# Cloudanix ## Docs - [API Gateway Audit](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring.md) - [ACM Certificate Should Not Be In Expired State](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificate_expired.md) - [Acm certificate expired remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificate_expired_remediation.md) - [ACM Certificates Should Have Minimum RSA Length](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_min_rsa_length.md) - [Acm certificates min rsa length remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_min_rsa_length_remediation.md) - [AWS ACM Certificates Renewal Under 30 Days](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_renewal_30_days.md) - [Acm certificates renewal 30 days remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_renewal_30_days_remediation.md) - [AWS ACM Certificates Renewal Under 45 Days](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_renewal_45_days.md) - [Acm certificates renewal 45 days remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_renewal_45_days_remediation.md) - [AWS ACM Certificates Renewal Under 7 Days](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_renewal_7_days.md) - [Acm certificates renewal 7 days remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_renewal_7_days_remediation.md) - [AWS ACM Certificates Not Valid](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_validity.md) - [Acm certificates validity remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_validity_remediation.md) - [AWS ACM Certificates With Wildcard Domain Names](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_wildcard_domain_names.md) - [Acm certificates wildcard domain names remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/acm_certificates_wildcard_domain_names_remediation.md) - [API Gateway X-Ray Should Be Enabled](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/api_gateway_xray_enabled.md) - [Api gateway xray enabled remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/api_gateway_xray_enabled_remediation.md) - [API Gateway V2 Should Have Authorization Type Configuration](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/api_gwv2_authorization_type_configured.md) - [Api gwv2 authorization type configured remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/api_gwv2_authorization_type_configured_remediation.md) - [AWS ACM Certificates Not Valid](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_acm_certificate_valid.md) - [Apigateway acm certificate valid remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_acm_certificate_valid_remediation.md) - [API Gateway APIs Should Use SSL Certificates](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_client_certificate.md) - [Apigateway client certificate remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_client_certificate_remediation.md) - [Cloudwatch Logs Must Be Enabled For All APIs](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_cloudwatch_logs.md) - [Apigateway cloudwatch logs remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_cloudwatch_logs_remediation.md) - [Content Encoding Should Be Enabled For APIs](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_content_encoding.md) - [Apigateway content encoding remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_content_encoding_remediation.md) - [Default Execution Endpoint Should Not Be Enabled](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_default_execution_endpoint_enabled.md) - [Apigateway default execution endpoint enabled remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_default_execution_endpoint_enabled_remediation.md) - [Cloudwatch Metrics Must Be Enabled For All APIs](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_detailed_cloudwatch_metrics.md) - [Apigateway detailed cloudwatch metrics remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_detailed_cloudwatch_metrics_remediation.md) - [API Cache Should Be Enabled](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_enable_api_cache.md) - [Apigateway enable api cache remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_enable_api_cache_remediation.md) - [Enable Encryption For API Cache](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_enable_encryption_api_cache.md) - [Apigateway enable encryption api cache remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_enable_encryption_api_cache_remediation.md) - [API Gateway Should Be Integrated With WAF](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_integrated_waf.md) - [Apigateway integrated waf remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_integrated_waf_remediation.md) - [Only Private Endpoints Should Access APIs](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_private_endpoint.md) - [Apigateway private endpoint remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_private_endpoint_remediation.md) - [Expiring SSL Client Certificates Should Be Rotated](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_rotate_ssl_certificates.md) - [Apigateway rotate ssl certificates remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_rotate_ssl_certificates_remediation.md) - [API Gateway Execution Logging Should Be Enabled](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_stages_logging_enabled.md) - [Apigateway stages logging enabled remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_stages_logging_enabled_remediation.md) - [Active Tracing Should Be Enabled For API Gateway Stages](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_tracing_enabled.md) - [Apigateway tracing enabled remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/apigateway_tracing_enabled_remediation.md) - [AWS KMS Customer Master Keys For EFS Encryption](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_encryption_customer_managed_keys.md) - [Efs encryption customer managed keys remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_encryption_customer_managed_keys_remediation.md) - [EFS Encryption Should Be Enabled](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_encryption_enabled.md) - [Efs encryption enabled remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_encryption_enabled_remediation.md) - [AWS KMS Customer Master Keys Should Be Used For EFS Encryption](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_kms_customer_master_keys.md) - [Efs kms customer master keys remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_kms_customer_master_keys_remediation.md) - [AWS KMS Customer Master Keys Should Be Used For EFS Encryption](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_kms_customer_master_rule_keys.md) - [Efs kms customer master rule keys remediation](https://cloudanix.com/docs/aws/audit/apigatewaymonitoring/rules/efs_kms_customer_master_rule_keys_remediation.md) - [AppSync Monitoring](https://cloudanix.com/docs/aws/audit/appsyncmonitoring.md) - [AppSync Should Be Associated With WAF](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_associated_with_waf.md) - [Appsync associated with waf remediation](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_associated_with_waf_remediation.md) - [AppSync APIs Should Have Authorization Configuration](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_authorization.md) - [Appsync authorization remediation](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_authorization_remediation.md) - [Encryption At Rest Should Be Enabled For App Sync Cache](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_cache_encryption_at_rest.md) - [Appsync cache encryption at rest remediation](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_cache_encryption_at_rest_remediation.md) - [AppSync API Should Have Logging Enabled.](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_logging_enabled.md) - [Appsync logging enabled remediation](https://cloudanix.com/docs/aws/audit/appsyncmonitoring/rules/appsync_logging_enabled_remediation.md) - [Getting Started with AWS Audit](https://cloudanix.com/docs/aws/audit/aws-audit.md) - [Permissions required for Misconfigurations Detection](https://cloudanix.com/docs/aws/audit/aws-audit-permissions.md) - [Bedrock Monitoring](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring.md) - [Bedrock Agents Should Use Bedrock Guardrails To Protect Agent Sessions](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_agents_use_guardrails.md) - [Bedrock agents use guardrails remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_agents_use_guardrails_remediation.md) - [Bedrock Custom Models Should Use Customer Managed Keys For Encryption](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_custom_models_use_cmks.md) - [Bedrock custom models use cmks remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_custom_models_use_cmks_remediation.md) - [Bedrock Guardrails Should Use Customer Managed Keys For Encryption](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_guardrails_use_cmks.md) - [Bedrock guardrails use cmks remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_guardrails_use_cmks_remediation.md) - [Bedrock Model Customization Jobs Should Use VPC](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_model_customization_jobs_use_vpc.md) - [Bedrock model customization jobs use vpc remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_model_customization_jobs_use_vpc_remediation.md) - [Bedrock Service Should Enable Model Invocation Logging](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_model_invocation_logging.md) - [Bedrock model invocation logging remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_model_invocation_logging_remediation.md) - [Bedrock Agent Service Roles Should Prevent Cross Service Confused Deputy](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_service_roles_prevent_crossservice_confused_deputy.md) - [Bedrock service roles prevent crossservice confused deputy remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/bedrock_service_roles_prevent_crossservice_confused_deputy_remediation.md) - [Bedrock Guardrail Prompt Attack Strength Should Not Be Low](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/guardrail_prompt_attack_strength.md) - [Guardrail prompt attack strength remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/guardrail_prompt_attack_strength_remediation.md) - [Bedrock Guardrail Should Have Sensitive Information Filters](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/guardrail_sensitive_information_filters.md) - [Guardrail sensitive information filters remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/guardrail_sensitive_information_filters_remediation.md) - [Bedrock Model Customization Job Has Active Security Group](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/model_customization_job_security_group.md) - [Model customization job security group