AWS Elastic Beanstalk environment managed platform updates are not enabled misconfiguration detected

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_340
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	0ff9780e-0b92-4b4e-849c-e3231468cd22

Impact

This rule is examining if managed platform updates are enabled for Elastic Beanstalk. Elastic Beanstalk is a platform as a service (PaaS) product from Amazon Web Services (AWS) that provides automated deployment and scaling features for applications. Ensuring platform updates are managed automatically is crucial for the overall security and performance of the applications running on the platform.

Neglecting to enable these updates can cause potential security vulnerabilities due to outdated software or systems. As AWS regularly releases updates to improve the performance, stability, and security of the platform, these updates often contain important fixes for known issues or vulnerabilities. Therefore, if automatic updates are not enabled, the responsibility falls to the user to manually check and apply updates, which increases the risk of missing critical updates. This can result in high severity security risks, loss of data, and potential system downtime.

How to Fix

Resource: aws_elastic_beanstalk_environment

• Arguments: ManagedActionsEnabled

To fix this issue, you should enable managed platform updates. This will ensure that Elastic Beanstalk environment automatically updates instances with latest security patches and code updates. [source,go]

resource "aws_elastic_beanstalk_environment" "example" { // Some other configurations

setting { namespace = "aws:elasticbeanstalk:managedactions" name = "ManagedActionsEnabled" value = "true" } }