Storage

Rule Name	AppSec Rule ID	Severity
Alibaba Cloud OSS bucket is not encrypted with Customer Master Key misconfiguration detected in code	APPSEC_ALI_6	MEDIUM
Alibaba Cloud disk encryption is disabled misconfiguration detected in code	APPSEC_ALI_7	LOW
Alibaba Cloud Disk is not encrypted with Customer Master Key misconfiguration detected in code	APPSEC_ALI_8	LOW
Alibaba Cloud OSS bucket has versioning disabled misconfiguration detected in code	APPSEC_ALI_10	LOW
Alibaba Cloud OSS bucket has transfer Acceleration disabled misconfiguration detected in code	APPSEC_ALI_11	LOW
Alibaba Cloud Transparent Data Encryption is disabled on instance misconfiguration detected in code	APPSEC_ALI_22	LOW
Alibaba Cloud launch template data disks are not encrypted misconfiguration detected in code	APPSEC_ALI_32	LOW
Alibaba Cloud MongoDB does not have transparent data encryption enabled misconfiguration detected in code	APPSEC_ALI_44	LOW
AWS EBS volumes are not encrypted misconfiguration detected in code	APPSEC_AWS_3	HIGH
AWS Elasticsearch domain Encryption for data at rest is disabled misconfiguration detected in code	APPSEC_AWS_5	LOW
AWS EC2 Auto Scaling Launch Configuration is not using encrypted EBS volumes misconfiguration detected in code	APPSEC_AWS_8	LOW
AWS RDS DB cluster encryption is disabled misconfiguration detected in code	APPSEC_AWS_16	LOW
AWS Access logging not enabled on S3 buckets misconfiguration detected in code	APPSEC_AWS_18	LOW
AWS S3 buckets do not have server side encryption misconfiguration detected in code	APPSEC_AWS_19	LOW
AWS S3 bucket ACL grants READ permission to everyone misconfiguration detected in code	APPSEC_AWS_20	HIGH
AWS S3 Object Versioning is disabled misconfiguration detected in code	APPSEC_AWS_21	LOW
AWS SNS topic has SSE disabled misconfiguration detected in code	APPSEC_AWS_26	MEDIUM
AWS SQS Queue not configured with server side encryption misconfiguration detected in code	APPSEC_AWS_27	LOW
DynamoDB PITR is disabled misconfiguration detected in code	APPSEC_AWS_28	HIGH
AWS ElastiCache Redis cluster with encryption for data at rest disabled misconfiguration detected in code	APPSEC_AWS_29	LOW
AWS CloudTrail logs are not encrypted using Customer Master Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_35	LOW
AWS Elastic File System (EFS) with encryption for data at rest is disabled misconfiguration detected in code	APPSEC_AWS_42	LOW
AWS Kinesis streams are not encrypted using Server Side Encryption misconfiguration detected in code	APPSEC_AWS_43	LOW
Neptune storage is not securely encrypted misconfiguration detected in code	APPSEC_AWS_44	MEDIUM
AWS DAX cluster not configured with encryption at rest misconfiguration detected in code	APPSEC_AWS_47	LOW
ECR image tags are not immutable misconfiguration detected in code	APPSEC_AWS_51	LOW
AWS S3 Bucket has the block public ACLs disabled misconfiguration detected in code	APPSEC_AWS_53	MEDIUM
AWS S3 Bucket BlockPublicPolicy is not set to True misconfiguration detected in code	APPSEC_AWS_54	MEDIUM
AWS S3 bucket IgnorePublicAcls is not set to True misconfiguration detected in code	APPSEC_AWS_55	MEDIUM
AWS S3 bucket RestrictPublicBucket is not set to True misconfiguration detected in code	APPSEC_AWS_56	MEDIUM
AWS S3 Bucket has an ACL defined which allows public WRITE access misconfiguration detected in code	APPSEC_AWS_57	HIGH
AWS EKS cluster does not have secrets encryption enabled misconfiguration detected in code	APPSEC_AWS_58	MEDIUM
AWS Redshift instances are not encrypted misconfiguration detected in code	APPSEC_AWS_64	LOW
AWS S3 bucket policy overly permissive to any principal misconfiguration detected in code	APPSEC_AWS_70	MEDIUM
DocumentDB is not encrypted at rest misconfiguration detected in code	APPSEC_AWS_74	MEDIUM
Athena Database is not encrypted at rest misconfiguration detected in code	APPSEC_AWS_77	MEDIUM
