remediate

A Reflex rule to alert when S3 bucket versioning is disabled

Rule to detect disabling of S3 bucket public access blocks.

Reflex rule that detects and remediates an S3 bucket with no SSE.

Rule to detect the deletion of an AWS account password policy.

A rule for enforcing EBS Volume encryption by default.

Measure to detect when a security group with open to anywhere ingress is allowed.

Reflex enforcement measure to disallow any AMI to be modified as public

A Reflex Rule for enforcing the enablement of DynamoDB point in time recovery.

A Reflex Rule for detecting the scheduling of KMS Keys for deletion.

Enforces SQS queue encryption. Will encrypt queues with the default KMS key.

A Reflex Rule for enforcing KMS Key rotation.

Rule to detect the disabling of log file validation for a CloudTrail trail.

Automation and remediation bots for Dome9's (Continuous) Compliance Engine

Rule to detect when automated backup is disabled for an RDS instance.

Rule to detect the sharing of an RDS snapshot with the public.

Measure that automatically sets an EBS snapshot to private if made public.

erremp 🔬🔍 : | GKE Workload Issues Remediation | Observability, Error Reporting, Logging, Cloud Assist |

Agentic autofix is a feature designed to streamline the process of addressing code quality issues

gsccgs 💂📢📉 : Security Command Center # Risk # Threats # Vulnerabilities # Compliance # Assets # Findings # Sources # Posture Management

Cookielab AWS EC2 Cloudwatch Alarms terraform module