Public Exposure

Rule Name	AppSec Rule ID	Severity
Alibaba Cloud OSS bucket accessible to public misconfiguration detected in code	APPSEC_ALI_1	HIGH
Alibaba Cloud Security group allow internet traffic to SSH port (22) misconfiguration detected in code	APPSEC_ALI_2	LOW
Alibaba Cloud Security group allow internet traffic to RDP port (3389) misconfiguration detected in code	APPSEC_ALI_3	LOW
Alibaba Cloud database instance accessible to public misconfiguration detected in code	APPSEC_ALI_9	LOW
Alibaba Cloud RDS instance does not use SSL misconfiguration detected in code	APPSEC_ALI_20	LOW
Alibaba Cloud API Gateway API Protocol does not use HTTPS misconfiguration detected in code	APPSEC_ALI_21	LOW
Alibaba cloud ALB ACL does not restrict public access misconfiguration detected in code	APPSEC_ALI_29	LOW
Alibaba Cloud Mongodb instance does not use SSL misconfiguration detected in code	APPSEC_ALI_42	LOW
Alibaba Cloud MongoDB instance is public misconfiguration detected in code	APPSEC_ALI_43	LOW
AWS Elastic Load Balancer v2 (ELBv2) listener that allow connection requests over HTTP misconfiguration detected in code	APPSEC_AWS_2	MEDIUM
AWS Elasticsearch does not have node-to-node encryption enabled misconfiguration detected in code	APPSEC_AWS_6	MEDIUM
AWS RDS database instance is publicly accessible misconfiguration detected in code	APPSEC_AWS_17	MEDIUM
Not every Security Group rule has a description misconfiguration detected in code	APPSEC_AWS_23	LOW
AWS Security Group allows all traffic on SSH port (22) misconfiguration detected in code	APPSEC_AWS_24	LOW
AWS Security Group allows all traffic on RDP port (3389) misconfiguration detected in code	APPSEC_AWS_25	LOW
AWS ElastiCache Redis cluster with in-transit encryption disabled (Replication group) misconfiguration detected in code	APPSEC_AWS_30	LOW
AWS ElastiCache Redis cluster with Redis AUTH feature disabled misconfiguration detected in code	APPSEC_AWS_31	LOW
AWS CloudFront viewer protocol policy is not configured with HTTPS misconfiguration detected in code	APPSEC_AWS_34	MEDIUM
AWS EKS cluster endpoint access publicly enabled misconfiguration detected in code	APPSEC_AWS_39	LOW
AWS access keys and secrets are hard coded in infrastructure misconfiguration detected in code	APPSEC_AWS_41	HIGH
Lambda function's environment variables expose secrets misconfiguration detected in code	APPSEC_AWS_45	MEDIUM
EC2 user data exposes secrets misconfiguration detected in code	APPSEC_AWS_46	HIGH
AWS API gateway methods are publicly accessible misconfiguration detected in code	APPSEC_AWS_59	LOW
AWS MQ is publicly accessible misconfiguration detected in code	APPSEC_AWS_69	LOW
AWS Elasticsearch domain is not configured with HTTPS misconfiguration detected in code	APPSEC_AWS_83	MEDIUM
AWS Redshift cluster instance with public access setting enabled misconfiguration detected in code	APPSEC_AWS_87	MEDIUM
AWS EC2 instances with public IP and associated with security groups have Internet access misconfiguration detected in code	APPSEC_AWS_88	HIGH
AWS DMS replication instance is publicly accessible misconfiguration detected in code	APPSEC_AWS_89	LOW
Neptune cluster instance is publicly available misconfiguration detected in code	APPSEC_AWS_102	HIGH
AWS Load Balancer is not using TLS 1.2 misconfiguration detected in code	APPSEC_AWS_103	HIGH
AWS VPC subnets should not allow automatic public IP assignment misconfiguration detected in code	APPSEC_AWS_130	LOW
AWS Elasticsearch is not configured inside a VPC misconfiguration detected in code	APPSEC_AWS_137	LOW
Redshift is deployed outside of a VPC misconfiguration detected in code	APPSEC_AWS_154	LOW
AWS Transfer Server is publicly exposed misconfiguration detected in code	APPSEC_AWS_164	MEDIUM
AWS CloudFront web distribution using insecure TLS version misconfiguration detected in code	APPSEC_AWS_174	LOW
AWS Elasticache security groups are not defined misconfiguration detected in code	APPSEC_AWS_196	LOW
