Security Test: AWS Config Exposure¶

Description¶

Default Severity: info

This vulnerability occurs when AWS configuration files are accidentally exposed, potentially revealing secrets like access keys and other sensitive details about your AWS setup. If an attacker sees these files, they might gain free rein over your cloud resources, leading to data breaches or unauthorized actions. Often, this happens because file permissions or directory settings aren't set up correctly, which developers sometimes overlook in the rush to get features working. The risk is high because it can open the door to serious security failures if not addressed promptly.

Configuration¶

Identifier: information_disclosure/aws_config_exposure

Examples¶

All configuration available:

checks:
  information_disclosure/aws_config_exposure:
    skip: false # default

Compliance and Standards¶