CodeBuild project encryption is disabled misconfiguration detected in code	APPSEC_AWS_78	MEDIUM
AWS MSK cluster encryption in transit is not enabled misconfiguration detected in code	APPSEC_AWS_81	MEDIUM
Athena workgroup does not prevent disabling encryption misconfiguration detected in code	APPSEC_AWS_82	MEDIUM
DocDB TLS is disabled misconfiguration detected in code	APPSEC_AWS_90	MEDIUM
S3 bucket policy allows lockout all but root user misconfiguration detected in code	APPSEC_AWS_93	MEDIUM
Glue Data Catalog encryption is not enabled misconfiguration detected in code	APPSEC_AWS_94	HIGH
Not all data stored in Aurora is securely encrypted at rest misconfiguration detected in code	APPSEC_AWS_96	HIGH
EFS volumes in ECS task definitions do not have encryption in transit enabled misconfiguration detected in code	APPSEC_AWS_97	HIGH
AWS Glue security configuration encryption is not enabled misconfiguration detected in code	APPSEC_AWS_99	HIGH
DocDB does not have audit logs enabled misconfiguration detected in code	APPSEC_AWS_104	LOW
AWS Redshift does not have require_ssl configured misconfiguration detected in code	APPSEC_AWS_105	LOW
AWS EBS volume region with encryption is disabled misconfiguration detected in code	APPSEC_AWS_106	LOW
Session Manager data is not encrypted in transit misconfiguration detected in code	APPSEC_AWS_112	MEDIUM
AWS DynamoDB encrypted using AWS owned CMK instead of AWS managed CMK misconfiguration detected in code	APPSEC_AWS_119	LOW
AWS RDS instance without Automatic Backup setting misconfiguration detected in code	APPSEC_AWS_133	LOW
AWS ElastiCache Redis cluster is not configured with automatic backup misconfiguration detected in code	APPSEC_AWS_134	LOW
EC2 EBS is not optimized misconfiguration detected in code	APPSEC_AWS_135	LOW
Unencrypted ECR repositories misconfiguration detected in code	APPSEC_AWS_136	LOW
AWS RDS cluster delete protection is disabled misconfiguration detected in code	APPSEC_AWS_139	LOW
Unencrypted RDS global clusters misconfiguration detected in code	APPSEC_AWS_140	LOW
Redshift clusters version upgrade is not default misconfiguration detected in code	APPSEC_AWS_141	LOW
AWS Redshift Cluster not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_142	LOW
S3 bucket lock configuration disabled misconfiguration detected in code	APPSEC_AWS_143	LOW
S3 bucket cross-region replication disabled misconfiguration detected in code	APPSEC_AWS_144	LOW
S3 buckets are not encrypted with KMS misconfiguration detected in code	APPSEC_AWS_145	LOW
AWS RDS DB snapshot is not encrypted misconfiguration detected in code	APPSEC_AWS_146	LOW
CodeBuild projects are not encrypted misconfiguration detected in code	APPSEC_AWS_147	MEDIUM
AWS Secrets Manager secret not encrypted by Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_149	LOW
Workspace user volumes are not encrypted misconfiguration detected in code	APPSEC_AWS_155	MEDIUM
Workspace root volumes are not encrypted misconfiguration detected in code	APPSEC_AWS_156	MEDIUM
RDS instances do not have Multi-AZ enabled misconfiguration detected in code	APPSEC_AWS_157	LOW
Athena Workgroup is not encrypted misconfiguration detected in code	APPSEC_AWS_159	MEDIUM
Timestream database is not encrypted with KMS CMK misconfiguration detected in code	APPSEC_AWS_160	MEDIUM
Dynamodb point in time recovery is not enabled for global tables misconfiguration detected in code	APPSEC_AWS_165	MEDIUM
Backup Vault is not encrypted at rest using KMS CMK misconfiguration detected in code	APPSEC_AWS_166	MEDIUM
QLDB ledger permissions mode is not set to STANDARD misconfiguration detected in code	APPSEC_AWS_170	MEDIUM
AWS EMR cluster is not configured with SSE KMS for data at rest encryption (Amazon S3 with EMRFS) misconfiguration detected in code	APPSEC_AWS_171	LOW
AWS QLDB ledger has deletion protection is disabled misconfiguration detected in code	APPSEC_AWS_172	LOW