remediation](https://cloudanix.com/docs/aws/audit/awsbedrockmonitoring/rules/model_customization_job_security_group_remediation.md) - [IAM Deep Dive](https://cloudanix.com/docs/aws/audit/awsiamdeepdive.md) - [IAM Users With No Recent Activity](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/inactive_users.md) - [Inactive users remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/inactive_users_remediation.md) - [User Permissions That Can Modify Infrastructure](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/infrastructure_modification.md) - [Infrastructure modification remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/infrastructure_modification_remediation.md) - [Policies Granting Access To All Resources](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/permissions_with_all_resources.md) - [Permissions with all resources remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/permissions_with_all_resources_remediation.md) - [Permissions That Allow Data Exfiltration](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/permissions_with_data_exfiltration.md) - [Permissions with data exfiltration remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/permissions_with_data_exfiltration_remediation.md) - [Policies That Grant Access By Exclusion (NotAction)](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/policies_with_notactions.md) - [Policies with notactions remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/policies_with_notactions_remediation.md) - [Principals With Inline Policies](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/principals_with_inline_policies.md) - [Principals with inline policies remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/principals_with_inline_policies_remediation.md) - [User Permissions That Allow Privilege Escalation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/privilege_escalation.md) - [Privilege escalation remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/privilege_escalation_remediation.md) - [Role Permissions That Can Modify Infrastructure](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/role_infrastructure_modification.md) - [Role infrastructure modification remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/role_infrastructure_modification_remediation.md) - [Role Permissions That Allow Privilege Escalation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/role_privilege_escalation.md) - [Role privilege escalation remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/role_privilege_escalation_remediation.md) - [Roles Assumable By Compute Services](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/roles_assumable_by_compute_services.md) - [Roles assumable by compute services remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/roles_assumable_by_compute_services_remediation.md) - [Roles With Broad Access To Data Services](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/suspicious_access_to_data.md) - [Suspicious access to data remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/suspicious_access_to_data_remediation.md) - [Principals With Administrator Access](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/users_with_admin_access.md) - [Users with admin access remediation](https://cloudanix.com/docs/aws/audit/awsiamdeepdive/rules/users_with_admin_access_remediation.md) - [Kubernetes Misconfig for AWS](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig.md) - [Create Administrative Boundaries Between Resources Using Namespaces](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_administrative_boundaries_via_namespaces.md) - [An Admission Policy Engine Should Enforce Workload Policy](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_admission_policy_engine_enforced.md) - [Ensure That All Namespaces Have Network Policies Defined](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_all_namespaces_have_network_policies.md) - [Apply Security Context To Your Pods And Containers](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_apply_security_context_your_pods_and_containers.md) - [Audit Logging Should Be Enabled And Shipped Off-Cluster](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_audit_logging_shipped_offcluster.md) - [Use Cluster Access Manager API To Manage Access Controls](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_access_manager_api.md) - [Ensure The Cluster-Admin Role Is Only Used Where Required](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_admin_role_restricted.md) - [Ensure Clusters Are Created With Private Nodes](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_created_with_private_nodes.md) - [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_cluster_private_endpoint_public_access_disabled.md) - [Ensure CNI Plugin Supports Network Policies](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_cni_plugin_supports_network_policies.md) - [Consider External Secret Storage](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_consider_external_secret_storage.md) - [Consider Fargate Running Untrusted Workloads](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_consider_fargate_running_untrusted_workloads.md) - [Containers Should Run As Non-Root](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_container_run_as_nonroot.md) - [Create Administrative Boundaries Between Resources Using Namespaces](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_create_administrative_boundaries_between_resources_using_namespaces.md) - [Every Non-System Namespace Should Have A Default-Deny NetworkPolicy](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_default_deny_networkpolicy.md) - [The Default Namespace Should Not Be Used](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_default_namespace_not_used.md) - [The Default Namespace Should Not Be Used](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_default_namespace_should_not_be_used.md) - [Ensure That Default Service Accounts Are Not Actively Used](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_default_service_accounts_not_used.md) - [Containers Should Define Liveness And Readiness Probes](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_define_liveness_readiness_probes.md) - [Pods That Do Not Use The API Should Disable Token Automount](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_disable_token_automount.md) - [Containers Should Disallow Privilege Escalation](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_disallow_privilege_escalation.md) - [Containers Should Drop All Linux Capabilities](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_drop_all_capabilities.md) - [Ensure Image Vulnerability Scanning Using Amazon ECR Or Third Party Provider](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ecr_image_vulnerability_scanning_enabled.md) - [Enable Audit Logs](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_enable_audit_logs.md) - [Encrypt Traffic Https Load Balancers With Tls Certificates](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_encrypt_traffic_https_load_balancers_with_tls_certificates.md) - [Encrypt Traffic To HTTPS Load Balancers With TLS Certificates](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_encrypt_traffic_to_https_load_balancers_tls.md) - [Namespaces Should Enforce Pod Security Admission Baseline Or Stricter](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_enforce_pod_security_admission.md) - [Ensure That All Namespaces Have Network Policies Defined](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_all_namespaces_have_network_policies_defined.md) - [Ensure Audit Logs Are Collected And Managed](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_audit_logs_collected_and_managed.md) - [Ensure Authorization Mode Argument Is Not Set Always Allow](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_authorization_mode_argument_is_not_always_allow.md) - [Ensure Client Ca File Argument Is Set Appropriate](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_client_ca_file_argument_is_set_as_appropriate.md) - [Ensure Cluster Admin Role Is Only Used Where Required](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_cluster_admin_role_only_use_where_required.md) - [Ensure Clusters Are Created With Private Nodes](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_clusters_are_created_private_nodes.md) - [Ensure Clusters Are Created With Private Endpoint Enabled And Public Access Disabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_clusters_private_endpoint_enabled_and_public_access_disabled.md) - [Ensure Default Service Accounts Not Actively Used.](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_default_service_accounts_are_not_actively_used.md) - [Ensure Event Record Qps Argument Is Set To 0 Level Which Ensures Appropriate Event Capture](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_eventrecordqps_argument_set_0_level_which_ensures_appropriate_event_capture.md) - [Ensure Hostname Override Argument Is Not Set](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_hostname_override_argument_is_not_set.md) - [Ensure Image Vulnerability Scanning Using Amazon Ecr Image Scanning Or Third Party Provider](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_image_vulnerability_scanning_enabled_ecr_or_third_party.md) - [Ensure Kubeconfig File Permissions Are Set Restrictive](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubeconfig_file_permissions_are_restrictive.md) - [Ensure Kubelet Configuration File Should Have Permissions Set Restrictive](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubelet_configuration_file_has_permissions_restrictive.md) - [Ensure Kubelet Configuration File Ownership Is Set Root](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubelet_configuration_file_ownership_set_root.md) - [Ensure Kubelet Kubeconfig File Ownership Is Set Root](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubelet_kubeconfig_file_ownership_set_root.md) - [Ensure Kubernetes Secrets Are Encrypted Using Customer Master Keys Managed AWS KMS](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_kubernetes_secrets_encrypted_customer_master_aws_kms.md) - [Ensure Latest Cni Version Is Used](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_latest_cni_version_is_used.md) - [Ensure Make Iptables Util Chains Argument Is Enabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_make_iptables_util_chains_argument_is_enabled.md) - [Ensure Network Policy Is Enabled And Set Appropriate](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_network_policy_is_enabled_appropriate.md) - [Ensure Protect Kernel Defaults Argument Is Enabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_protect_kernel_defaults_argument_is_enabled.md) - [Ensure Read Only Port Is Secured](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_read_only_port_is_secured.md) - [Ensure Rotate Certificates Argument