AWS FSBP Standard | Lacework Documentation

📄️ lacework-global-34

1.4 Ensure no 'root' user account access key exists (Automated)

1.6 Enable hardware Multi-Factor Authentication (MFA) for the 'root' user account (Manual)

Relational Database Service (RDS) should not have a Public Interface

Redshift Cluster should not be Publicly Accessible (Automated)

OpenSearch Domain should be in Virtual Private Cloud (VPC) (Automated)

Ensure No Public Elastic Block Store (EBS) Snapshots

Security groups should not allow unrestricted access to ports with high risk (Automated)

Do not unintentionally delete AWS Key Management Service (KMS) keys (Automated)

Neptune DB cluster snapshots should not be public (Automated)

Lambda function policies should prohibit public access (Automated)

Database Migration Service (DMS) replication instances should not be public (Automated)

Relational Database Service (RDS) snapshot should be private (Automated)

CloudFront distributions should have a default root object configured (Automated)

CodeBuild project environment variables should not contain clear text credentials (Automated)

CodeBuild Bitbucket source repository URLs should not contain sensitive credentials (Automated)

Systems Manager (SSM) documents should not be public (Automated)

S3 general purpose buckets should block public read access (Automated)

S3 general purpose buckets should block public write access (Automated)

ElasticSearch Domain should be in Virtual Private Cloud (VPC) (Automated)