Monitoring

Rule Name	AppSec Rule ID	Severity
Alibaba Cloud Kubernetes node pools are not set to auto repair misconfiguration detected in code	APPSEC_ALI_31	LOW
Alibaba RDS instance has log_connections disabled misconfiguration detected in code	APPSEC_ALI_37	LOW
AWS ECS cluster with container insights feature disabled misconfiguration detected in code	APPSEC_AWS_65	LOW
AWS Amazon RDS instances Enhanced Monitoring is disabled misconfiguration detected in code	APPSEC_AWS_118	LOW
AWS CloudFormation stack configured without SNS topic misconfiguration detected in code	APPSEC_AWS_124	LOW
AWS EC2 instance detailed monitoring disabled misconfiguration detected in code	APPSEC_AWS_126	MEDIUM
AWS WAF does not have associated rules misconfiguration detected in code	APPSEC_AWS_175	LOW
AWS GuardDuty detector is not enabled misconfiguration detected in code	APPSEC_AWS_238	LOW
Elastic Beanstalk environments do not have enhanced health reporting enabled misconfiguration detected in code	APPSEC_AWS_312	HIGH
CloudWatch alarm actions are not enabled misconfiguration detected in code	APPSEC_AWS_319	MEDIUM
EKS clusters are not running on a supported Kubernetes version misconfiguration detected in code	APPSEC_AWS_339	HIGH
AWS resources that support tags do not have Tags misconfiguration detected in code	APPSEC_AWS_CUSTOM_1	LOW
Azure AKS cluster monitoring not enabled misconfiguration detected in code	APPSEC_AZURE_4	LOW
Azure Microsoft Defender for Cloud Defender plans is set to Off misconfiguration detected in code	APPSEC_AZURE_19	LOW
Azure Microsoft Defender for Cloud security contact phone number is not set misconfiguration detected in code	APPSEC_AZURE_20	LOW
Azure Microsoft Defender for Cloud security alert email notification is not set misconfiguration detected in code	APPSEC_AZURE_21	LOW
Azure Microsoft Defender for Cloud email notification for subscription owner is not set misconfiguration detected in code	APPSEC_AZURE_22	LOW
Azure SQL Server threat detection alerts are not enabled for all threat types misconfiguration detected in code	APPSEC_AZURE_25	HIGH
Azure SQL Databases with disabled Email service and co-administrators for Threat Detection misconfiguration detected in code	APPSEC_AZURE_27	LOW
Azure Microsoft Defender for Cloud is set to Off for Servers misconfiguration detected in code	APPSEC_AZURE_55	LOW
Azure Microsoft Defender for Cloud is set to Off for App Service misconfiguration detected in code	APPSEC_AZURE_61	LOW
Azure Microsoft Defender for Cloud is set to Off for Azure SQL Databases misconfiguration detected in code	APPSEC_AZURE_69	LOW
Azure Microsoft Defender for Cloud is set to Off for SQL servers on machines misconfiguration detected in code	APPSEC_AZURE_79	LOW
Azure Microsoft Defender for Cloud is set to Off for Storage misconfiguration detected in code	APPSEC_AZURE_84	LOW
Azure Security Center Defender set to Off for Kubernetes misconfiguration detected in code	APPSEC_AZURE_85	HIGH
Azure Microsoft Defender for Cloud is set to Off for Container Registries misconfiguration detected in code	APPSEC_AZURE_86	HIGH
Azure Microsoft Defender for Cloud is set to Off for Key Vault misconfiguration detected in code	APPSEC_AZURE_87	LOW
My SQL server does not enable Threat Detection policy misconfiguration detected in code	APPSEC_AZURE_127	LOW
PostgreSQL server does not enable Threat Detection policy misconfiguration detected in code	APPSEC_AZURE_128	LOW
Azure Microsoft Defender for Cloud security alert email notifications is not set misconfiguration detected in code	APPSEC_AZURE_131	LOW
Vulnerability Scanning not enabled for Azure Container Registry misconfiguration detected in code	APPSEC_AZURE_163	MEDIUM
