Available Remediation

Rule Name

Cloud

Remediation

Remediation Description

CHECK_SECURITY_GROUP_SSH_OPEN_TO_PUBLIC

AWS

SG_SSH_OPEN_TO_PUBLIC

Delete security group ingress SSH rule that allows access to public

SECURITYGROUP_ALL_INCOMING_PORTS_OPEN

AWS

SG_DELETE_ALL_INCOMING_PORTS_RULE

Delete All Incoming port rule from Security Group

VPC_FLOWLOGS_ENABLED

AWS

ENABLE_VPC_FLOW_LOG

Enable vpc flow log for non compliant vpc. Note:- Auto remediation is not supported for this rule. Please proceed to "Compliance Analysis" to remediate non compliant resources of this rule.

ICMP_OPEN_TO_PUBLIC

AWS

BLOCK_ICMP_PUBLIC_ACCESS

Delete network ACL entry which is allowing ICMP public access.

CHECK_RESOURCE_GROUP_BUDGET_EXCEEDED

AZURE

CHECK_SUBSCRIPTION_SCOPE_BUDGET_EXCEEDED

Stop all non compliant Virtual Machine instances

S3_BUCKET_ACL_GLOBAL_READ

AWS

S3_BUCKET_ACL_GLOBAL_READ

Disable global read permission by changing access control list

CHECK_SUBSCRIPTION_SCOPE_BUDGET_EXCEEDED

AZURE

CHECK_SUBSCRIPTION_SCOPE_BUDGET_EXCEEDED

Stop all non compliant Virtual Machine instances

CHECK_EC2_INSTANCE_IDLE_CPU

AWS

CHECK_EC2_INSTANCE_THRESHOLD_EXCEEDED

Stop all non compliant EC2 instances

S3_BUCKET_ACL_GLOBAL_FULL_CONTROL

AWS

S3_BUCKET_ACL_GLOBAL_FULL_CONTROL

Disable global full control permission by changing access control list

S3_BUCKET_ACL_GLOBAL_WRITE

AWS

S3_BUCKET_ACL_GLOBAL_WRITE

Disable global write permission by changing access control list

S3_OBJECT_VERSIONING_ENABLED

AWS

ENABLE_S3_OBJECT_VERSIONING

Enable object versioning and provide user an option to enable mfa delete for non compliant bucket.

CHECK_EC2_INSTANCE_THRESHOLD_EXCEEDED

AWS

CHECK_EC2_INSTANCE_THRESHOLD_EXCEEDED

Stop all non compliant EC2 instances

CHECK_SECURITY_GROUP_TCP_OPEN_TO_PUBLIC

AWS

SG_CUSTOM_TCP_OPEN_TO_PUBLIC

Delete security group ingress TCP rule that allows access to public on port or port range inputted by user in Security policy

CHECK_SECURITY_GROUP_UDP_OPEN_TO_PUBLIC

AWS

SG_CUSTOM_UDP_OPEN_TO_PUBLIC

Delete security group ingress UDP rule that allows access to public on port or port range inputted by user in Security policy

CHECK_SECURITY_GROUP_RDP_OPEN_TO_PUBLIC

AWS

SG_RDP_OPEN_TO_PUBLIC

Delete security group ingress RDP rule that allows access to public

IAM_USER_IS_GROUP_MEMBER

AWS

IAM-USER-GROUP-MEMBERSHIP-CHECK

Add user to a deafult group "No Access".

BUDGET_CHECK_COST_EXCEEDED_ON_EC2_WITH_REMEDIATION_ON_TAG

AWS

CHECK_EC2_INSTANCE_THRESHOLD_EXCEEDED

Stop all non compliant EC2 instances