AWS API Gateway Domain does not use a modern security policy misconfiguration detected in code	APPSEC_AWS_206	LOW
AWS Cloudsearch does not use the latest (Transport Layer Security) TLS misconfiguration detected in code	APPSEC_AWS_218	LOW
AWS Cloudsearch does not use HTTPs misconfiguration detected in code	APPSEC_AWS_220	LOW
AWS Elasticsearch domain does not use an updated TLS policy misconfiguration detected in code	APPSEC_AWS_228	LOW
AWS NACL allows ingress from 0.0.0.0/0 to port 21 misconfiguration detected in code	APPSEC_AWS_229	LOW
AWS NACL allows ingress from 0.0.0.0/0 to port 20 misconfiguration detected in code	APPSEC_AWS_230	LOW
AWS NACL allows ingress from 0.0.0.0/0 to port 3389 misconfiguration detected in code	APPSEC_AWS_231	LOW
AWS NACL allows ingress from 0.0.0.0/0 to port 22 misconfiguration detected in code	APPSEC_AWS_232	LOW
AWS DAX cluster endpoint does not use TLS (Transport Layer Security) misconfiguration detected in code	APPSEC_AWS_239	LOW
AWS CloudFront response header policy does not enforce Strict Transport Security misconfiguration detected in code	APPSEC_AWS_259	LOW
AWS security groups allow ingress from 0.0.0.0/0 to port 80 misconfiguration detected in code	APPSEC_AWS_260	LOW
AWS Security Group allows all traffic on all ports misconfiguration detected in code	APPSEC_AWS_277	MEDIUM
MSK nodes are not private misconfiguration detected in code	APPSEC_AWS_291	HIGH
AWS RDS snapshots are accessible to public misconfiguration detected in code	APPSEC_AWS_302	MEDIUM
AWS SSM documents are public misconfiguration detected in code	APPSEC_AWS_303	MEDIUM
AWS CloudFront distributions does not have a default root object configured misconfiguration detected in code	APPSEC_AWS_305	MEDIUM
AWS SageMaker notebook instance is not placed in VPC misconfiguration detected in code	APPSEC_AWS_306	LOW
CloudFront distributions do not have origin failover configured misconfiguration detected in code	APPSEC_AWS_310	MEDIUM
ElastiCache cluster is using the default subnet group misconfiguration detected in code	APPSEC_AWS_323	LOW
AWS Transit Gateway auto accept vpc attachment is enabled misconfiguration detected in code	APPSEC_AWS_331	LOW
WAF rule does not have any actions misconfiguration detected in code	APPSEC_AWS_342	LOW
NACL ingress allows all ports misconfiguration detected in code	APPSEC_AWS_352	HIGH
TLS not enforced in SES configuration set misconfiguration detected in code	APPSEC_AWS_365	MEDIUM
AWS Elastic Load Balancer with listener TLS/SSL is not configured misconfiguration detected in code	APPSEC_AWS_376	LOW
AWS Load Balancer uses HTTP protocol misconfiguration detected in code	APPSEC_AWS_378	MEDIUM
AWS S3 bucket not configured with secure data transport policy misconfiguration detected in code	APPSEC_AWS_379	MEDIUM
AWS Transfer Server not using latest Security Policy misconfiguration detected in code	APPSEC_AWS_380	LOW
Azure Virtual Machine (Linux) does not authenticate using SSH keys misconfiguration detected in code	APPSEC_AZURE_1	LOW
Kubernetes dashboard is not disabled misconfiguration detected in code	APPSEC_AZURE_8	LOW
Azure Network Security Group allows all traffic on SSH port 22 misconfiguration detected in code	APPSEC_AZURE_10	LOW
Azure SQL Servers Firewall rule allow ingress access from 0.0.0.0/0 misconfiguration detected in code	APPSEC_AZURE_11	HIGH
Azure App Service Web app doesn't redirect HTTP to HTTPS misconfiguration detected in code	APPSEC_AZURE_14	MEDIUM
Azure App Service Web app doesn't use latest TLS version misconfiguration detected in code	APPSEC_AZURE_15	LOW
Azure App Service Web app client certificate is disabled misconfiguration detected in code	APPSEC_AZURE_17	LOW
Azure App Service Web app doesn't use HTTP 2.0 misconfiguration detected in code	APPSEC_AZURE_18	LOW
Azure MySQL Database Server SSL connection is disabled misconfiguration detected in code	APPSEC_AZURE_28	LOW