Is Not Set Disabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_rotate_certificates_argument_is_not_disabled.md) - [Ensure Rotate Kubelet Server Certificate Argument Is Enabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_rotate_kubelet_server_certificate_argument_is_enabled.md) - [Ensure Service Account Tokens Are Only Mounted Where Necessary](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_service_account_tokens_mounted_where_necessary.md) - [Ensure Streaming Connection Idle Timeout Argument Is Not Set 0](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_streaming_connection_idle_timeout_argument_not_set_to_0.md) - [Ensure Anonymous Auth Argument Is Disabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_ensure_that_the_anonymous_auth_argument_set_disabled.md) - [Ensure That Anonymous Auth Is Not Enabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_anonymous_auth_disabled.md) - [Ensure That The --authorization-mode Argument Is Not Set To AlwaysAllow](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_authorization_mode_not_alwaysallow.md) - [Ensure That A Client CA File Is Configured](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_client_ca_file_configured.md) - [Ensure Kubelet Configuration File Ownership Is Set To root:root](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_config_file_ownership_root.md) - [Ensure Kubelet Configuration File Permissions Are 644 Or More Restrictive](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_config_file_permissions_644.md) - [Ensure That The --eventRecordQPS Argument Is Set Appropriately](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_event_qps_appropriate.md) - [Ensure Kubelet Kubeconfig File Ownership Is Set To root:root](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_kubeconfig_file_ownership_root.md) - [Ensure Kubelet Kubeconfig File Permissions Are 644 Or More Restrictive](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_kubeconfig_file_permissions_644.md) - [Ensure That The --make-iptables-util-chains Argument Is Set To True](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_make_iptables_util_chains_true.md) - [Ensure That The --read-only-port Is Disabled](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_read_only_port_disabled.md) - [Ensure That The --rotate-certificates Argument Is Not Present Or Is Set To True](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_rotate_certificates_true.md) - [Ensure That The RotateKubeletServerCertificate Argument Is Set To True](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_rotate_server_certificate_true.md) - [Ensure That The --streaming-connection-idle-timeout Argument Is Not Set To 0](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubelet_streaming_connection_idle_timeout.md) - [Ensure Kubernetes Secrets Are Encrypted Using CMKs Managed In AWS KMS](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_kubernetes_secrets_encrypted_with_kms_cmk.md) - [Limit Use Of The Bind, Impersonate And Escalate Permissions](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_limit_bind_impersonate_escalate.md) - [Manage Kubernetes Rbac Users With Aws Iam Authenticator For Kubernetes](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_manage_kubernete_rbac_users_with_aws_iam_authenticator_kubernetes.md) - [Manage Kubernetes RBAC Users With AWS IAM Authenticator Or Upgrade AWS CLI](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_manage_rbac_users_with_aws_iam_authenticator.md) - [Minimize Access Create Pods](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_access_create_pods.md) - [Minimize Access To Secrets](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_access_secrets.md) - [Minimize Admission Containers Wishing Share Host Ipc Namespace](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_containers_wishing_share_host_ipc_namespace.md) - [Minimize Admission Containers Wishing Share The Host Network Namespace](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_containers_wishing_share_host_network_namespace.md) - [Minimize Admission Containers Wishing Share Host Process Id Namespace](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_containers_wishing_share_host_process_id_namespace.md) - [Minimize Admission Privileged Containers](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_admission_privileged_containers.md) - [Minimize The Admission Of Containers With allowPrivilegeEscalation](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_allow_privilege_escalation.md) - [Minimize Cluster Access Read Only For Amazon Ecr](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_cluster_access_read_only_amazon_ecr.md) - [Minimize Cluster Access To Read-Only For Amazon ECR](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_cluster_access_readonly_ecr.md) - [Minimize Container Registries Only Those Approved](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_container_registries_only_those_approved.md) - [Minimize Container Registries To Only Those Approved](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_container_registries_to_approved.md) - [Minimize Access To Create PersistentVolume Objects](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_create_persistentvolume_access.md) - [Minimize Access To Create Pods](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_create_pods_access.md) - [Minimize The Admission Of Containers Sharing The Host IPC Namespace](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_hostipc_containers.md) - [Minimize The Admission Of Containers Sharing The Host Network Namespace](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_hostnetwork_containers.md) - [Minimize The Admission Of Containers Sharing The Host Process ID Namespace](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_hostpid_containers.md) - [Minimize Access To The Proxy Sub-Resource Of Node Objects](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_node_proxy_subresource_access.md) - [Minimize The Admission Of Privileged Containers](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_privileged_containers.md) - [Minimize Access To Secrets](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_secrets_access.md) - [Minimize Access To The Service Account Token Creation](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_service_account_token_creation.md) - [Minimize The Admission Containers With Added Capabilities](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_added_capabilities.md) - [Minimize Admission Containers With Allow Privilege Escalation](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_allow_privilege_escalation.md) - [Minimize The Admission Containers With Capabilities Assigned](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_capabilities_assigned.md) - [Minimize The Admission Containers With The Net Raw Capability](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_containers_with_net_raw_capability.md) - [Minimize Admission Root Containers](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_the_admission_root_containers.md) - [Minimize User Access To Amazon Ecr](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_user_access_amazon_ecr.md) - [Minimize User Access To Amazon ECR](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_user_access_to_ecr.md) - [Minimize Access To Webhook Configuration Objects](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_webhook_configuration_access.md) - [Minimize Wildcard Use In Roles And ClusterRoles](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_wildcard_roles.md) - [Minimize Wildcard Use Roles And Cluster Roles](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_minimize_wildcard_roles_cluster_roles.md) - [Multi-Replica Deployments Should Have A PodDisruptionBudget](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_multireplica_poddisruptionbudget.md) - [Mutable Image Tags Should Use imagePullPolicy Always](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_mutable_tag_pullpolicy_always.md) - [Tenant Namespaces Should Have A ResourceQuota](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_namespace_resourcequota.md) - [Ensure Network Policy Is Enabled And Set As Appropriate](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_network_policy_enabled_and_configured.md) - [No RoleBinding Should Grant Access To Anonymous Or Unauthenticated Users](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_anonymous_rolebindings.md) - [Pods Should Not Share Host Namespaces](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_host_namespace_sharing.md) - [Pods Should Not Mount HostPath Volumes](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_hostpath_volumes.md) - [Container Images Should Not Use The latest Or Untagged Tag](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_latest_image_tag.md) - [Sensitive Values Should Not Be Passed As Literal Env Vars](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_literal_secret_env.md) - [Containers Should Not Run In Privileged Mode](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_privileged_container.md) - [No ServiceAccount Should Be Bound To cluster-admin](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_serviceaccount_cluster_admin.md) - [No Workloads Should Run In The default Namespace](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_no_workloads_default_namespace.md) - [Pods Should Be Managed By A Controller](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_pods_managed_by_controller.md) - [Prefer Using Container Optimized Os When Possible](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_container_optimize_os_when_possible.md) - [Prefer Using Dedicated Amazon EKS Service Accounts](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_dedicated_eks_service_accounts.md) - [Prefer Bound Projected ServiceAccount Tokens Over Secret Tokens](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_projected_sa_tokens.md) - [Prefer Using Secrets As Files Over Secrets As Environment Variables](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_secrets_as_files.md) - [Prefer Using Dedicated Amazon Eks Service Accounts](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_using_dedicated_amazon_eks_service_accounts.md) - [Prefer Using Managed Identities For Workloads](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_using_managed_identities_workloads.md) - [Prefer Using Secrets Files Over Secrets Environment Variables](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_prefer_using_secrets_files_over_secrets_environment_variables.md) - [Containers Should Use A Read-Only Root Filesystem](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_readonly_root_filesystem.md) - [Restrict Access To The Control Plane Endpoint](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_restrict_access_control_plane_endpoint.md) - [Restrict