DevOps

Verifies that no AWS Lambda functions are running with administrative IAM policies. Helps enforce least privilege and comply with CIS security benchmarks.

Audit and verify that communications between applications and clients in AWS SimSpace Weaver are encrypted using TLS or equivalent, as required by CIS AWS Compute Benchmark 16.1.

Audits Amazon Machine Images (AMIs) to ensure they follow your organization's naming conventions. Use when verifying or remediating non-compliant AMI naming in AWS environments.

Audit Amazon Machine Images (AMIs) for EBS encryption compliance following CIS AWS Foundations Benchmark 2.1.2. Provides steps to identify unencrypted AMIs and remediate by copying with encryption enabled.

Verifies that all EC2 instances in an AWS account are running only organization-approved AMIs, as per CIS AWS Compute Benchmark control 2.1.3.

Audit and remediate AWS AMIs to ensure they are no older than 90 days, helping maintain security patches and compliance with CIS benchmarks.

Audit and enforce that Amazon Machine Images (AMIs) are not publicly shared to prevent exposure of organizational data and configurations.

Audits your AWS environment for unattached Elastic Network Interfaces (ENIs) and removes them to follow security best practices and avoid service limits.

Detects Amazon EC2 instances that have been stopped for more than 90 days and helps remove them to reduce attack surface and management overhead.

Guides the manual process for ensuring Amazon RDS instances have auto minor version upgrades enabled and are regularly patched to reduce security vulnerabilities.

Detect undocumented and unsecured API endpoints through traffic analysis, log comparison, and configuration scanning. Helps SOC analysts and security engineers identify shadow APIs that bypass security controls.

Implement API rate limiting using token bucket and sliding window algorithms to prevent abuse. Suitable for deploying security controls in API gateways to defend against DDoS, brute force, and credential stuffing attacks.