{"id":31795,"date":"2023-09-23T04:10:39","date_gmt":"2023-09-23T04:10:39","guid":{"rendered":"https:\/\/www.process.st\/templates\/aws-cloud-security-checklist\/"},"modified":"2024-03-05T14:11:35","modified_gmt":"2024-03-05T14:11:35","slug":"aws-cloud-security-checklist","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/aws-cloud-security-checklist\/","title":{"rendered":"AWS Cloud Security Checklist"},"content":{"rendered":"\n<section id=\"verify-aws-identity-and-access-management-iam-configurations\"> \n <h2>Verify AWS Identity and Access Management (IAM) configurations<\/h2>\n <div class=\"text-content\">\n   Verify that the AWS Identity and Access Management (IAM) configurations are correctly set up. This task ensures that the appropriate permissions are granted to users, groups, and roles and that there are no unnecessary or excessive permissions. It also helps in identifying any misconfigurations or security vulnerabilities in IAM. Have you granted only the necessary permissions to IAM users, groups, and roles? Are there any unused IAM entities that need to be removed? \n <\/div> \n <div class=\"select-field-content form-field-content\"> \n  <div class=\"form-group\"> <label> Role permissions <\/label> <select disabled class=\"form-control\"> <option value=\"An option will be selected here\">An option will be selected here<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Full access \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Read only \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Limited access \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       4 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No access \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n <div class=\"multi-select-content form-field-content\"> \n  <div class=\"form-group\"> <label> Unused entities <\/label> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Unused users \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Unused groups \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       3 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Unused roles \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"check-for-unused-security-groups\"> \n <h2>Check for unused security groups<\/h2>\n <div class=\"text-content\">\n   Check for any unused security groups within your AWS environment. Unused security groups could indicate misconfigurations or abandoned resources. Do you have any unused security groups? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Unused security groups <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"inspect-default-security-group-configurations\"> \n <h2>Inspect default security group configurations<\/h2>\n <div class=\"text-content\">\n   Inspect the default security group configurations to ensure that they are properly set up. Default security groups are automatically assigned to new resources and often have overly permissive rules. This task helps in identifying any misconfigurations or security vulnerabilities in default security groups. Are the default security groups configured correctly? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Default security group configurations <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"review-aws-cloudtrail-settings\"> \n <h2>Review AWS CloudTrail settings<\/h2>\n <div class=\"text-content\">\n   Review the AWS CloudTrail settings to ensure that they are properly configured. AWS CloudTrail provides visibility into account activity by recording actions taken by users and resources. This task helps in verifying that CloudTrail is enabled, capturing the desired events, and storing the logs in the appropriate location. Have you reviewed and verified the AWS CloudTrail settings? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS CloudTrail settings <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"ensure-encryption-is-enabled-at-rest-and-in-transit\"> \n <h2>Ensure encryption is enabled at rest and in transit<\/h2>\n <div class=\"text-content\">\n   Ensure that encryption is enabled at rest and in transit for all relevant AWS services. Encryption helps protect sensitive data from unauthorized access. This task involves checking if encryption is enabled for storage services like Amazon S3 and Amazon EBS, as well as ensuring that SSL\/TLS is enabled for communication between services. Have you verified encryption settings for all relevant AWS services? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Encryption settings <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Enabled \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Disabled \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"check-for-public-amazon-s3-buckets\"> \n <h2>Check for public Amazon S3 buckets<\/h2>\n <div class=\"text-content\">\n   Check for any public Amazon S3 buckets within your AWS environment. Publicly accessible S3 buckets can expose sensitive data to unauthorized users. This task helps in identifying any S3 buckets that are publicly accessible and need to be secured. Do you have any public Amazon S3 buckets? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Public S3 buckets <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"monitor-aws-guardduty-findings\"> \n <h2>Monitor AWS GuardDuty findings<\/h2>\n <div class=\"text-content\">\n   Monitor the AWS GuardDuty findings to identify any suspicious activity or potential security threats within your AWS environment. AWS GuardDuty is a threat detection service that continuously monitors for malicious activity. This task helps in ensuring that GuardDuty is enabled and that findings are regularly reviewed. Have you reviewed the AWS GuardDuty findings? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS GuardDuty findings <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"ensure-vpc-flow-logging-is-enabled\"> \n <h2>Ensure VPC flow logging is enabled<\/h2>\n <div class=\"text-content\">\n   Ensure that VPC flow logging is enabled for all your VPCs. VPC flow logs capture information about the IP traffic going to and from network interfaces within the VPC. This task helps in monitoring network traffic and identifying any suspicious or unauthorized activity. Have you verified VPC flow logging settings for all your VPCs? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> VPC flow logging <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Enabled \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Disabled \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"verify-aws-config-is-monitoring-all-regions\"> \n <h2>Verify AWS Config is monitoring all regions<\/h2>\n <div class=\"text-content\">\n   Verify that AWS Config is monitoring all the regions in your AWS account. AWS Config provides a detailed view of the configuration of AWS resources in your account and helps ensure compliance with security best practices. This task helps in verifying that AWS Config is enabled and monitoring all the necessary regions. Have you verified AWS Config settings for all regions? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS Config monitoring <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Enabled \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Disabled \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"check-for-unrestricted-inbound-access-on-certain-ports\"> \n <h2>Check for unrestricted inbound access on certain ports<\/h2>\n <div class=\"text-content\">\n   Check for any unrestricted inbound access on certain ports within your security groups. Unrestricted inbound access can leave your resources vulnerable to attacks. This task involves identifying security groups with open ports and recommending necessary changes. Do you have any security groups with unrestricted inbound access on certain ports? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> Unrestricted inbound access <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"ensure-aws-cloudwatch-is-deployed-and-set-up-correctly\"> \n <h2>Ensure AWS CloudWatch is deployed and set up correctly<\/h2>\n <div class=\"text-content\">\n   Ensure that AWS CloudWatch is deployed and set up correctly for monitoring your AWS environment. AWS CloudWatch provides monitoring and observability capabilities for AWS resources. This task helps in verifying that CloudWatch is properly configured and capturing the necessary metrics. Have you verified AWS CloudWatch deployment and setup? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS CloudWatch setup <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"approval-compliance-officer\"> \n <h2>Approval: Compliance Officer<\/h2>\n <div class=\"approval-content\"> \n  <div class=\"header\"> \n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div> \n  <\/div> \n  <div class=\"approval-rule-subject-tasks-list\"> \n   <ul class=\"list\"> \n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Verify AWS Identity and Access Management (IAM) configurations<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Review AWS CloudTrail settings<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure encryption is enabled at rest and in transit<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Check for public Amazon S3 buckets<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Monitor AWS GuardDuty findings<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure VPC flow logging is enabled<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Verify AWS Config is monitoring all regions<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Check for unrestricted inbound access on certain ports<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure AWS CloudWatch is deployed and set up correctly<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li> \n   <\/ul> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"ensure-data-integrity-with-aws-macie\"> \n <h2>Ensure data integrity with AWS Macie<\/h2>\n <div class=\"text-content\">\n   Ensure data integrity in your AWS environment by using AWS Macie. AWS Macie automatically discovers, classifies, and protects sensitive data like Personally Identifiable Information (PII). This task involves setting up Macie and configuring it to monitor and protect your data. Have you ensured data integrity with AWS Macie? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS Macie setup <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"review-ec2-instances-for-public-ip-assignments\"> \n <h2>Review EC2 instances for public IP assignments<\/h2>\n <div class=\"text-content\">\n   Review the EC2 instances in your AWS account to identify any instances with public IP assignments. EC2 instances with public IPs are directly accessible from the internet and can be potential security risks if not necessary. This task helps in identifying any instances that can be switched to private IP addresses. Have you reviewed EC2 instances for public IP assignments? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> EC2 instance review <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"verify-proper-aws-shield-ddos-protection-configurations\"> \n <h2>Verify proper AWS Shield (DDoS protection) configurations<\/h2>\n <div class=\"text-content\">\n   Verify that the proper AWS Shield (DDoS protection) configurations are in place for your resources. AWS Shield provides protection against Distributed Denial of Service (DDoS) attacks. This task involves checking if AWS Shield is enabled and configured correctly. Have you verified AWS Shield configurations for your resources? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS Shield configurations <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Enabled \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Disabled \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"check-aws-lambda-function-policies\"> \n <h2>Check AWS Lambda function policies<\/h2>\n <div class=\"text-content\">\n   Check the policies associated with your AWS Lambda functions to ensure that they are properly configured. AWS Lambda function policies control the permissions for invoking and accessing Lambda functions. This task helps in identifying any misconfigurations or excessive permissions. Have you checked AWS Lambda function policies? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS Lambda function policies <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"ensure-ebs-snapshots-are-not-publicly-accessible\"> \n <h2>Ensure EBS snapshots are not publicly accessible<\/h2>\n <div class=\"text-content\">\n   Ensure that your EBS snapshots are not publicly accessible. Publicly accessible EBS snapshots can expose sensitive data. This task involves checking if the EBS snapshots have the appropriate permissions and are not publicly accessible. Have you ensured that EBS snapshots are not publicly accessible? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> EBS snapshots accessibility <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Enabled \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Disabled \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"assess-rds-instances-for-public-accessibility\"> \n <h2>Assess RDS instances for public accessibility<\/h2>\n <div class=\"text-content\">\n   Assess your RDS instances to identify any instances that are publicly accessible. Publicly accessible RDS instances can be potential security risks. This task involves reviewing the security groups associated with the RDS instances and making necessary changes. Have you assessed RDS instances for public accessibility? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> RDS instance assessment <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section> \n<section id=\"approval-security-administrator\"> \n <h2>Approval: Security Administrator<\/h2>\n <div class=\"approval-content\"> \n  <div class=\"header\"> \n   <div class=\"list-title\">\n    Will be submitted for approval:\n   <\/div> \n  <\/div> \n  <div class=\"approval-rule-subject-tasks-list\"> \n   <ul class=\"list\"> \n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Verify AWS Identity and Access Management (IAM) configurations<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Review AWS CloudTrail settings<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure encryption is enabled at rest and in transit<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Check for public Amazon S3 buckets<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Monitor AWS GuardDuty findings<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure VPC flow logging is enabled<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Verify AWS Config is monitoring all regions<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Check for unrestricted inbound access on certain ports<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure AWS CloudWatch is deployed and set up correctly<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure data integrity with AWS Macie<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Review EC2 instances for public IP assignments<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Verify proper AWS Shield (DDoS protection) configurations<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Check AWS Lambda function policies<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Ensure EBS snapshots are not publicly accessible<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li>\n    <li> \n     <div class=\"approval-rule-subject-tasks-list-item\"> \n      <div class=\"item\"> \n       <div class=\"container\"> <span class=\"title\">Assess RDS instances for public accessibility<\/span> \n        <div class=\"body\">\n         Will be submitted\n        <\/div> \n       <\/div> \n      <\/div> \n     <\/div> <\/li> \n   <\/ul> \n  <\/div> \n <\/div> \n<\/section> \n<section id=\"check-aws-waf-for-proper-configurations\"> \n <h2>Check AWS WAF for proper configurations<\/h2>\n <div class=\"text-content\">\n   Check the AWS WAF (Web Application Firewall) configurations to ensure that they are properly set up. AWS WAF helps protect web applications from common exploits and attacks. This task involves reviewing the AWS WAF rules and configurations. Have you checked AWS WAF configurations? \n <\/div> \n <div class=\"multi-choice-content form-field-content\"> \n  <div class=\"form-group\"> <label> AWS WAF configurations <\/label> <select disabled class=\"form-control\"> <option value=\"\">Multiple options can be selected from this list<\/option> <\/select> \n  <\/div> \n  <ul class=\"items\"> \n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       1 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      Yes \n    <\/div> <\/li>\n   <li class=\"item\"> \n    <div class=\"step-number-container\"> \n     <div class=\"step-number\">\n       2 \n     <\/div> \n    <\/div> \n    <div class=\"step-checkbox-container\"> \n     <div class=\"step-checkbox\"><\/div> \n    <\/div> \n    <div class=\"item-name-static\">\n      No \n    <\/div> <\/li> \n  <\/ul> \n <\/div> \n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Verify AWS Identity and Access Management (IAM) configurations Verify that the AWS Identity and Access Management (IAM) configurations are correctly set up. This task ensures that the appropriate permissions are granted to users, groups, and roles and that there are no unnecessary