AWS Lambda encryption settings environmental variable is not set properly misconfiguration detected in code	APPSEC_AWS_173	LOW
AWS Kinesis Video Stream not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_177	LOW
AWS fx ontap file system not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_178	LOW
AWS FSX Windows filesystem not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_179	LOW
AWS Image Builder component not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_180	LOW
AWS S3 Object Copy not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_181	LOW
AWS Doc DB not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_182	LOW
AWS EBS Snapshot Copy not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_183	LOW
AWS Elastic File System (EFS) is not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_184	LOW
AWS Kinesis streams encryption is using default KMS keys instead of Customer's Managed Master Keys misconfiguration detected in code	APPSEC_AWS_185	LOW
AWS S3 bucket Object not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_186	LOW
AWS EBS Volume not encrypted using Customer Managed Key misconfiguration detected in code	APPSEC_AWS_189	LOW
AWS lustre file system not configured with CMK key misconfiguration detected in code	APPSEC_AWS_190	LOW
AWS Elasticache replication group not configured with CMK key misconfiguration detected in code	APPSEC_AWS_191	LOW
AWS Glue component is not associated with a security configuration misconfiguration detected in code	APPSEC_AWS_195	LOW
AWS Image Builder Distribution Configuration is not encrypting AMI by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_199	LOW
AWS Image Recipe EBS Disk are not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_200	LOW
AWS MemoryDB is not encrypted at rest by AWS' Key Management Service KMS using CMKs misconfiguration detected in code	APPSEC_AWS_201	LOW
AWS MemoryDB data is not encrypted in transit misconfiguration detected in code	APPSEC_AWS_202	LOW
AWS FSX openzfs is not encrypted by AWS' Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_203	LOW
AWS AMIs are not encrypted by Key Management Service (KMS) using Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_204	LOW
AWS MQ Broker is not encrypted by Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_209	LOW
AWS RDS does not use a modern CaCert misconfiguration detected in code	APPSEC_AWS_211	LOW
AWS EBS Volume is not encrypted by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_212	LOW
AWS Appsync API Cache is not encrypted at rest misconfiguration detected in code	APPSEC_AWS_214	LOW
AWS Appsync API Cache is not encrypted in transit misconfiguration detected in code	APPSEC_AWS_215	LOW
AWS CodePipeline artifactStore is not encrypted by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_219	LOW
AWS Code Artifact Domain is not encrypted by KMS using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_221	LOW
AWS copied AMIs are not encrypted misconfiguration detected in code	APPSEC_AWS_235	LOW
AWS AMI copying does not use a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_236	LOW
AWS Kinesis Firehose's delivery stream is not encrypted misconfiguration detected in code	APPSEC_AWS_240	LOW
AWS Kinesis Firehose Delivery Streams are not encrypted with CMK misconfiguration detected in code	APPSEC_AWS_241	LOW
AWS replicated backups are not encrypted at rest by Key Management Service (KMS) using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_245	LOW
AWS RDS Cluster activity streams are not encrypted by Key Management Service (KMS) using Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_246	LOW
AWS all data stored in the Elasticsearch domain is not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_247	LOW
AWS RDS PostgreSQL exposed to local file read vulnerability misconfiguration detected in code	APPSEC_AWS_250	MEDIUM
