AI And Machine Learning

Rule Name	AppSec Rule ID	Severity
AWS SageMaker notebook instance not configured with data encryption at rest using KMS key misconfiguration detected in code	APPSEC_AWS_22	LOW
AWS SageMaker endpoint data encryption at rest not configured misconfiguration detected in code	APPSEC_AWS_98	HIGH
AWS SageMaker notebook instance configured with direct internet access feature misconfiguration detected in code	APPSEC_AWS_122	LOW
AWS Sagemaker domain not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_187	LOW
AWS Kendra index Server side encryption does not use Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_262	LOW
AWS SageMaker notebook instance with root access enabled misconfiguration detected in code	APPSEC_AWS_307	LOW
AWS Sagemaker data quality job not encrypting model artifacts with KMS misconfiguration detected in code	APPSEC_AWS_367	LOW
AWS Sagemaker data quality job not using KMS to encrypt data on attached storage volume misconfiguration detected in code	APPSEC_AWS_368	LOW
AWS Sagemaker data quality job not encrypting communications between instances used for monitoring jobs misconfiguration detected in code	APPSEC_AWS_369	LOW
AWS SageMaker model does not use network isolation misconfiguration detected in code	APPSEC_AWS_370	MEDIUM
AWS SageMaker notebook instance allows for IMDSv1 misconfiguration detected in code	APPSEC_AWS_371	MEDIUM
AWS SageMaker Flow Definition does not use KMS for output configurations misconfiguration detected in code	APPSEC_AWS_372	LOW
AWS Bedrock agent is not associated with Bedrock guardrails misconfiguration detected in code	APPSEC_AWS_383	LOW
Azure Synapse Workspaces do not enable managed virtual networks misconfiguration detected in code	APPSEC_AZURE_58	LOW
Azure Cognitive Services account configured with public network access misconfiguration detected in code	APPSEC_AZURE_134	HIGH
Azure Machine Learning Compute Cluster Local Authentication is enabled misconfiguration detected in code	APPSEC_AZURE_142	LOW
Azure Machine Learning Workspace is publicly accessible misconfiguration detected in code	APPSEC_AZURE_144	LOW
Azure Machine Learning Compute Cluster Minimum Nodes is not set to 0 misconfiguration detected in code	APPSEC_AZURE_150	LOW
Azure Data exfiltration protection for Azure Synapse workspace is disabled misconfiguration detected in code	APPSEC_AZURE_157	LOW
Azure Databricks workspace is public misconfiguration detected in code	APPSEC_AZURE_158	LOW
Azure Cognitive Services account configured with local authentication misconfiguration detected in code	APPSEC_AZURE_236	LOW
Azure Cognitive Services account is not configured with managed identity misconfiguration detected in code	APPSEC_AZURE_238	LOW
Azure Synapse workspace administrator login password exposed misconfiguration detected in code	APPSEC_AZURE_239	MEDIUM
Azure Synapse Workspace not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AZURE_240	LOW
Azure Synapse SQL pool not encrypted misconfiguration detected in code	APPSEC_AZURE_241	LOW
Azure Synapse Spark Pool not using isolated compute misconfiguration detected in code	APPSEC_AZURE_242	LOW
Azure Machine learning workspace is not configured with private endpoint misconfiguration detected in code	APPSEC_AZURE_243	MEDIUM
Azure Cognitive Services account hosted with OpenAI is not configured with data loss prevention misconfiguration detected in code	APPSEC_AZURE_247	HIGH
GCP Vertex AI datasets do not use a Customer Manager Key (CMK) misconfiguration detected in code	APPSEC_GCP_92	LOW
GCP Vertex AI Metadata Store does not use a Customer Manager Key (CMK) misconfiguration detected in code	APPSEC_GCP_96	LOW
GCP Dataproc Clusters have public IPs misconfiguration detected in code	APPSEC_GCP_103	HIGH
GCP DataFusion does not have stack driver logging enabled misconfiguration detected in code	APPSEC_GCP_104	LOW
GCP DataFusion does not have stack driver monitoring enabled misconfiguration detected in code	APPSEC_GCP_105	LOW
GCP Vertex AI Workbench user-managed notebook has vTPM disabled misconfiguration detected in code	APPSEC_GCP_126	LOW
GCP Vertex AI Workbench user-managed notebook has Integrity monitoring disabled misconfiguration detected in code	APPSEC_GCP_127	LOW
AWS SageMaker notebook instance IAM policy is overly permissive misconfiguration detected in code	APPSEC2_AWS_68	MEDIUM
Azure Synapse workspaces have IP firewall rules attached misconfiguration detected in code	APPSEC2_AZURE_19	LOW
Azure Cognitive Services does not Customer Managed Keys (CMKs) for encryption misconfiguration detected in code	APPSEC2_AZURE_22	LOW
Azure Synapse Workspace vulnerability assessment is disabled misconfiguration detected in code	APPSEC2_AZURE_46	MEDIUM
Azure Databricks Workspaces not using customer-managed key for root DBFS encryption misconfiguration detected in code	APPSEC2_AZURE_48	LOW
Azure Machine learning workspace configured with overly permissive network access misconfiguration detected in code	APPSEC2_AZURE_49	HIGH
Azure Storage Account storing Machine Learning workspace high business impact data is publicly accessible misconfiguration detected in code	APPSEC2_AZURE_50	HIGH
Azure Synapse SQL Pool does not have a security alert policy misconfiguration detected in code	APPSEC2_AZURE_51	LOW
Azure Synapse SQL Pool vulnerability assessment disabled misconfiguration detected in code	APPSEC2_AZURE_52	LOW
Azure Synapse Workspace does not have extended audit logs misconfiguration detected in code	APPSEC2_AZURE_53	LOW
Log monitoring disabled for Azure Synapse SQL Pool misconfiguration detected in code	APPSEC2_AZURE_54	LOW
Vertex AI endpoint is not using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_24	MEDIUM
Vertex AI featurestore is not configured to use a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_25	MEDIUM
Vertex AI tensorboard does not use a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_26	MEDIUM
Vertex AI endpoint is public misconfiguration detected in code	APPSEC2_GCP_33	MEDIUM
Vertex AI index endpoint is public misconfiguration detected in code	APPSEC2_GCP_34	MEDIUM
Vertex AI runtime is not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_35	MEDIUM
Vertex AI runtime is public misconfiguration detected in code	APPSEC2_GCP_36	MEDIUM