or excessive permissions. It also helps in identifying any misconfigurations or security vulnerabilities [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"ep_exclude_from_search":false,"cover_icon_emoji":"\ud83d\udd12","cover_icon_url":"","tasks_count":"20","template_description":"","template_id":"uk48hGdq_909lHB7q7xCjA","task_0":"Verify AWS Identity and Access Management (IAM) configurations","task_slug_0":"verify-aws-identity-and-access-management-iam-configurations","task_1":"Check for unused security groups","task_slug_1":"check-for-unused-security-groups","task_2":"Inspect default security group configurations","task_slug_2":"inspect-default-security-group-configurations","task_3":"Review AWS CloudTrail settings","task_slug_3":"review-aws-cloudtrail-settings","task_4":"Ensure encryption is enabled at rest and in transit","task_slug_4":"ensure-encryption-is-enabled-at-rest-and-in-transit","task_5":"Check for public Amazon S3 buckets","task_slug_5":"check-for-public-amazon-s3-buckets","task_6":"Monitor AWS GuardDuty findings","task_slug_6":"monitor-aws-guardduty-findings","task_7":"Ensure VPC flow logging is enabled","task_slug_7":"ensure-vpc-flow-logging-is-enabled","task_8":"Verify AWS Config is monitoring all regions","task_slug_8":"verify-aws-config-is-monitoring-all-regions","task_9":"Check for unrestricted inbound access on certain ports","task_slug_9":"check-for-unrestricted-inbound-access-on-certain-ports","task_10":"Ensure AWS CloudWatch is deployed and set up correctly","task_slug_10":"ensure-aws-cloudwatch-is-deployed-and-set-up-correctly","task_11":"Approval: Compliance Officer","task_slug_11":"approval-compliance-officer","task_12":"Ensure data integrity with AWS Macie","task_slug_12":"ensure-data-integrity-with-aws-macie","task_13":"Review EC2 instances for public IP assignments","task_slug_13":"review-ec2-instances-for-public-ip-assignments","task_14":"Verify proper AWS Shield (DDoS protection) configurations","task_slug_14":"verify-proper-aws-shield-ddos-protection-configurations","task_15":"Check AWS Lambda function policies","task_slug_15":"check-aws-lambda-function-policies","task_16":"Ensure EBS snapshots are not publicly accessible","task_slug_16":"ensure-ebs-snapshots-are-not-publicly-accessible","task_17":"Assess RDS instances for public accessibility","task_slug_17":"assess-rds-instances-for-public-accessibility","task_18":"Approval: Security Administrator","task_slug_18":"approval-security-administrator","task_19":"Check AWS WAF for proper configurations","task_slug_19":"check-aws-waf-for-proper-configurations","task_20":"","task_slug_20":"","task_21":"","task_slug_21":"","task_22":"","task_slug_22":"","task_23":"","task_slug_23":"","task_24":"","task_slug_24":"","task_25":"","task_slug_25":"","task_26":"","task_slug_26":"","task_27":"","task_slug_27":"","task_28":"","task_slug_28":"","task_29":"","task_slug_29":"","task_30":"","task_slug_30":"","task_31":"","task_slug_31":"","task_32":"","task_slug_32":"","task_33":"","task_slug_33":"","task_34":"","task_slug_34":"","task_35":"","task_slug_35":"","task_36":"","task_slug_36":"","task_37":"","task_slug_37":"","task_38":"","task_slug_38":"","task_39":"","task_slug_39":"","task_40":"","task_slug_40":"","task_41":"","task_slug_41":"","task_42":"","task_slug_42":"","task_43":"","task_slug_43":"","task_44":"","task_slug_44":"","task_45":"","task_slug_45":"","task_46":"","task_slug_46":"","task_47":"","task_slug_47":"","task_48":"","task_slug_48":"","task_49":"","task_slug_49":"","task_50":"","task_slug_50":"","task_51":"","task_slug_51":"","task_52":"","task_slug_52":"","task_53":"","task_slug_53":"","task_54":"","task_slug_54":"","task_55":"","task_slug_55":"","task_56":"","task_slug_56":"","task_57":"","task_slug_57":"","task_58":"","task_slug_58":"","task_59":"","task_slug_59":"","task_60":"","task_slug_60":"","task_61":"","task_slug_61":"","task_62":"","task_slug_62":"","task_63":"","task_slug_63":"","task_64":"","task_slug_64":"","task_65":"","task_slug_65":"","task_66":"","task_slug_66":"","task_67":"","task_slug_67":"","task_68":"","task_slug_68":"","task_69":"","task_slug_69":"","task_70":"","task_slug_70":"","task_71":"","task_slug_71":"","task_72":"","task_slug_72":"","task_73":"","task_slug_73":"","task_74":"","task_slug_74":"","task_75":"","task_slug_75":"","task_76":"","task_slug_76":"","task_77":"","task_slug_77":"","task_78":"","task_slug_78":"","task_79":"","task_slug_79":"","task_80":"","task_slug_80":"","task_81":"","task_slug_81":"","task_82":"","task_slug_82":"","task_83":"","task_slug_83":"","task_84":"","task_slug_84":"","task_85":"","task_slug_85":"","task_86":"","task_slug_86":"","task_87":"","task_slug_87":"","task_88":"","task_slug_88":"","task_89":"","task_slug_89":"","task_90":"","task_slug_90":"","task_91":"","task_slug_91":"","task_92":"","task_slug_92":"","task_93":"","task_slug_93":"","task_94":"","task_slug_94":"","task_95":"","task_slug_95":"","task_96":"","task_slug_96":"","task_97":"","task_slug_97":"","task_98":"","task_slug_98":"","task_99":"","task_slug_99":"","footnotes":""},"categories":[72,57],"tags":[],"class_list":["post-31795","post","type-post","status-publish","format-standard","hentry","category-cybersecurity","category-information-security"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31795","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/comments?post=31795"}],"version-history":[{"count":0,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/posts\/31795\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/media?parent=31795"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/categories?post=31795"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.process.st\/templates\/wp-json\/wp\/v2\/tags?post=31795"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}