Azure PostgreSQL database server with SSL connection disabled misconfiguration detected in code	APPSEC_AZURE_29	LOW
Azure storage account has a blob container that is publicly accessible misconfiguration detected in code	APPSEC_AZURE_34	HIGH
Azure Storage Account default network access is set to 'Allow' misconfiguration detected in code	APPSEC_AZURE_35	LOW
Azure MariaDB database server with SSL connection disabled misconfiguration detected in code	APPSEC_AZURE_47	LOW
MariaDB servers do not have public network access enabled set to False misconfiguration detected in code	APPSEC_AZURE_48	HIGH
'public network access enabled' is not set to 'False' for mySQL servers misconfiguration detected in code	APPSEC_AZURE_53	MEDIUM
MySQL is not using the latest version of TLS encryption misconfiguration detected in code	APPSEC_AZURE_54	MEDIUM
CORS allows resource to access app services misconfiguration detected in code	APPSEC_AZURE_57	LOW
Azure storage account does allow public access misconfiguration detected in code	APPSEC_AZURE_59	LOW
Azure file sync enables public network access misconfiguration detected in code	APPSEC_AZURE_64	LOW
PostgreSQL server does not disable public network access misconfiguration detected in code	APPSEC_AZURE_68	LOW
Azure Function App doesn't redirect HTTP to HTTPS misconfiguration detected in code	APPSEC_AZURE_70	MEDIUM
Azure Network Security Group having Inbound rule overly permissive to all traffic on UDP protocol misconfiguration detected in code	APPSEC_AZURE_77	MEDIUM
Azure App Services FTP deployment is All allowed misconfiguration detected in code	APPSEC_AZURE_78	LOW
Azure cache for Redis has public network access enabled misconfiguration detected in code	APPSEC_AZURE_89	LOW
Cosmos DB accounts do not have restricted access misconfiguration detected in code	APPSEC_AZURE_99	LOW
Azure Cosmos DB enables public network access misconfiguration detected in code	APPSEC_AZURE_101	LOW
Azure Data Factory (V2) configured with overly permissive network access misconfiguration detected in code	APPSEC_AZURE_104	MEDIUM
Azure Event Grid domain public network access is enabled misconfiguration detected in code	APPSEC_AZURE_106	MEDIUM
Azure IoT Hub enables public network access misconfiguration detected in code	APPSEC_AZURE_108	MEDIUM
SQL Server is enabled for public network access misconfiguration detected in code	APPSEC_AZURE_113	LOW
Azure Virtual machine NIC has IP forwarding enabled misconfiguration detected in code	APPSEC_AZURE_118	LOW
Network interfaces use public IPs misconfiguration detected in code	APPSEC_AZURE_119	LOW
Azure cognitive search does not disable public network access misconfiguration detected in code	APPSEC_AZURE_124	LOW
Azure Container registries Public access to All networks is enabled misconfiguration detected in code	APPSEC_AZURE_139	MEDIUM
Azure AKS cluster nodes have public IP addresses misconfiguration detected in code	APPSEC_AZURE_143	LOW
Azure Function App doesn't use latest TLS version misconfiguration detected in code	APPSEC_AZURE_145	LOW
Azure Redis Cache does not use the latest version of TLS encryption misconfiguration detected in code	APPSEC_AZURE_148	LOW
Azure Client Certificates are not enforced for API management misconfiguration detected in code	APPSEC_AZURE_152	LOW
Azure web app does not redirect all HTTP traffic to HTTPS in Azure App Service Slot misconfiguration detected in code	APPSEC_AZURE_153	LOW
Azure App's service slot does not use the latest version of TLS encryption misconfiguration detected in code	APPSEC_AZURE_154	LOW
Azure App service slot does not have debugging disabled misconfiguration detected in code	APPSEC_AZURE_155	LOW
Azure HTTP (port 80) access from the internet is not restricted misconfiguration detected in code	APPSEC_AZURE_160	LOW
Azure Spring Cloud API Portal is not enabled for HTTPS misconfiguration detected in code	APPSEC_AZURE_161	LOW
