Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
End of support and out-of-date platforms V-048
Finds clusters, databases, runtimes, operating systems and images that are at or near the end of support, and machine images that have aged too far.
Checks
| Checks | Needs |
|---|---|
| Finds a Kubernetes cluster in extended support or within 90 days of the end of standard support, and says what extended support costs a month. | eks cluster, sw platform |
| Finds a Kubernetes cluster whose upgrade readiness check reports an error. | eks cluster, sw platform |
| Finds a managed database or data service version that is deprecated, in extended support or within 90 days of the end of support. | sw platform |
| Finds a function runtime or Beanstalk platform that is deprecated or retiring within 90 days. | sw platform |
| Finds an instance or node whose operating system release is past its end of life. | sw platform |
| Finds a machine image in use that AWS has deprecated or that is older than your age limit. | ec2 image, sw platform |
| Finds a running container image older than your age limit that has high findings with a fix. | sw image |
Coverage
Read everywhere
‹payments-prod-cluster› | |
|---|---|
‹prod-acct› 123456789012 | Read |
Run history
No run has recorded this rule yet.
Findings
No open findings.
What it fed
No case has used a finding of this rule in the last 30 days.
Techniques
T1190 T1195
How to fix
warden show for the cited record and its dates → plan the upgrade to a supported version (cluster, engine, runtime, operating system, image) by IaC or GitOps in a change window; extended support costs money every month it runs (reversible until the old version is deleted)