AWS DLM cross-region events are not encrypted misconfiguration detected in code	APPSEC_AWS_253	LOW
AWS DLM cross-region events are not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_254	LOW
AWS DLM-cross region schedules are not encrypted misconfiguration detected in code	APPSEC_AWS_255	LOW
AWS DLM cross-region schedules are not encrypted using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_256	LOW
AWS App Flow flow does not use Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_263	LOW
AWS App Flow connector profile does not use Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_264	LOW
AWS Keyspace Table does not use Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_265	LOW
AWS RDS DB snapshot does not use Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_266	LOW
Comprehend Entity Recognizer's model is not encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_267	HIGH
Comprehend Entity Recognizer's volume is not encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_268	HIGH
Connect Instance Kinesis Video Stream Storage Config is not using CMK for encryption misconfiguration detected in code	APPSEC_AWS_269	MEDIUM
The Connect Instance S3 Storage Configuration utilizes Customer Managed Key. misconfiguration detected in code	APPSEC_AWS_270	HIGH
DynamoDB table replica does not use CMK KMS encryption misconfiguration detected in code	APPSEC_AWS_271	HIGH
MemoryDB snapshot is not encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_278	HIGH
Neptune snapshot is not securely encrypted misconfiguration detected in code	APPSEC_AWS_279	HIGH
Neptune snapshot is encrypted by KMS using a customer managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_280	HIGH
RedShift snapshot copy is not encrypted by KMS using a customer managed Key (CMK). misconfiguration detected in code	APPSEC_AWS_281	HIGH
Redshift Serverless namespace is not encrypted by KMS using a customer managed key (CMK) misconfiguration detected in code	APPSEC_AWS_282	HIGH
DocDB Global Cluster is not encrypted at rest misconfiguration detected in code	APPSEC_AWS_292	HIGH
AWS database instances do not have deletion protection enabled misconfiguration detected in code	APPSEC_AWS_293	MEDIUM
CloudTrail Event Data Store does not use Customer Managed Keys (CMKs) misconfiguration detected in code	APPSEC_AWS_294	LOW
DataSync Location Object Storage exposes secrets misconfiguration detected in code	APPSEC_AWS_295	HIGH
DMS endpoint is not using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_296	HIGH
EventBridge Scheduler Schedule is not using a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_297	HIGH
The DMS S3 does not use a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_298	HIGH
S3 lifecycle configuration does not set a period for aborting failed uploads misconfiguration detected in code	APPSEC_AWS_300	MEDIUM
Secrets Manager secrets are not rotated within 90 days misconfiguration detected in code	APPSEC_AWS_304	HIGH
CodeBuild S3 logs are not encrypted misconfiguration detected in code	APPSEC_AWS_311	HIGH
RDS Aurora Clusters do not have backtracking enabled misconfiguration detected in code	APPSEC_AWS_326	MEDIUM
AWS RDS DB cluster is encrypted using default KMS key instead of CMK misconfiguration detected in code	APPSEC_AWS_327	LOW
EFS Access Points are not enforcing a root directory misconfiguration detected in code	APPSEC_AWS_329	HIGH
User identity should be enforced by EFS access points misconfiguration detected in code	APPSEC_AWS_330	MEDIUM
SSM parameters are not utilizing KMS CMK. misconfiguration detected in code	APPSEC_AWS_337	HIGH
Amazon Redshift clusters do not have automatic snapshots enabled misconfiguration detected in code	APPSEC_AWS_343	HIGH
Network firewall encryption does not use a CMK misconfiguration detected in code	APPSEC_AWS_345	HIGH
