Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
Network-position trust V-021
Finds allowlists that trust a network address alone, such as your own egress address or partner addresses pinned one by one.
Checks
| Checks | Needs |
|---|---|
| Finds allowlists that trust a network address alone, such as your own egress address or partner addresses pinned one by one. | ec2 security group, ec2 address, ec2 nat gateway |
Coverage
Could not read anything this run
Run history
No run has recorded this rule yet.
Findings
No open findings.
What it fed
No case has used a finding of this rule in the last 30 days.
Techniques
None mapped.
How to fix
DescribeCluster(publicAccessCidrs) / GetPublicAccessBlock / ListFunctionUrlConfigs(AuthType) → restrict by IaC; reversible