in SSO permission settings.
|
|
[MEDIUM] SSO Permission With Inadequate User Session Duration:
aws_sso.tf#L74
SSO permissions should be configured to limit user sessions to no longer than 1 hour. Allowing longer sessions can increase the risk of unauthorized access or session hijacking. This is a best practice for security and should be implemented in SSO permission settings.
|
|
Kics / Kics Scan
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|