Network Firewall Policy does not define an encryption configuration that uses a CMK misconfiguration detected in code	APPSEC_AWS_346	HIGH
Neptune is not encrypted with KMS using a customer managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_347	HIGH
AWS EMR cluster is not enabled with local disk encryption misconfiguration detected in code	APPSEC_AWS_349	LOW
Security configuration of the EMR Cluster does not ensure the encryption of EBS disks misconfiguration detected in code	APPSEC_AWS_350	HIGH
AWS EMR cluster is not enabled with data encryption in transit misconfiguration detected in code	APPSEC_AWS_351	LOW
RDS Performance Insights are not encrypted using KMS CMKs misconfiguration detected in code	APPSEC_AWS_354	HIGH
AWS DocumentDB clusters have backup retention period less than 7 days misconfiguration detected in code	APPSEC_AWS_360	LOW
AWS Neptune DB clusters have backup retention period less than 7 days misconfiguration detected in code	APPSEC_AWS_361	LOW
Clusters of Neptune DB do not replicate tags to snapshots misconfiguration detected in code	APPSEC_AWS_362	LOW
Bedrock Agent not encrypted with Customer Master Key (CMK) misconfiguration detected in code	APPSEC_AWS_373	MEDIUM
AWS S3 bucket has global view ACL permissions enabled misconfiguration detected in code	APPSEC_AWS_375	LOW
AWS CodeGuru Reviewer repository association does not use a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_AWS_381	LOW
Not all data stored in the EBS snapshot is securely encrypted misconfiguration detected in code	APPSEC_AWS_CUSTOM_3	MEDIUM
Azure VM data disk is not encrypted with ADE/CMK misconfiguration detected in code	APPSEC_AZURE_2	LOW
Azure Storage Account without Secure transfer enabled misconfiguration detected in code	APPSEC_AZURE_3	LOW
Azure PostgreSQL database server with log checkpoints parameter disabled misconfiguration detected in code	APPSEC_AZURE_30	LOW
Azure PostgreSQL database server with log connections parameter disabled misconfiguration detected in code	APPSEC_AZURE_31	LOW
Azure PostgreSQL database server with connection throttling parameter is disabled misconfiguration detected in code	APPSEC_AZURE_32	LOW
Azure Storage Account 'Trusted Microsoft Services' access not enabled misconfiguration detected in code	APPSEC_AZURE_36	LOW
Azure Key Vault Keys does not have expiration date misconfiguration detected in code	APPSEC_AZURE_40	HIGH
Azure Key Vault secrets does not have expiration date misconfiguration detected in code	APPSEC_AZURE_41	HIGH
Azure Key Vault is not recoverable misconfiguration detected in code	APPSEC_AZURE_42	LOW
Storage Account name does not follow naming rules misconfiguration detected in code	APPSEC_AZURE_43	LOW
Azure Storage Account using insecure TLS version misconfiguration detected in code	APPSEC_AZURE_44	LOW
MSSQL is not using the latest version of TLS encryption misconfiguration detected in code	APPSEC_AZURE_52	MEDIUM
Azure Automation account variables are not encrypted misconfiguration detected in code	APPSEC_AZURE_73	LOW
Azure Data Explorer cluster disk encryption is disabled misconfiguration detected in code	APPSEC_AZURE_74	LOW
Azure Data Explorer cluster double encryption is disabled misconfiguration detected in code	APPSEC_AZURE_75	LOW
Azure Batch account does not use key vault to encrypt data misconfiguration detected in code	APPSEC_AZURE_76	LOW
App services do not use Azure files misconfiguration detected in code	APPSEC_AZURE_88	LOW
Not only SSL are enabled for cache for Redis misconfiguration detected in code	APPSEC_AZURE_91	LOW
Managed disks do not use a specific set of disk encryption sets for customer-managed key encryption misconfiguration detected in code	APPSEC_AZURE_93	LOW
My SQL server disables geo-redundant backups misconfiguration detected in code	APPSEC_AZURE_94	LOW
MySQL server disables infrastructure encryption misconfiguration detected in code	APPSEC_AZURE_96	LOW
