Skip to content

AWS Docker Config Exposure

Description

Detects publicly accessible AWS Docker configuration files.

Remediation

To remediate AWS Docker Config Exposure, follow these steps:

  1. Rotate any exposed credentials immediately to prevent unauthorized access.
  2. Audit your AWS IAM roles and policies to ensure they follow the principle of least privilege.
  3. Review your Docker configurations and ensure that sensitive data is not hardcoded in Dockerfiles or image configurations.
  4. Use AWS Secrets Manager or Parameter Store to manage secrets and credentials securely.
  5. Implement proper logging and monitoring to detect any future exposures or unauthorized access attempts.
  6. Update your security policies and training to prevent similar incidents.
  7. If necessary, conduct a thorough security audit of your environment to identify and fix any related vulnerabilities.

Configuration

Identifier: information_disclosure/aws_docker_config_exposure

Examples

Ignore this check

checks:
  information_disclosure/aws_docker_config_exposure:
    skip: true

Score

  • Escape Severity:

Compliance

  • OWASP: API8:2023

  • pci: 2.2.2

  • gdpr: Article-32
  • soc2: CC6
  • psd2: Article-95
  • iso27001: A.12.6
  • nist: SP800-190
  • fedramp: AC-6

Classification

  • CWE: 200

Score