Azure Spring Cloud API Portal Public Access Is Enabled misconfiguration detected in code	APPSEC_AZURE_162	LOW
API Management Without Minimum TLS 1.2 misconfiguration detected in code	APPSEC_AZURE_173	MEDIUM
API Management with Public Access misconfiguration detected in code	APPSEC_AZURE_174	MEDIUM
Web PubSub Without SLA SKU misconfiguration detected in code	APPSEC_AZURE_175	LOW
VNET With Only One DNS Endpoint misconfiguration detected in code	APPSEC_AZURE_182	LOW
VNET Using External DNS Addresses misconfiguration detected in code	APPSEC_AZURE_183	MEDIUM
App Configuration Public Access Enabled misconfiguration detected in code	APPSEC_AZURE_185	HIGH
Azure Key Vault Public Network Access Control misconfiguration detected in code	APPSEC_AZURE_189	HIGH
Azure storage account has a blob container with public access misconfiguration detected in code	APPSEC_AZURE_190	HIGH
Azure Event Grid Topic Public Network Access misconfiguration detected in code	APPSEC_AZURE_193	MEDIUM
Azure SignalR Service not Using Paid SKU for its SLA misconfiguration detected in code	APPSEC_AZURE_196	LOW
Azure CDN Doesn't Disable HTTP Endpoint misconfiguration detected in code	APPSEC_AZURE_197	MEDIUM
Azure CDN Endpoint Custom domains is not configured with HTTPS misconfiguration detected in code	APPSEC_AZURE_198	MEDIUM
Azure CDN Using Outdated TLS Encryption misconfiguration detected in code	APPSEC_AZURE_200	MEDIUM
Azure Service Bus with Public Network Access Enabled misconfiguration detected in code	APPSEC_AZURE_204	MEDIUM
Azure Service Bus Without Latest TLS Encryption misconfiguration detected in code	APPSEC_AZURE_205	MEDIUM
Azure Cognitive Search With Global IP Allowance misconfiguration detected in code	APPSEC_AZURE_210	MEDIUM
Azure App Service Instance Lacks Redundancy misconfiguration detected in code	APPSEC_AZURE_212	LOW
Backend of the API management system does not utilize HTTPS misconfiguration detected in code	APPSEC_AZURE_215	HIGH
DenyIntelMode for Azure Firewalls is not set to Deny misconfiguration detected in code	APPSEC_AZURE_216	HIGH
Azure Application gateways listener that allow connection requests over HTTP misconfiguration detected in code	APPSEC_AZURE_217	MEDIUM
Azure Application Gateway is configured with SSL policy having TLS version 1.1 or lower misconfiguration detected in code	APPSEC_AZURE_218	LOW
Azure Firewall does not define a firewall policy misconfiguration detected in code	APPSEC_AZURE_219	MEDIUM
Azure Function app configured with public network access misconfiguration detected in code	APPSEC_AZURE_221	MEDIUM
Azure App Service web apps with public network access misconfiguration detected in code	APPSEC_AZURE_222	MEDIUM
Event Hub Namespace not using TLS 1.2 or greater misconfiguration detected in code	APPSEC_AZURE_223	HIGH
Azure Container Instance environment variable with regular value type misconfiguration detected in code	APPSEC_AZURE_235	LOW
Azure Container Instance is not configured with virtual network misconfiguration detected in code	APPSEC_AZURE_245	LOW
Azure AKS cluster HTTP application routing enabled misconfiguration detected in code	APPSEC_AZURE_246	LOW
Port 22 is exposed misconfiguration detected in code	APPSEC_DOCKER_1	LOW
GCP Firewall rule allows all traffic on SSH port (22) misconfiguration detected in code	APPSEC_GCP_2	LOW
GCP Firewall rule allows all traffic on RDP port (3389) misconfiguration detected in code	APPSEC_GCP_3	LOW
GCP HTTPS Load balancer is set with SSL policy having TLS version 1.1 or lower misconfiguration detected in code	APPSEC_GCP_4	MEDIUM
GCP SQL Instances do not have SSL configured for incoming connections misconfiguration detected in code	APPSEC_GCP_6	HIGH
GCP SQL database is publicly accessible misconfiguration detected in code	APPSEC_GCP_11	HIGH
GCP BigQuery dataset is publicly accessible misconfiguration detected in code	APPSEC_GCP_15	HIGH
GCP Cloud DNS has DNSSEC disabled misconfiguration detected in code	APPSEC_GCP_16	MEDIUM