Access To Control Plane Endpoint](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_restrict_access_to_control_plane_endpoint.md) - [pods/exec Should Not Be Granted To Broad Subjects](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_restrict_pods_exec.md) - [Secrets Should Be Encrypted At Rest](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_secrets_encrypted_at_rest.md) - [Ensure That Service Account Tokens Are Only Mounted Where Necessary](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_service_account_tokens_mounted_when_necessary.md) - [Containers Should Set CPU And Memory Limits](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_set_resource_limits.md) - [Containers Should Set CPU And Memory Requests](https://cloudanix.com/docs/aws/audit/awskubernetesmisconfig/rules/aws_set_resource_requests.md) - [Sagemaker Monitoring](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring.md) - [Sagemaker Clusters Should Be Encrypted With KMS Customer Managed Keys](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_clusters_kms_encrypted.md) - [Sagemaker clusters kms encrypted remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_clusters_kms_encrypted_remediation.md) - [SageMaker Notebook Instance Should Not Have Direct Internet Access](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_direct_internet_access.md) - [Sagemaker direct internet access remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_direct_internet_access_remediation.md) - [Sagemaker Domains Should Have VPC Only Network Access Enabled](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_domains_vpc_only_enabled.md) - [Sagemaker domains vpc only enabled remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_domains_vpc_only_enabled_remediation.md) - [Sagemaker Endpoint Should Have Data Capture Enabled](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_endpoint_data_capture.md) - [Sagemaker endpoint data capture remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_endpoint_data_capture_remediation.md) - [Sagemaker Endpoints Should Be Encrypted With KMS Customer Managed Keys](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_endpoints_kms_encrypted.md) - [Sagemaker endpoints kms encrypted remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_endpoints_kms_encrypted_remediation.md) - [Sagemaker Models Should Have Network Isolation Enabled](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_models_network_isolation.md) - [Sagemaker models network isolation remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_models_network_isolation_remediation.md) - [SageMaker Notebook Instance Missing Active Execution Roles](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_active_execution_roles.md) - [Sagemaker notebook active execution roles remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_active_execution_roles_remediation.md) - [SageMaker Notebook Instance Should Be In VPC](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_instance_in_vpc.md) - [Sagemaker notebook instance in vpc remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_instance_in_vpc_remediation.md) - [Sagemaker Notebook Instance Should Be Encrypted With KMS Customer Managed Keys](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_instance_kms_encrypted.md) - [Sagemaker notebook instance kms encrypted remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_instance_kms_encrypted_remediation.md) - [Sagemaker Notebook Instance Should Be In VPC Only Mode](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_instance_vpc_only_enabled.md) - [Sagemaker notebook instance vpc only enabled remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_notebook_instance_vpc_only_enabled_remediation.md) - [Sagemaker Output And Storage Data Encrypted With KMS Customer Managed Keys](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_output_storage_data_kms_encrypted.md) - [Sagemaker output storage data kms encrypted remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_output_storage_data_kms_encrypted_remediation.md) - [SageMaker Notebook Instance Root Access Should Be Disabled](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_root_access.md) - [Sagemaker root access remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_root_access_remediation.md) - [Sagemaker Training Jobs Should Have Inter Container Traffic Encryption Enabled](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_training_jobs_intercontainer_traffic_encryption.md) - [Sagemaker training jobs intercontainer traffic encryption remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_training_jobs_intercontainer_traffic_encryption_remediation.md) - [Sagemaker Training Jobs Should Have Network Isolation Enabled](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_training_jobs_network_isolation.md) - [Sagemaker training jobs network isolation remediation](https://cloudanix.com/docs/aws/audit/awssagemakermonitoring/rules/sagemaker_training_jobs_network_isolation_remediation.md) - [Cloudformation Audit](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring.md) - [CloudFormation (or IaC) Should Be Used](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/cloudformation_in_use.md) - [Cloudformation in use remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/cloudformation_in_use_remediation.md) - [CloudFormation Deletion Policy Should Be in Use](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/deletion_policy_in_use.md) - [Deletion policy in use remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/deletion_policy_in_use_remediation.md) - [AWS CloudFormation Should Enable Drift Detection](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/drift_detection.md) - [Drift detection remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/drift_detection_remediation.md) - [AWS CloudFormation Stack Should Have Notifications Enabled](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/enable_stack_notifications.md) - [Enable stack notifications remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/enable_stack_notifications_remediation.md) - [AWS CloudFormation Stacks Should Have Termination Protection Enabled](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/enable_stack_termination_protection.md) - [Enable stack termination protection remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/enable_stack_termination_protection_remediation.md) - [CloudFormation Stacks Should Not Have A Failed Status](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/stack_failed_status.md) - [Stack failed status remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/stack_failed_status_remediation.md) - [CloudFormation Stack Policy Should Use A Fail-Safe Mechanism](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/stack_policy.md) - [Stack policy remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/stack_policy_remediation.md) - [CloudFormation Stack Should Have An IAM Role](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/stack_with_iam_role.md) - [Stack with iam role remediation](https://cloudanix.com/docs/aws/audit/cloudformationmonitoring/rules/stack_with_iam_role_remediation.md) - [CloudFront Audit](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring.md) - [CloudFront Web Distributions Should Automatically Compress Web Content](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_compress_objects_automatically.md) - [Cloudfront compress objects automatically remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_compress_objects_automatically_remediation.md) - [Custom SSL Certificate Should Be Set For Amazon CloudFront Distributions](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_custom_ssl_certificate.md) - [Cloudfront custom ssl certificate remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_custom_ssl_certificate_remediation.md) - [Cloudfront Distribution Vulnerable To Takeover](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_distribution_vulnerable.md) - [Cloudfront distribution vulnerable remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_distribution_vulnerable_remediation.md) - [HTTPS Should Be Enabled On CloudFront Distributions](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_distributions_https.md) - [Cloudfront distributions https remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_distributions_https_remediation.md) - [CloudFront Distributions Should Have Field-Level Encryption Enabled](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_fieldlevel_encryption.md) - [Cloudfront fieldlevel encryption remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_fieldlevel_encryption_remediation.md) - [CloudFront Distributions Should Have Geo Restriction Enabled](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_geo_restriction.md) - [Cloudfront geo restriction remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_geo_restriction_remediation.md) - [AWS Account Should Use CloudFront CDN Service](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_in_use.md) - [Cloudfront in use remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_in_use_remediation.md) - [CloudFront Distributions Should Not Use Insecure SSL Protocols](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_insecure_ssl.md) - [Cloudfront insecure ssl remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_insecure_ssl_remediation.md) - [CloudFront Should Be Integrated With AWS WAF](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_integrated_waf.md) - [Cloudfront integrated waf remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_integrated_waf_remediation.md) - [Logging Should Be Enabled For CloudFront Distributions](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_logging_enabled.md) - [Cloudfront logging enabled remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_logging_enabled_remediation.md) - [Origin Access Identity Should Be Enabled For CloudFront Distributions](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_origin_access_s3_origins.md) - [Cloudfront origin access s3 origins remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_origin_access_s3_origins_remediation.md) - [Origin Failover Should Be Enabled For CloudFront Distributions](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_origin_failover.md) - [Cloudfront origin failover remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_origin_failover_remediation.md) - [CloudFront Distributions Should Use Security Policies With Appropriate Version And Ciphers](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_security_policy.md) - [Cloudfront security policy remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_security_policy_remediation.md) - [CloudFront Distributions Should Use HTTPS For Secure Delivery of Web Content](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_traffic_to_origin_unencrypted.md) - [Cloudfront