Virtual machine scale sets do not have encryption at host enabled misconfiguration detected in code	APPSEC_AZURE_97	LOW
Cosmos DB Accounts do not have CMKs encrypting data at rest misconfiguration detected in code	APPSEC_AZURE_100	LOW
PostgreSQL server enables geo-redundant backups misconfiguration detected in code	APPSEC_AZURE_102	LOW
Unencrypted Data Lake Store accounts misconfiguration detected in code	APPSEC_AZURE_105	MEDIUM
Azure Key Vault Purge protection is not enabled misconfiguration detected in code	APPSEC_AZURE_110	LOW
Key vault does not enable soft-delete misconfiguration detected in code	APPSEC_AZURE_111	LOW
Key vault key is not backed by HSM misconfiguration detected in code	APPSEC_AZURE_112	LOW
Key vault secrets do not have content_type set misconfiguration detected in code	APPSEC_AZURE_114	LOW
Azure AKS cluster is not configured with disk encryption set misconfiguration detected in code	APPSEC_AZURE_117	LOW
MariaDB server does not enable geo-redundant backups misconfiguration detected in code	APPSEC_AZURE_129	LOW
PostgreSQL server does not enable infrastructure encryption misconfiguration detected in code	APPSEC_AZURE_130	LOW
Azure Cosmos DB key based authentication is enabled misconfiguration detected in code	APPSEC_AZURE_132	LOW
Azure PostgreSQL Flexible Server does not enable geo-redundant backups misconfiguration detected in code	APPSEC_AZURE_136	LOW
Azure PostgreSQL does not use the latest version of TLS encryption misconfiguration detected in code	APPSEC_AZURE_147	LOW
Azure Windows VM does not enable encryption misconfiguration detected in code	APPSEC_AZURE_151	LOW
Geo-Replicated Not Enabled for Azure Container Registry (ACR) misconfiguration detected in code	APPSEC_AZURE_165	MEDIUM
Azure Container Registry (ACR) Does Not Have a Quarantine Policy Enabled misconfiguration detected in code	APPSEC_AZURE_166	MEDIUM
Azure Container Registry (ACR) Doesn't Have a Retention Policy Set misconfiguration detected in code	APPSEC_AZURE_167	LOW
AKS Secrets Store Without Auto-Rotation misconfiguration detected in code	APPSEC_AZURE_172	MEDIUM
Azure Data Explorer without SLA misconfiguration detected in code	APPSEC_AZURE_180	LOW
App Configuration Encryption Block Not Set misconfiguration detected in code	APPSEC_AZURE_186	MEDIUM
App Configuration Without Purge Protection Enabled misconfiguration detected in code	APPSEC_AZURE_187	MEDIUM
Azure Service Bus Doesn't Use Double Encryption misconfiguration detected in code	APPSEC_AZURE_199	MEDIUM
Azure Service Bus Doesn't Use Customer-Managed Key Encryption misconfiguration detected in code	APPSEC_AZURE_201	MEDIUM
Azure Storage Accounts Without Proper Replication misconfiguration detected in code	APPSEC_AZURE_206	LOW
Azure Cognitive Search Without SLA Index Updates misconfiguration detected in code	APPSEC_AZURE_208	LOW
Azure Cognitive Search Without SLA for Search Index Queries misconfiguration detected in code	APPSEC_AZURE_209	LOW
App Service Plan is not zone redundant misconfiguration detected in code	APPSEC_AZURE_225	MEDIUM
AKS cluster not encrypting temp disks, caches, and data flows misconfiguration detected in code	APPSEC_AZURE_227	HIGH
Azure Event Hub Namespace is not zone redundant misconfiguration detected in code	APPSEC_AZURE_228	MEDIUM
Azure SQL Database Namespace is not zone redundant misconfiguration detected in code	APPSEC_AZURE_229	HIGH
Standard Replication is not enabled misconfiguration detected in code	APPSEC_AZURE_230	HIGH
App Service Environment is not zone redundant misconfiguration detected in code	APPSEC_AZURE_231	MEDIUM
Azure Container Registry (ACR) not zone redundant misconfiguration detected in code	APPSEC_AZURE_233	LOW
GCP SQL database instance does not have backup configuration enabled misconfiguration detected in code	APPSEC_GCP_14	HIGH
