Checks Performed
- AWS CloudFront Distribution Alias Records Without S3 Origin
- AWS CloudFront Distribution CNAME Records Without S3 Origin
- AWS Config Log File Delivery Should Be Configured
- AWS Config Should Be Enabled
- AWS Config Should Have S3 Bucket Configured
- AWS Config Should Include Global Resources
- AWS Elastic Beanstalk Alias Records Vulnerable To Takeover
- AWS Elastic Beanstalk CNAME Records Vulnerable To Takeover
- AWS Organizations Should Be Used
- AWS Registered Domains Without Hosted Zones
- AWS Route 53 Auto Renew Should Be Enabled
- AWS S3 Alias Records Vulnerable To Takeover
- AWS S3 CNAME Records Vulnerable To Takeover
- AWS Subdomains NS Delegations Vulnerable To Takeover
- Enable All AWS Organization Features
- Route 53 Domain Expiry In 45 Days
- Route 53 Domain Should Expire In 30 Days
- Route 53 Domain Should Expire In 7 Days
- Route 53 Domains Should Be Locked
- Route 53 Domains Should Have Privacy Protection Enabled
- Route 53 Hosted Zones Should Have Sender Policy Framework Record Present
- Route 53 Query Logging Should Be Enabled
- Route 53 Should Be In Use
- Route 53 Should Identify Any Expired Domains