traffic to origin unencrypted remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_traffic_to_origin_unencrypted_remediation.md) - [Web Applications Should Use CDNs](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_use_cdn.md) - [Cloudfront use cdn remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_use_cdn_remediation.md) - [Communication With Viewers Should Be Encrypted Using HTTPS](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_viewer_protocol_policy.md) - [Cloudfront viewer protocol policy remediation](https://cloudanix.com/docs/aws/audit/cloudfrontmonitoring/rules/cloudfront_viewer_protocol_policy_remediation.md) - [CloudTrail Audit](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring.md) - [CloudTrail Must Log Data Events](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_data_events.md) - [Cloudtrail data events remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_data_events_remediation.md) - [Log files Should Be Delivered Without Any Failures](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_delivery_failing.md) - [Cloudtrail delivery failing remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_delivery_failing_remediation.md) - [CloudTrail Should Be Enabled For All Regions](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_enabled.md) - [Cloudtrail enabled remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_enabled_remediation.md) - [Trails Should Record Both Regional And Global Events](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_global_services_enabled.md) - [Cloudtrail global services enabled remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_global_services_enabled_remediation.md) - [Duplicate Entries Should Be Avoided In CloudTrail Logs](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_global_services_logging_duplicated.md) - [Cloudtrail global services logging duplicated remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_global_services_logging_duplicated_remediation.md) - [CloudTrail Events Should Be Monitored By CloudWatch Logs](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_integrated_cloudwatch.md) - [Cloudtrail integrated cloudwatch remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_integrated_cloudwatch_remediation.md) - [File Integrity Validation Feature Should Be Enabled For Trails](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_log_file_integrity.md) - [Cloudtrail log file integrity remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_log_file_integrity_remediation.md) - [CloudTrail Logs Should Be Encrypted](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_logs_encrypted.md) - [Cloudtrail logs encrypted remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_logs_encrypted_remediation.md) - [CloudTrails Should Log Management Events](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_management_events.md) - [Cloudtrail management events remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_management_events_remediation.md) - [CloudTrail Logging Bucket Should Use MFA Delete Feature](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_mfa_delete.md) - [Cloudtrail mfa delete remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_mfa_delete_remediation.md) - [Object Lock Feature Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_object_lock_s3_buckets.md) - [Cloudtrail object lock s3 buckets remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_object_lock_s3_buckets_remediation.md) - [CloudTrail Logging Bucket Should Not Be Publicly Accessible](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_publicly_accessible.md) - [Cloudtrail publicly accessible remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_publicly_accessible_remediation.md) - [CloudTrails Should Log Management Events](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_s3_bucket.md) - [Server Access Logging Feature Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_s3_bucket_logging.md) - [Cloudtrail s3 bucket logging remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_s3_bucket_logging_remediation.md) - [Cloudtrail s3 bucket remediation](https://cloudanix.com/docs/aws/audit/cloudtrailmonitoring/rules/cloudtrail_s3_bucket_remediation.md) - [Cloudwatch Audit](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring.md) - [Authorization Failures Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/authorization_failures_alarm.md) - [Authorization failures alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/authorization_failures_alarm_remediation.md) - [AWS Config Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/aws_config_changes_alarm.md) - [Aws config changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/aws_config_changes_alarm_remediation.md) - [CloudTrail Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cloudtrail_changes_alarm.md) - [Cloudtrail changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cloudtrail_changes_alarm_remediation.md) - [CloudWatch Log Groups Should Be Encrypted](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cloudwatch_log_groups_not_encrypted.md) - [Cloudwatch log groups not encrypted remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cloudwatch_log_groups_not_encrypted_remediation.md) - [CloudWatch Log Groups Should Be Encrypted With CMK](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cloudwatch_log_groups_with_cmk.md) - [Cloudwatch log groups with cmk remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cloudwatch_log_groups_with_cmk_remediation.md) - [CMK Disabled or Scheduled for Deletion Alarm](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cmk_disabled_or_scheduled_for_deletion_alarm.md) - [Cmk disabled or scheduled for deletion alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cmk_disabled_or_scheduled_for_deletion_alarm_remediation.md) - [Console Sign-in Failures Alarm](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/console_sign_in_failures_alarm.md) - [Console sign in failures alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/console_sign_in_failures_alarm_remediation.md) - [AWS Console Sign In Without MFA Should Be Monitored](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/console_sign_in_without_mfa.md) - [Console sign in without mfa remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/console_sign_in_without_mfa_remediation.md) - [Resource Policy Attachment In Custom EventBus](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/custom_eventbus_policy_attached.md) - [Custom eventbus policy attached remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/custom_eventbus_policy_attached_remediation.md) - [Resource Policy Attachment In Custom Schema Registry](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/custom_schema_registry_policy_attached.md) - [Custom schema registry policy attached remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/custom_schema_registry_policy_attached_remediation.md) - [Cloudwatch Loggroup Retention Period Should Be Reviewed](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cw_loggroup_retention_period_check.md) - [Cw loggroup retention period check remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/cw_loggroup_retention_period_check_remediation.md) - [EC2 Instance Changes Alarm](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/ec2_instance_changes_alarm.md) - [Ec2 instance changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/ec2_instance_changes_alarm_remediation.md) - [EC2 Large Instance Changes Alarm](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/ec2_large_instance_changes_alarm.md) - [Ec2 large instance changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/ec2_large_instance_changes_alarm_remediation.md) - [EventBus Should Not Allow Cross Account Access](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/event_bus_cross_account_access.md) - [Event bus cross account access remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/event_bus_cross_account_access_remediation.md) - [Event Bus Should Not Be Exposed](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/event_bus_exposed.md) - [Event bus exposed remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/event_bus_exposed_remediation.md) - [AWS CloudWatch Events Should Be Used](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/events_in_use.md) - [Events in use remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/events_in_use_remediation.md) - [FMS Shield Resource Policy Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/fms_shield_resource_policy.md) - [Fms shield resource policy remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/fms_shield_resource_policy_remediation.md) - [FMS Web ACL Should Have Rule Group Association](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/fms_webacl_rulegroup_association.md) - [Fms webacl rulegroup association remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/fms_webacl_rulegroup_association_remediation.md) - [EventBridge Global Endpoints Replication Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/global_endpoint_event_replication_enabled.md) - [Global endpoint event replication enabled remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/global_endpoint_event_replication_enabled_remediation.md) - [IAM Policy Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/iam_policy_changes_alarm.md) - [Iam policy changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/iam_policy_changes_alarm_remediation.md) - [Internet Gateway Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/internet_gateway_changes_alarm.md) - [Internet gateway changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/internet_gateway_changes_alarm_remediation.md) - [Metric Filter for VPC Flow Logs CloudWatch Log Group Should Be Set](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/metric_filter_for_vpc_flow_logs.md) - [Metric filter for vpc flow logs remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/metric_filter_for_vpc_flow_logs_remediation.md) - [Network ACL Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/network_acl_changes_alarm.md) - [Network acl changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/network_acl_changes_alarm_remediation.md) - [AWS Organizations Changes Alarm](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/organizations_changes_alarm.md) - [Organizations changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/organizations_changes_alarm_remediation.md) - [Root Account Usage Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/root_account_usage_alarm.md) - [Root account usage alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/root_account_usage_alarm_remediation.md) - [Route Table Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/route_table_changes_alarm.md) - [Route table changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/route_table_changes_alarm_remediation.md) - [S3 Bucket Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/s3_bucket_changes_alarm.md) - [S3 bucket changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/s3_bucket_changes_alarm_remediation.md) - [Security Group Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/security_group_changes_alarm.md) - [Security group changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/security_group_changes_alarm_remediation.md) - [VPC Changes Alarm Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/vpc_changes_alarm.md) - [Vpc changes alarm remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/vpc_changes_alarm_remediation.md) - [CloudWatch Alarm for VPC Flow Logs Metric Filter Should Be Set](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/vpc_flow_logs_metric_filter.md) - [Vpc flow logs metric filter remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/vpc_flow_logs_metric_filter_remediation.md) - [WAF WebACLs Must Have Basic Rule Protection](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_acl_basic_rules_protection.md) - [Waf acl basic rules protection remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_acl_basic_rules_protection_remediation.md) - [WAF Global Rule Groups Should Not Be Empty](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_global_rulegroup_not_empty.md) - [Waf global rulegroup not empty remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_global_rulegroup_not_empty_remediation.md) - [WAF Global Rules Should Not Be Empty](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_global_rules_not_empty.md) - [Waf global rules not empty remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_global_rules_not_empty_remediation.md) - [WAF Global Web ACL Should Not Be Empty](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_global_webacl_not_empty.md) - [Waf global webacl not empty remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_global_webacl_not_empty_remediation.md) - [WAF Logging Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_logging_enabled.md) - [Waf logging enabled remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_logging_enabled_remediation.md) - [WAF Regional Rule Groups Should Not Be Empty](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_regional_rulegroup_not_empty.md) - [Waf regional rulegroup not empty remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_regional_rulegroup_not_empty_remediation.md) - [WAF Regional Rules Should Not Be Empty](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_regional_rules_not_empty.md) - [Waf regional rules not empty remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_regional_rules_not_empty_remediation.md) - [WAF Regional Web ACL Should Not Be Empty](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_regional_webacl_not_empty.md) - [Waf regional webacl not empty remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/waf_regional_webacl_not_empty_remediation.md) - [WAFv2 WebACL Should Contain Rule Group Or Groups](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/wafv2_acl_rule_group.md) - [WAFv2 WebACL Rule Group Logging Should Be Enabled](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/wafv2_acl_rule_group_logging_enabled.md) - [Wafv2 acl rule group logging enabled remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/wafv2_acl_rule_group_logging_enabled_remediation.md) - [Wafv2 acl rule group remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/wafv2_acl_rule_group_remediation.md) - [WAF V2 Rule Groups Should Not Be Empty](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/wafv2_rulegroup_not_empty_rule.md) - [Wafv2 rulegroup not empty rule remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/wafv2_rulegroup_not_empty_rule_remediation.md) - [Default WebACL Action Without Rules Should Be Allowed](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/webacl_default_action_allow.md) - [Webacl default action allow remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/webacl_default_action_allow_remediation.md) - [WebACL Rules Should Not Be In Count Mode](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/webacl_rules_in_count_mode.md) - [Webacl rules in count mode remediation](https://cloudanix.com/docs/aws/audit/cloudwatchmonitoring/rules/webacl_rules_in_count_mode_remediation.md) - [CodeBuild Monitoring](https://cloudanix.com/docs/aws/audit/codebuildmonitoring.md) - [Artifact Encryption Should Be Enabled CodeBuild Project](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_artifact_encryption.md) - [Codebuild project artifact encryption remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_artifact_encryption_remediation.md) - [Privileged Mode Should Be Enabled CodeBuild Project Environment](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_environment_privileged.md) - [Codebuild project environment privileged remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_environment_privileged_remediation.md) - [Logging Should Be Enabled CodeBuild Project Environment](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_logging_enabled.md) - [Codebuild project logging enabled remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_logging_enabled_remediation.md) - [Plaintext AWS Credentials In Environment Variables CodeBuild Project Should Not Be Set](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_restrict_cred_in_environment.md) - [Codebuild project restrict cred in environment remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_restrict_cred_in_environment_remediation.md) - [S3 Logs Should Have Encryption Enabled CodeBuild Project](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_s3_logs_encrypted.md) - [Codebuild project s3 logs encrypted remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_s3_logs_encrypted_remediation.md) - [Sign-in Credentials Should Not Be In Bitbucket Source Repository URL CodeBuild](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_source_repo_url.md) - [Codebuild project source repo url remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codebuild_project_source_repo_url_remediation.md) - [CodeDeploy Auto Deploy And Monitoring Should Be Enabled](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codedeploy_auto_rollback_monitor_enabled.md) - [Codedeploy auto rollback monitor enabled remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codedeploy_auto_rollback_monitor_enabled_remediation.md) - [EC2 Minimum Healthy Hosts Fleet Percentage Should Be Maintained](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codedeploy_ec2_minimum_healthy_hosts_configured.md) - [Codedeploy ec2 minimum healthy hosts configured remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codedeploy_ec2_minimum_healthy_hosts_configured_remediation.md) - [Lambda Compute Platform Should Not Use Default Deployment Configuration](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codedeploy_lambda_allatonce_traffic_shift_disabled.md) - [Codedeploy lambda allatonce traffic shift disabled remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codedeploy_lambda_allatonce_traffic_shift_disabled_remediation.md) - [CodePipeline Deployment Limit Check Should Be Reviewed](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codepipeline_deployment_count.md) - [Codepipeline deployment count remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codepipeline_deployment_count_remediation.md) - [Code Deployment Pipeline Should Fan Out Across Regions](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codepipeline_region_fanout.md) - [Codepipeline region fanout remediation](https://cloudanix.com/docs/aws/audit/codebuildmonitoring/rules/codepipeline_region_fanout_remediation.md) - [DynamoDB Audit](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring.md) - [DynamoDB Accelerator (DAX) Cluster Should Be Encrypted](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted.md) - [Dax cluster encrypted remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/dax_cluster_encrypted_remediation.md) - [AWS DynamoDB Tables Should Use KMS CMKs for Encryption](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key.md) - [Ddb customer kms key remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_key_remediation.md) - [AWS DynamoDB Tables Should Use KMS CMKs for Encryption](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_keys.md) - [Ddb customer kms keys remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_customer_kms_keys_remediation.md) - [DynamoDB Tables Should Have Autoscaling Enabled](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_table_autoscaling_enabled.md) - [Ddb table autoscaling enabled remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_table_autoscaling_enabled_remediation.md) - [DynamoDB Tables Should Have Continuous Backup Enabled](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_table_backup_enabled.md) - [Ddb table backup enabled remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_table_backup_enabled_remediation.md) - [AWS Account Should Not Have Any Unused DynamoDB Tables](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_unused_tables.md) - [Ddb unused tables remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_unused_tables_remediation.md) - [VPC Endpoint Should Be Enabled For DynamoDB](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_vpc_endpoint_enabled.md) - [Ddb vpc endpoint enabled remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/ddb_vpc_endpoint_enabled_remediation.md) - [Firehose Delivery Stream Destination Should Have Encryption](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/firehose_delivery_stream_destination_encryption.md) - [Firehose delivery stream destination encryption remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/firehose_delivery_stream_destination_encryption_remediation.md) - [Enable Firehose Delivery Stream Should Use Server-Side Encryption](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/firehose_delivery_stream_server_side_encryption.md) - [Firehose delivery stream server side encryption remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/firehose_delivery_stream_server_side_encryption_remediation.md) - [Kinesis Server Side Encryption Should Be Enabled](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/kinesis_server_side_encryption.md) - [Kinesis server side encryption remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/kinesis_server_side_encryption_remediation.md) - [Kinesis Stream Should Be Encrypted With CMK](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/kinesis_stream_encrypted_with_cmk.md) - [Kinesis stream encrypted with cmk remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/kinesis_stream_encrypted_with_cmk_remediation.md) - [Kinesis Stream Shard Level