RSASHA1 is used for Zone-Signing and Key-Signing Keys in Cloud DNS DNSSEC misconfiguration detected in code	APPSEC_GCP_17	MEDIUM
GKE control plane is public misconfiguration detected in code	APPSEC_GCP_18	LOW
GCP project is using the default network misconfiguration detected in code	APPSEC_GCP_27	MEDIUM
GCP Storage bucket is anonymously or publicly accessible misconfiguration detected in code	APPSEC_GCP_28	HIGH
GCP VM instances do have block project-wide SSH keys feature disabled misconfiguration detected in code	APPSEC_GCP_32	HIGH
GCP Projects do have OS Login disabled misconfiguration detected in code	APPSEC_GCP_33	HIGH
GCP Projects have OS Login disabled misconfiguration detected in code	APPSEC_GCP_34	LOW
GCP VM instances have serial port access enabled misconfiguration detected in code	APPSEC_GCP_35	LOW
GCP VM instances have IP Forwarding enabled misconfiguration detected in code	APPSEC_GCP_36	LOW
GCP VM instance with Shielded VM features disabled misconfiguration detected in code	APPSEC_GCP_39	LOW
GCP VM instance with the external IP address misconfiguration detected in code	APPSEC_GCP_40	LOW
GCP Cloud SQL database instances have public IPs misconfiguration detected in code	APPSEC_GCP_60	LOW
GCP VPC Network subnets have Private Google access disabled misconfiguration detected in code	APPSEC_GCP_74	LOW
GCP Firewall rule allows all traffic on FTP port (21) misconfiguration detected in code	APPSEC_GCP_75	LOW
GCP VPC Network subnets have Private Google access for IPv6 disabled misconfiguration detected in code	APPSEC_GCP_76	LOW
GCP Google compute firewall ingress allow FTP port (20) access misconfiguration detected in code	APPSEC_GCP_77	LOW
GCP cloud build workers are not private misconfiguration detected in code	APPSEC_GCP_86	LOW
GCP data fusion instances are not private misconfiguration detected in code	APPSEC_GCP_87	LOW
GCP Firewall rule allows all traffic on MySQL DB port (3306) misconfiguration detected in code	APPSEC_GCP_88	LOW
GCP Vertex AI instances are not private misconfiguration detected in code	APPSEC_GCP_89	HIGH
GCP Dataflow jobs are not private misconfiguration detected in code	APPSEC_GCP_94	HIGH
GCP Dataproc clusters are anonymously or publicly accessible misconfiguration detected in code	APPSEC_GCP_98	HIGH
GCP Pub/Sub Topics are anonymously or publicly accessible misconfiguration detected in code	APPSEC_GCP_99	MEDIUM
GCP BigQuery Tables are anonymously or publicly accessible misconfiguration detected in code	APPSEC_GCP_100	HIGH
GCP Artifact Registry repositories are anonymously or publicly accessible misconfiguration detected in code	APPSEC_GCP_101	HIGH
GCP Cloud Run services are anonymously or publicly accessible misconfiguration detected in code	APPSEC_GCP_102	MEDIUM
GCP Firewall rule allows all traffic on HTTP port (80) misconfiguration detected in code	APPSEC_GCP_106	LOW
GCP Cloud Function is publicly accessible misconfiguration detected in code	APPSEC_GCP_107	MEDIUM
GCP Storage buckets are publicly accessible to all users misconfiguration detected in code	APPSEC_GCP_114	HIGH
GCP Cloud Function configured with overly permissive Ingress setting misconfiguration detected in code	APPSEC_GCP_124	LOW
GitHub repository webhook defined in Terraform does not use a secure SSL misconfiguration detected in code	APPSEC_GIT_2	MEDIUM
Tiller (Helm V2) deployment is accessible from within the cluster misconfiguration detected in code	APPSEC_K8S_45	LOW
The --insecure-bind-address argument is set misconfiguration detected in code	APPSEC_K8S_86	HIGH
The --insecure-port argument is not set to 0 misconfiguration detected in code	APPSEC_K8S_88	HIGH
The --secure-port argument is set to 0 misconfiguration detected in code	APPSEC_K8S_89	LOW
The --tls-cert-file and --tls-private-key-file arguments for API server are not set appropriately misconfiguration detected in code	APPSEC_K8S_100	HIGH
