Is your Cloud Secure enough? Think Again!

Take total control over your Cloud Security

with

 Severity Alert
 Security Checks
 Relevant Recommendations
security audit

Is your entire infrastructure secure enough to withstand threats and malicious attacks? Even a part of your environment exposed to suspicious activities can get your entire security posture compromised.

Unveiling risks and taking control over your cloud security needs a complete security audit to take your cloud’s health a level up. You cannot skip directly to best practices to implement a solid security. The initial efforts for secure cloud start right from developing a strategy for due diligence in order to understand the risk by adopting the cloud technology.

Centilytics gives you over 1000 security checks, best practices, and recommendations for redefining the security state of your cloud.

Cloud Threats & Remediations

Security Threats

Affected AWS Services

Remediation Checks
Shared Technology Threats Services affected : 5 Remediations : 13
Any compromise with the security of resources shared with cloud provider Cloud securityEC2 Exposed Ports, Security Groups Access
cloud security and auditRDS Instance not in Public Subnet, Aurora Database Instance Accessibility
Cloud security ToolsELB Exposed Ports, Protocol Protection SSL, Secure SSL
aws cloud securityS3 Publicly Accessible Buckets, ACL External Privilege, Server - Side Encryption, Encryption using SSL
Cloud security providersVPC Unrestricted Ingress Traffic, Default Security Group Rules Status
Insecure Interfaces and APIs Services affected : 2 Remediations : 2
Weak set of interfaces and APIs exposed to malicious attacks Cloud Security toolsRoute53 Transfer lock feature domains
Cloud Security SolutionsRDS Open Public Scope
System Vulnerabilities Services affected : 5 Remediations : 6
Security gaps in cloud infrastructure for bugs to initiate security breach Cloud Security managementEC2 Inspector Finding Status, Instances must be configured in VPC
cloud security best practicesELB Exposed Ports
azure cloud securityALB Exposed Ports
Cloud security modelNLB Exposed Ports
Cloud management and securityCloudFront Encrypted Connection
Denial of Service Services affected : 5 Remediations : 6
Act of preventing legitimate users to access the cloud resources Cloud securityEC2 Security Groups Access, Exposed Ports
Cloud server SecurityELB Exposed Ports, Secure SSL, Protocol Secured SSL TLS
cloud security best practicesVPC Unrestricted Ingress Traffic, Restricted Outbound Traffic, Security Group Under VPC
Cloud security ToolsNLB Exposed Ports
cloud securityCloudFront Encrypted Connection
For detailed information

Security Threats

Affected AWS Services

Remediation Checks
Data Breaches Services affected : 4 Remediations : 8
An unauthorized access to sensitive, protected or confidential data Cloud server SecurityRDS Unrestricted Database Security Group, Transparent Data Encryption, Aurora Database Instance Accessibility
Cloud management and securityS3 Readable Permissions, Writable Permissions, Bucket Permissions
cloud securityDynamoDB Server-side Encryption
Cloud securityEBS Volume Encryption
Data Loss Services affected : 4 Remediations : 4
Permanent loss of data due to lack of backup Cloud security modelRDS RDS Backup Retention Period
disaster recoveryDB DB Cluster Snapshot Age
Cloud SecurityS3 Buckets MFA Deletable
azure cloud securityEBS EBS Snapshot Age
Brute Force Attack Services affected : 3 Remediations : 8
Unauthorized access through repetitive hit-and-trial of password combinations azure cloud securityS3 Readable Permissions, Writable Permissions, Bucket Permissions
Cloud security modelRDS Customer Master Keys for Encrypted KMS, Unrestricted Database Security Group, Transparent Data Encryption
Cloud management and securityEBS Public Snapshots, Volume Encryption
For detailed information

Security Threats

Affected AWS Services

Remediation Checks
Brute Force Attack Services affected : 3 Remediations : 7
Unauthorized access through repetitive hit-and-trial of password combinations IAMIAM MFA Status, Password Policy Status, User Level MFA Status
data securityKMS KMS Key Rotation
IAM securityVPC Unrestricted Ingress Traffic, Restricted Outbound Traffic, Security Group Under VPC
Malicious Insider Services affected : 2 Remediations : 6
Intentional misuse of access to cloud infrastructure cloud infrastructure securityS3 Readable Permissions, Writable Permissions, Bucket Permissions
Cloud server SecurityVPC Unrestricted Ingress Traffic, Restricted Outbound Traffic, Security Group Under VPC
Denial of Service Services affected : 3 Remediations : 8
Act of preventing legitimate users to access the cloud resources IAM, cloud securityIAM Full Admin Privilege in IAM Policy, User Level MFA Status, Password Policy Status
cloud health and security checksVPC Unrestricted Ingress Traffic, Restricted Outbound Traffic, Security Group Under VPC
end point securityLambda Admin Role, Unauthorized Cross-account access
For detailed information

Security Threats

Affected AWS Services

Remediation Checks
Advanced Persistent Threats Services affected : 7 Remediations : 15
Attacks that slowly penetrate the cloud environment Database SecurityS3 All Actions Allowed, Bucket Permissions
Cloud Security softwareEC2 Public AMI, Inspector Finding Status
cloud security toolRDS Customer Master Keys for Encrypted KMS, Unrestricted Database Security Group, Transparent Data Encryption
cloud security and auditRedshift Master Keys for Cluster Encryption, Parameter Group Require SSL
Cloud Security softwareDynamoDB Server - Side Encryption
cloud security auditVPC Unrestricted Ingress Traffic, Restricted Outbound Traffic, Security Group Under VPC
azure cloud securityCloudFront Encrypted Connection, Secure Ciphers
System Vulnerabilities Services affected : 5 Remediations : 7
Security gaps in cloud infrastructure for bugs to initiate security breaches Cloud Security, EC2EC2 Inspector Finding Status
Cloud Security, secure SSLELB Exposed Ports, Secure SSL, Protocol Secured SSL TLS
Cloud SecurityALB Exposed Ports
Cloud security ToolsNLB Exposed Ports
aws cloud securityRDS Publicly Accessible Database
Data Loss Services affected : 4 Remediations : 4
Permanent loss of data due to lack of backup aws cloud securityRDS RDS Backup Retention Period
aws cloud securityDB DB Cluster Snapshot Age
aws cloud securityS3 Buckets MFA Deletable
aws cloud securityEBS EBS Snapshot Age
Denial of Service Services affected : 2 Remediations : 5
Act of preventing legitimate users to access the cloud resources aws cloud securityLambda Admin Role, Unauthorized Cross-account access
aws cloud securityIAM Full Admin Privilege in IAM Policy, User Level MFA Status, Password Policy Status
For detailed information

Resources

cloud threats

Cloud Threats you should look out for

Explore blog  
cloud security audit

Is your infrastructure secure enough?

Explore video  
aws-best-practices

AWS Security Audit and Best Practices

Explore E-book  
azure cloud security, nasscom_logo
azure cloud security tool, LRN_logo
aws cloud security software, wittyfeed_logo
cloud security and health checks
aws cloud security, theWire_logo
azure cloud security, cigniti_logo

See Centilytics in Action

Sign up for a 3-month Free Trial

Cloud*
AWS Azure EA Azure CSP

By submitting your information in this form you are agreeing to the terms listed in our Privacy Policy. Centilytics will only use this information to contact you about the products and services you’ve requested.

 Fill all the fields correctly.
Centilytics
Centilytics
hello@centilytics.com
Nspire Automation INC, 8 The Green, Suite #5979, Dover, DE 19901
19901
+1(302)-924-5045

This hCard created with the hCard creator.