Metrics](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/kinesis_stream_shard_level_metrics.md) - [Kinesis stream shard level metrics remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/kinesis_stream_shard_level_metrics_remediation.md) - [Sagemaker Endpoint Should Have KMS Key Configured](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_endpoint_configuration_kms_key_configured.md) - [Sagemaker endpoint configuration kms key configured remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_endpoint_configuration_kms_key_configured_remediation.md) - [Notebook Data Should Be Encrypted](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_data_encrypted.md) - [Notebook Data Should Be Encrypted With KMS Customer Master Keys](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_data_encrypted_customer_master_keys.md) - [Sagemaker notebook data encrypted customer master keys remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_data_encrypted_customer_master_keys_remediation.md) - [Sagemaker notebook data encrypted remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_data_encrypted_remediation.md) - [Notebook Direct Internet Access Should Be Avoided](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_direct_internet_access.md) - [Sagemaker notebook direct internet access remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_direct_internet_access_remediation.md) - [Sagemaker Notebook Instance Should Have KMS Key Configured](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_kms_key_configured.md) - [Sagemaker notebook instance kms key configured remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_kms_key_configured_remediation.md) - [Sagemaker Notebook Instance Should Not Have Root Access Enabled](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_root_access.md) - [Sagemaker notebook instance root access remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_root_access_remediation.md) - [Amazon SageMaker Notebook Instance Should Be In VPC](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_vpc.md) - [Sagemaker notebook instance vpc remediation](https://cloudanix.com/docs/aws/audit/dynamodbmonitoring/rules/sagemaker_notebook_instance_vpc_remediation.md) - [EC2 Audit](https://cloudanix.com/docs/aws/audit/ec2monitoring.md) - [AMI Age Should Not Exceed the Configured Age](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/age_of_ami.md) - [Age of ami remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/age_of_ami_remediation.md) - [EC2 AMIs Should Be Encrypted](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ami_is_encrypted.md) - [Ami is encrypted remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ami_is_encrypted_remediation.md) - [Autoscaling Groups Health Checks Should Be Checked](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/autoscaling_group_elb_healthcheck_required.md) - [Autoscaling group elb healthcheck required remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/autoscaling_group_elb_healthcheck_required_remediation.md) - [Autoscaling Hop Limit Should Be Checked](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/autoscaling_launch_config_hop_limit.md) - [Autoscaling launch config hop limit remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/autoscaling_launch_config_hop_limit_remediation.md) - [VPN Tunnel Should Be Up](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/aws_vpn_tunnels_up.md) - [Aws vpn tunnels up remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/aws_vpn_tunnels_up_remediation.md) - [Backup Plan Should Have Retention Period.](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/backup_plan_min_retention_check.md) - [Backup plan min retention check remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/backup_plan_min_retention_check_remediation.md) - [Backup Manual Deletion Should Be Disabled](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/backup_recovery_point_manual_deletion_disabled.md) - [Backup recovery point manual deletion disabled remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/backup_recovery_point_manual_deletion_disabled_remediation.md) - [Recovery Point Retention Should Be Reviewed](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/backup_recovery_point_minimum_retention_check.md) - [Backup recovery point minimum retention check remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/backup_recovery_point_minimum_retention_check_remediation.md) - [Access Logging Should Be Enabled For Elastic Beanstalk Load Balancer](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_access_logs_enabled.md) - [Beanstalk access logs enabled remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_access_logs_enabled_remediation.md) - [Ensure Enhanced Health Reporting Is Enabled For Elastic Beanstalk Environments](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_enhanced_health_monitoring.md) - [Beanstalk enhanced health monitoring remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_enhanced_health_monitoring_remediation.md) - [Enhanced Health Reporting Should Be Enabled For Elastic Beanstalk Environments](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_enhanced_health_reporting.md) - [Beanstalk enhanced health reporting remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_enhanced_health_reporting_remediation.md) - [HTTPS Should Be Enforced On Elastic Beanstalk Load Balancers](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_https_enabled.md) - [Beanstalk https enabled remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_https_enabled_remediation.md) - [Managed Platform Updates Should Be Enabled For Elastic Beanstalk Environment](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_managed_platform_updates.md) - [Beanstalk managed platform updates remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_managed_platform_updates_remediation.md) - [Alert Notifications Should Be Enabled For Elastic Beanstalk Events](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_notification_enabled.md) - [Beanstalk notification enabled remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_notification_enabled_remediation.md) - [Persistent Logs Should Be Enabled For Elastic Beanstalk Environments](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_persistent_logs.md) - [Beanstalk persistent logs remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_persistent_logs_remediation.md) - [X-Ray Tracing Should Enabled For Elastic Beanstalk Environments](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_xray_enabled.md) - [Beanstalk xray enabled remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/beanstalk_xray_enabled_remediation.md) - [Patch Installation Should Be Done On Systems Manager](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/check_patch_compliance_status.md) - [Check patch compliance status remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/check_patch_compliance_status_remediation.md) - [AWS Client VPN Authorization Rules Should Be Enabled Authorizing All Clients](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/client_vpn_authorize_all.md) - [Client vpn authorize all remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/client_vpn_authorize_all_remediation.md) - [Default Security Group Should Not Allow Unrestricted Public Traffic](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/default_security_group_unrestricted.md) - [Default security group unrestricted remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/default_security_group_unrestricted_remediation.md) - [Restrict data-tier subnet connectivity to VPC NAT Gateway](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/dt_subnet.md) - [Dt subnet remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/dt_subnet_remediation.md) - [Enable Default Encryption For EBS Volumes](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ebs_encryption_on.md) - [Ebs encryption on remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ebs_encryption_on_remediation.md) - [EC2 Instance Snapshots Should Not Be Public](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ebs_snapshots_not_public.md) - [Ebs snapshots not public remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ebs_snapshots_not_public_remediation.md) - [Enable Volume Encryption](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ebs_volume_encryption.md) - [Ebs volume encryption remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ebs_volume_encryption_remediation.md) - [EC2 AMIs Should Not Be Public](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_ami_non_public.md) - [Ec2 ami non public remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_ami_non_public_remediation.md) - [Enforce HTTPS For Elastic Beanstalk Load Balancers.](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_beanstalk_lb_https.md) - [Ec2 beanstalk lb https remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_beanstalk_lb_https_remediation.md) - [EC2-Classic Elastic IP Address Limit Should Not Be Reached](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_classic_elastic_ip_address_limit.md) - [Ec2 classic elastic ip address limit remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_classic_elastic_ip_address_limit_remediation.md) - [EC2 Instance Should Be of Desired Type](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_desired_instance_type.md) - [Ec2 desired instance type remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_desired_instance_type_remediation.md) - [Detailed Monitoring for EC2 Instances Should Be Enabled](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_detailed_monitoring.md) - [Ec2 detailed monitoring remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_detailed_monitoring_remediation.md) - [Scheduled Events for EC2 Instances](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_for_retirement.md) - [Ec2 for retirement remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_for_retirement_remediation.md) - [EC2 Instances Should Not Have Multiple Security Groups](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_has_large_sg_groups.md) - [Ec2 has large sg groups remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_has_large_sg_groups_remediation.md) - [AWS EC2 Hibernation Should Be Enabled](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_hibernation.md) - [Ec2 hibernation remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_hibernation_remediation.md) - [EC2 IAM Roles Should Be Used](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_iam_roles.md) - [Ec2 iam roles remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_iam_roles_remediation.md) - [EC2 Instance Count Should Not Exceed the Limit](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_counts.md) - [Ec2 instance counts remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_counts_remediation.md) - [EC2 