The --read-only-port argument is not set to 0 misconfiguration detected in code	APPSEC_K8S_141	LOW
OCI VCN has no inbound security list misconfiguration detected in code	APPSEC_OCI_16	LOW
OCI VCN Security list has stateful security rules misconfiguration detected in code	APPSEC_OCI_17	MEDIUM
OCI Security List allows all traffic on SSH port (22) misconfiguration detected in code	APPSEC_OCI_19	LOW
OCI security lists allows unrestricted ingress access to port 3389 misconfiguration detected in code	APPSEC_OCI_20	LOW
OCI security group allows unrestricted ingress access to port 22 misconfiguration detected in code	APPSEC_OCI_22	LOW
OpenAPI Security Definitions Object should be set and not empty misconfiguration detected in code	APPSEC_OPENAPI_1	HIGH
OpenAPI If the security scheme is not of type 'oauth2', the array value must be empty misconfiguration detected in code	APPSEC_OPENAPI_2	HIGH
Cleartext credentials over unencrypted channel should not be accepted for the operation misconfiguration detected in code	APPSEC_OPENAPI_3	HIGH
The path scheme is supports unencrypted HTTP connections misconfiguration detected in code	APPSEC_OPENAPI_7	HIGH
Global schemes use 'httpa' protocol instead of 'https' misconfiguration detected in code	APPSEC_OPENAPI_18	HIGH
API keys transmitted over cleartext misconfiguration detected in code	APPSEC_OPENAPI_20	HIGH
OpenStack Security groups allow ingress from 0.0.0.0:0 to port 22 (tcp / udp) misconfiguration detected in code	APPSEC_OPENSTACK_2	LOW
OpenStack Security groups allow ingress from 0.0.0.0:0 to port 3389 (tcp / udp) misconfiguration detected in code	APPSEC_OPENSTACK_3	LOW
HTTPS url not used with Ansible uri misconfiguration detected in code	APPSEC2_ANSIBLE_1	MEDIUM
HTTPS url not used with Ansible get_url module misconfiguration detected in code	APPSEC2_ANSIBLE_2	MEDIUM
AWS Network ACL is not in use misconfiguration detected in code	APPSEC2_AWS_1	LOW
Security Groups are not attached to EC2 instances or ENIs misconfiguration detected in code	APPSEC2_AWS_5	LOW
S3 Bucket does not have public access blocks misconfiguration detected in code	APPSEC2_AWS_6	LOW
Amazon EMR clusters' security groups are open to the world misconfiguration detected in code	APPSEC2_AWS_7	LOW
AWS Default Security Group does not restrict all traffic misconfiguration detected in code	APPSEC2_AWS_12	LOW
Auto scaling groups associated with a load balancer do not use elastic load balancing health checks misconfiguration detected in code	APPSEC2_AWS_15	LOW
Not all EIP addresses allocated to a VPC are attached to EC2 instances misconfiguration detected in code	APPSEC2_AWS_19	LOW
ALB does not redirect HTTP requests into HTTPS ones misconfiguration detected in code	APPSEC2_AWS_20	LOW
Route53 A Record does not have Attached Resource misconfiguration detected in code	APPSEC2_AWS_23	MEDIUM
AWS Application Load Balancer (ALB) not configured with AWS Web Application Firewall v2 (AWS WAFv2) misconfiguration detected in code	APPSEC2_AWS_28	LOW
Public API gateway not configured with AWS Web Application Firewall v2 (AWS WAFv2) misconfiguration detected in code	APPSEC2_AWS_29	MEDIUM
AWS CloudFront distribution does not have a strict security headers policy attached misconfiguration detected in code	APPSEC2_AWS_32	LOW
AWS Terraform sends SSM secrets to untrusted domains over HTTP misconfiguration detected in code	APPSEC2_AWS_36	LOW
Domain Name System Security Extensions (DNSSEC) signing is not enabled for Amazon Route 53 public hosted zones misconfiguration detected in code	APPSEC2_AWS_38	HIGH
AWS CloudFront web distribution with default SSL certificate misconfiguration detected in code	APPSEC2_AWS_42	LOW
AWS route table with VPC peering overly permissive to all traffic misconfiguration detected in code	APPSEC2_AWS_44	LOW
AWS Database Migration Service endpoint do not have SSL configured misconfiguration detected in code	APPSEC2_AWS_49	LOW