Azure App Service Health Check Missing misconfiguration detected in code	APPSEC_AZURE_213	LOW
Azure Microsoft Defender for Cloud set to Off for Resource Manager misconfiguration detected in code	APPSEC_AZURE_234	MEDIUM
Azure resources that support tags do not have tags misconfiguration detected in code	APPSEC_AZURE_CUSTOM_1	LOW
GCP Kubernetes Engine Clusters have Cloud Monitoring disabled misconfiguration detected in code	APPSEC_GCP_8	LOW
GCP Kubernetes cluster node auto-repair configuration disabled misconfiguration detected in code	APPSEC_GCP_9	LOW
GCP Kubernetes cluster node auto-upgrade configuration disabled misconfiguration detected in code	APPSEC_GCP_10	LOW
GCP Kubernetes Engine Clusters without any label information misconfiguration detected in code	APPSEC_GCP_21	LOW
The GKE metadata server is disabled misconfiguration detected in code	APPSEC_GCP_69	LOW
GCP Kubernetes Engine cluster not using Release Channel for version management misconfiguration detected in code	APPSEC_GCP_70	LOW
GCP Kubernetes cluster shielded GKE node with integrity monitoring disabled misconfiguration detected in code	APPSEC_GCP_72	LOW
GCP Cloud Armor policy not configured with cve-canary rule misconfiguration detected in code	APPSEC_GCP_73	MEDIUM
GCP resources that support labels do not have labels misconfiguration detected in code	APPSEC_GCP_CUSTOM_1	LOW
GitHub Repository defined in Terraform doesn't have vulnerability alerts enabled misconfiguration detected in code	APPSEC_GIT_3	LOW
Liveness probe is not configured misconfiguration detected in code	APPSEC_K8S_8	LOW
Readiness probe is not configured misconfiguration detected in code	APPSEC_K8S_9	LOW
The --profiling argument is not set to false for API server misconfiguration detected in code	APPSEC_K8S_90	LOW
The --request-timeout argument is not set appropriately misconfiguration detected in code	APPSEC_K8S_95	MEDIUM
The --profiling argument for controller managers is not set to False misconfiguration detected in code	APPSEC_K8S_107	MEDIUM
The --profiling argument is not set to False for scheduler misconfiguration detected in code	APPSEC_K8S_114	LOW
The --event-qps argument is not set to a level that ensures appropriate event capture misconfiguration detected in code	APPSEC_K8S_147	LOW
OCI Compute Instance has monitoring disabled misconfiguration detected in code	APPSEC_OCI_6	LOW
Terraform module sources do not use a git url with a commit hash revision misconfiguration detected in code	APPSEC_TF_1	MEDIUM
Terraform module sources do not use a git url with a tag or commit hash revision misconfiguration detected in code	APPSEC_TF_2	HIGH
GuardDuty is not enabled to specific org/region misconfiguration detected in code	APPSEC2_AWS_3	LOW
AWS CloudFront attached WAFv2 WebACL is not configured with AMR for Log4j Vulnerability misconfiguration detected in code	APPSEC2_AWS_47	MEDIUM
AWS RDS instance with copy tags to snapshots disabled misconfiguration detected in code	APPSEC2_AWS_60	LOW
Azure SQL Server ADS Vulnerability Assessment is disabled misconfiguration detected in code	APPSEC2_AZURE_2	LOW
Azure SQL Server ADS Vulnerability Assessment (VA) Periodic recurring scans is disabled misconfiguration detected in code	APPSEC2_AZURE_3	LOW
Azure SQL Server ADS Vulnerability Assessment (VA) 'Send scan reports to' is not configured misconfiguration detected in code	APPSEC2_AZURE_4	LOW
Azure SQL Server ADS Vulnerability Assessment (VA) 'Also send email notifications to admins and subscription owners' is disabled misconfiguration detected in code	APPSEC2_AZURE_5	LOW
Azure SQL server Defender setting is set to Off misconfiguration detected in code	APPSEC2_AZURE_13	LOW
GCP GCR Container Vulnerability Scanning is disabled misconfiguration detected in code	APPSEC2_GCP_11	LOW