GCP cloud storage bucket with uniform bucket-level access disabled misconfiguration detected in code	APPSEC_GCP_29	LOW
GCP VM disks not encrypted with Customer-Supplied Encryption Keys (CSEK) misconfiguration detected in code	APPSEC_GCP_37	LOW
Boot disks for instances do not use CSEKs misconfiguration detected in code	APPSEC_GCP_38	HIGH
GCP KMS Symmetric key not rotating in every 90 days misconfiguration detected in code	APPSEC_GCP_43	LOW
GCP MySQL instance with local_infile database flag is not disabled misconfiguration detected in code	APPSEC_GCP_50	LOW
GCP SQL Server instance database flag 'cross db ownership chaining' is enabled misconfiguration detected in code	APPSEC_GCP_58	LOW
GCP SQL Server instance database flag 'contained database authentication' is enabled misconfiguration detected in code	APPSEC_GCP_59	LOW
GCP Storage Bucket does not have Access and Storage Logging enabled misconfiguration detected in code	APPSEC_GCP_62	LOW
GCP storage bucket is logging to itself misconfiguration detected in code	APPSEC_GCP_63	LOW
GCP Cloud storage does not have versioning enabled misconfiguration detected in code	APPSEC_GCP_78	LOW
GCP Big Query Tables are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code	APPSEC_GCP_80	LOW
GCP Big Query Datasets are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code	APPSEC_GCP_81	LOW
GCP KMS keys are not protected from deletion misconfiguration detected in code	APPSEC_GCP_82	LOW
GCP Pub/Sub Topics are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code	APPSEC_GCP_83	LOW
GCP Artifact Registry repositories are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code	APPSEC_GCP_84	LOW
GCP Big Table Instances are not encrypted with Customer Supplied Encryption Keys (CSEKs) misconfiguration detected in code	APPSEC_GCP_85	LOW
GCP data flow jobs are not encrypted with Customer Supplied Encryption Keys (CSEK) misconfiguration detected in code	APPSEC_GCP_90	LOW
GCP Dataproc Cluster not configured with Customer-Managed Encryption Key (CMEK) misconfiguration detected in code	APPSEC_GCP_91	LOW
GCP Spanner Database is not encrypted with Customer Supplied Encryption Keys (CSEKs) misconfiguration detected in code	APPSEC_GCP_93	LOW
GCP Memorystore for Redis does not use intransit encryption misconfiguration detected in code	APPSEC_GCP_97	LOW
Deletion protection for Spanner Database is disabled misconfiguration detected in code	APPSEC_GCP_119	MEDIUM
Spanner Database does not have drop protection enabled misconfiguration detected in code	APPSEC_GCP_120	HIGH
BigQuery tables do not have deletion protection enabled misconfiguration detected in code	APPSEC_GCP_121	MEDIUM
Big Table Instances do not have deletion protection enabled misconfiguration detected in code	APPSEC_GCP_122	MEDIUM
GitHub Actions Environment Secrets defined in Terraform are not encrypted misconfiguration detected in code	APPSEC_GIT_4	HIGH
Gitlab project defined in Terraform does not prevent secrets misconfiguration detected in code	APPSEC_GLB_3	MEDIUM
The --etcd-certfile and --etcd-keyfile arguments are not set appropriately misconfiguration detected in code	APPSEC_K8S_99	HIGH
Encryption providers are not appropriately configured misconfiguration detected in code	APPSEC_K8S_104	HIGH
The --cert-file and --key-file arguments are not set appropriately misconfiguration detected in code	APPSEC_K8S_116	HIGH
The --peer-cert-file and --peer-key-file arguments are not set appropriately misconfiguration detected in code	APPSEC_K8S_119	HIGH
OCI Block Storage Block Volume does not have backup enabled misconfiguration detected in code	APPSEC_OCI_2	LOW
OCI Block Storage Block Volumes are not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_OCI_3	LOW
OCI Object Storage bucket does not emit object events misconfiguration detected in code	APPSEC_OCI_7	LOW
OCI Object Storage Bucket has object Versioning disabled misconfiguration detected in code	APPSEC_OCI_8	LOW