AWS API Gateway endpoints without client certificate authentication misconfiguration detected in code	APPSEC2_AWS_51	LOW
AWS API gateway request parameter is not validated misconfiguration detected in code	APPSEC2_AWS_53	LOW
AWS CloudFront distribution is using insecure SSL protocols for HTTPS communication misconfiguration detected in code	APPSEC2_AWS_54	MEDIUM
MWAA environment is publicly accessible misconfiguration detected in code	APPSEC2_AWS_66	HIGH
AWS CloudFront origin protocol policy does not enforce HTTPS-only misconfiguration detected in code	APPSEC2_AWS_72	MEDIUM
Azure PostgreSQL Database Server 'Allow access to Azure services' enabled misconfiguration detected in code	APPSEC2_AZURE_6	LOW
Azure Storage account container storing activity logs is publicly accessible misconfiguration detected in code	APPSEC2_AZURE_8	LOW
Azure Spring Cloud service is not configured with virtual network misconfiguration detected in code	APPSEC2_AZURE_23	MEDIUM
Azure PostgreSQL database flexible server configured with overly permissive network access misconfiguration detected in code	APPSEC2_AZURE_26	MEDIUM
Azure ACR HTTPS not enabled for webhook misconfiguration detected in code	APPSEC2_AZURE_28	MEDIUM
Azure AKS cluster Azure CNI networking not enabled misconfiguration detected in code	APPSEC2_AZURE_29	LOW
Azure Virtual Network subnet is not configured with a Network Security Group misconfiguration detected in code	APPSEC2_AZURE_31	LOW
Azure Key vault Private endpoint connection is not configured misconfiguration detected in code	APPSEC2_AZURE_32	LOW
Azure Storage account is not configured with private endpoint connection misconfiguration detected in code	APPSEC2_AZURE_33	MEDIUM
Azure SQL Server allow access to any Azure internal resources misconfiguration detected in code	APPSEC2_AZURE_34	LOW
Azure Virtual machine configured with public IP and serial console access misconfiguration detected in code	APPSEC2_AZURE_39	LOW
Azure PostgreSQL servers not configured with private endpoint misconfiguration detected in code	APPSEC2_AZURE_42	MEDIUM
Azure Database for MariaDB not configured with private endpoint misconfiguration detected in code	APPSEC2_AZURE_43	MEDIUM
Azure Database for MySQL server not configured with private endpoint misconfiguration detected in code	APPSEC2_AZURE_44	MEDIUM
Azure SQL Database server not configured with private endpoint misconfiguration detected in code	APPSEC2_AZURE_45	MEDIUM
Azure Spring Cloud app end-to-end TLS is disabled misconfiguration detected in code	APPSEC2_AZURE_55	LOW
GCP KMS crypto key is anonymously accessible misconfiguration detected in code	APPSEC2_GCP_6	MEDIUM
GCP Cloud KMS Key Rings are anonymously or publicly accessible misconfiguration detected in code	APPSEC2_GCP_8	HIGH
GCP Container Registry repositories are anonymously or publicly accessible misconfiguration detected in code	APPSEC2_GCP_9	HIGH
GCP Cloud Function HTTP trigger is not secured misconfiguration detected in code	APPSEC2_GCP_10	MEDIUM
GCP Firewall with Inbound rule overly permissive to All Traffic misconfiguration detected in code	APPSEC2_GCP_12	LOW
Google Cloud Platform network is not ensured to define a firewall misconfiguration detected in code	APPSEC2_GCP_18	MEDIUM
TPU v2 VM is public misconfiguration detected in code	APPSEC2_GCP_32	MEDIUM
IBM Cloud Application Load Balancer for VPC has public access enabled in Terraform misconfiguration detected in code	APPSEC2_IBM_1	MEDIUM
IBM Cloud Kubernetes clusters are accessible by using public endpoint in Terraform misconfiguration detected in code	APPSEC2_IBM_7	MEDIUM
OCI Network Security Group allows all traffic on RDP port (3389) misconfiguration detected in code	APPSEC2_OCI_2	LOW
OCI Kubernetes Engine Cluster endpoint is not configured with Network Security Groups misconfiguration detected in code	APPSEC2_OCI_3	LOW
OCI Kubernetes Engine Cluster pod security policy not enforced misconfiguration detected in code	APPSEC2_OCI_6	LOW