Instances Should Use Latest Generation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_generation.md) - [Ec2 instance generation remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_generation_remediation.md) - [Multiple ENIs Should Not Be Attached To EC2 Instances](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_multiple_eni_check.md) - [Ec2 instance multiple eni check remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_multiple_eni_check_remediation.md) - [Scheduled Events for EC2 Instances](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_retirement.md) - [Ec2 instance retirement remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_retirement_remediation.md) - [EC2 Instance Tenancy](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_tenancy.md) - [Ec2 instance tenancy remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instance_tenancy_remediation.md) - [IMDSv2 Should Be Enabled For EC2 Instances](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instances_without_imdsv2.md) - [Ec2 instances without imdsv2 remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_instances_without_imdsv2_remediation.md) - [Elastic Compute Cloud Should Have Recovery Point](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_last_backup_recovery_point_created.md) - [Ec2 last backup recovery point created remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_last_backup_recovery_point_created_remediation.md) - [Elastic Compute Cloud Should Have Recovery Point](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_last_backup_recovery_point_created_with_in_specified_duration.md) - [Ec2 last backup recovery point created with in specified duration remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_last_backup_recovery_point_created_with_in_specified_duration_remediation.md) - [EC2 Instances Should Not Reach vCPU Limit](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_limit_vcpu_check.md) - [Ec2 limit vcpu check remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_limit_vcpu_check_remediation.md) - [None Specified Applications Should Be Installed On Instance.](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_applications_blacklisted.md) - [Ec2 managedinstance applications blacklisted remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_applications_blacklisted_remediation.md) - [Specified Applications Should Be Installed On Instance](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_applications_required.md) - [Ec2 managedinstance applications required remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_applications_required_remediation.md) - [Status OF Managed Instance Compliance Should Be Checked](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_association_compliance_status_check.md) - [Ec2 managedinstance association compliance status check remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_association_compliance_status_check_remediation.md) - [EC2 Systems Manager Are Configured To Collect Blacklisted Inventory.](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_inventory_blacklisted.md) - [Ec2 managedinstance inventory blacklisted remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_managedinstance_inventory_blacklisted_remediation.md) - [EC2 Instance Should Not Be In Public Subnet](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_not_in_public_subnet.md) - [Ec2 not in public subnet remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_not_in_public_subnet_remediation.md) - [Long Running Instances Should Be Re-launched](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_older_than_x_days.md) - [Ec2 older than x days remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_older_than_x_days_remediation.md) - [Virtualization Type Of EC2 Instance Is Paravirtual.](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_paravirtual_instance_check.md) - [Ec2 paravirtual instance check remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_paravirtual_instance_check_remediation.md) - [EC2 Instances Should Have Backup Plan Protection](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_resources_protected_by_backup_plan.md) - [Ec2 resources protected by backup plan remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_resources_protected_by_backup_plan_remediation.md) - [Termination Protection Should Be Enabled](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_termination_protection.md) - [Ec2 termination protection remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_termination_protection_remediation.md) - [EC2 Hop Limit Check.](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_token_hop_limit_check.md) - [Ec2 token hop limit check remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_token_hop_limit_check_remediation.md) - [EC2-VPC Elastic IP Address Limit Should Not Be Reached](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_vpc_elastic_ip_address_limit.md) - [Ec2 vpc elastic ip address limit remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/ec2_vpc_elastic_ip_address_limit_remediation.md) - [Elastic File System Should Be In Backup Plan](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_in_backup_plan.md) - [Efs in backup plan remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_in_backup_plan_remediation.md) - [Elastic File System Should Have Recovery Point](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_last_backup_recovery_point_created.md) - [Efs last backup recovery point created remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_last_backup_recovery_point_created_remediation.md) - [Elastic File System Should Have Recovery Point Within Specified Duration](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_last_backup_recovery_point_created_with_in_specified_duration.md) - [Efs last backup recovery point created with in specified duration remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_last_backup_recovery_point_created_with_in_specified_duration_remediation.md) - [Elastic File System Should Have Backup Plan](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_resources_protected_by_backup_plan.md) - [Efs resources protected by backup plan remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/efs_resources_protected_by_backup_plan_remediation.md) - [EBS Volumes Should Be Encrypted](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/enable_volume_encryption.md) - [Enable volume encryption remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/enable_volume_encryption_remediation.md) - [Non-Empty Stateless Network Firewall Rule Groups Should Not Be Present](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/firewall_stateless_rule_group_not_empty.md) - [Firewall stateless rule group not empty remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/firewall_stateless_rule_group_not_empty_remediation.md) - [FSx Should Have Recovery Point](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/fsx_last_backup_recovery_point_created.md) - [Fsx last backup recovery point created remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/fsx_last_backup_recovery_point_created_remediation.md) - [FSx Should Have Recovery Point Within Specified Duration](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/fsx_last_backup_recovery_point_created_with_in_specified_duration.md) - [Fsx last backup recovery point created with in specified duration remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/fsx_last_backup_recovery_point_created_with_in_specified_duration_remediation.md) - [FSx Should Have Backup Plan](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/fsx_resources_protected_by_backup_plan.md) - [Fsx resources protected by backup plan remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/fsx_resources_protected_by_backup_plan_remediation.md) - [EC2 Instances Should Not Be Idle](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/idle_ec2_instance.md) - [Idle ec2 instance remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/idle_ec2_instance_remediation.md) - [Instance Should Be Launched In Auto Scaling Group](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/instance_in_auto_scaling_group.md) - [Instance in auto scaling group remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/instance_in_auto_scaling_group_remediation.md) - [Internet Gateways Should Be Attached To Authorized Virtual Private Clouds](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/internet_gateway_authorized_vpc_only.md) - [Internet gateway authorized vpc only remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/internet_gateway_authorized_vpc_only_remediation.md) - [Network Firewall Deletion Protection Should Be Enabled](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_deletion_protection.md) - [Network firewall deletion protection remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_deletion_protection_remediation.md) - [Network Firewall Logging Should Be Enabled](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_logging_enabled.md) - [Network firewall logging enabled remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_logging_enabled_remediation.md) - [Network Firewalls Deployed Across Multiple Availability Zones](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_multi_az.md) - [Network firewall multi az remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_multi_az_remediation.md) - [Network Firewall Rule Groups Should Be Stateless Or Stateful](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_stateful_stateless.md) - [Network firewall stateful stateless remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/network_firewall_stateful_stateless_remediation.md) - [Blacklisted AMIs Should Not Be Used](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_blacklisted_ami.md) - [No blacklisted ami remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_blacklisted_ami_remediation.md) - [EC2 Instances Should Not Have Blacklisted Instance Types](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_blacklisted_instance_types.md) - [No blacklisted instance types remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_blacklisted_instance_types_remediation.md) - [Default VPC Should Not Be In Use](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_default_vpc_inuse.md) - [No default vpc inuse remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_default_vpc_inuse_remediation.md) - [EC2 Classic Should Not Be Used](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_ec2_classic.md) - [No ec2 classic remediation](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/no_ec2_classic_remediation.md) - [EC2 Instances Should Not Be Overutilized](https://cloudanix.com/docs/aws/audit/ec2monitoring/rules/overutilized_ec2_instance.md) _Note: this index was truncated to stay under 100,000 characters; 5258 pages omitted._