OCI Object Storage Bucket is not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_OCI_9	LOW
OCI Object Storage bucket is publicly accessible misconfiguration detected in code	APPSEC_OCI_10	HIGH
OCI File Storage File Systems are not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC_OCI_15	LOW
Not only encrypted EBS volumes are attached to EC2 instances misconfiguration detected in code	APPSEC2_AWS_2	LOW
RDS clusters do not have an AWS Backup backup plan misconfiguration detected in code	APPSEC2_AWS_8	LOW
EBS does not have an AWS Backup backup plan misconfiguration detected in code	APPSEC2_AWS_9	LOW
AWS DynamoDB table Auto Scaling not enabled misconfiguration detected in code	APPSEC2_AWS_16	LOW
Amazon EFS does not have an AWS Backup backup plan misconfiguration detected in code	APPSEC2_AWS_18	LOW
AWS SSM Parameter is not encrypted misconfiguration detected in code	APPSEC2_AWS_34	LOW
AWS ElastiCache Redis cluster with Multi-AZ Automatic Failover feature set to disabled misconfiguration detected in code	APPSEC2_AWS_50	LOW
AWS EMR cluster is not configured with security configuration misconfiguration detected in code	APPSEC2_AWS_55	LOW
AWS Secret Manager Automatic Key Rotation is not enabled misconfiguration detected in code	APPSEC2_AWS_57	LOW
AWS Neptune cluster deletion protection is disabled misconfiguration detected in code	APPSEC2_AWS_58	LOW
AWS S3 bucket access control lists (ACLs) in use misconfiguration detected in code	APPSEC2_AWS_65	LOW
AWS RDS database instance not configured with encryption in transit misconfiguration detected in code	APPSEC2_AWS_69	MEDIUM
AWS SQS queue encryption using default KMS key instead of CMK misconfiguration detected in code	APPSEC2_AWS_73	LOW
Storage for critical data are not encrypted with Customer Managed Key misconfiguration detected in code	APPSEC2_AZURE_1	HIGH
Azure Data Explorer encryption at rest does not use a customer-managed key misconfiguration detected in code	APPSEC2_AZURE_11	LOW
Virtual Machines are not backed up using Azure Backup misconfiguration detected in code	APPSEC2_AZURE_12	LOW
Unattached disks are not encrypted misconfiguration detected in code	APPSEC2_AZURE_14	LOW
Azure data factories are not encrypted with a customer-managed key misconfiguration detected in code	APPSEC2_AZURE_15	LOW
MySQL server does not enable customer-managed key for encryption misconfiguration detected in code	APPSEC2_AZURE_16	LOW
PostgreSQL server does not enable customer-managed key for encryption misconfiguration detected in code	APPSEC2_AZURE_17	LOW
Azure Storage account Encryption CMKs Disabled misconfiguration detected in code	APPSEC2_AZURE_18	LOW
Azure SQL database Transparent Data Encryption (TDE) encryption disabled misconfiguration detected in code	APPSEC2_AZURE_25	LOW
Azure MariaDB database server not using latest TLS version misconfiguration detected in code	APPSEC2_AZURE_37	LOW
Azure Storage account soft delete is disabled misconfiguration detected in code	APPSEC2_AZURE_38	LOW
GCP SQL MySQL DB instance point-in-time recovery backup (Binary logs) is not enabled misconfiguration detected in code	APPSEC2_GCP_20	LOW
Vertex AI instance disks not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_21	MEDIUM
Document AI Processors not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_22	MEDIUM
Document AI Warehouse Location is not configured to use a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_23	MEDIUM
Vertex AI workbench instance disks not encrypted with a Customer Managed Key (CMK) misconfiguration detected in code	APPSEC2_GCP_27	MEDIUM
OCI File Storage File System access is not restricted to root users misconfiguration detected in code	APPSEC2_OCI_4	MEDIUM
OCI Kubernetes Engine Cluster boot volume is not configured with in-transit data encryption misconfiguration detected in code	APPSEC2_OCI_5	LOW