Dash AWS Security Scanning
See how Dash cloud security scanning enables teams to automate cloud security and compliance.
AWS Cloud Security Scanning
Organizations building and managing production services in Amazon Web Services must set proper security standards and be aware of cloud security configuration.
Under the AWS cloud shared responsibility model, customers are responsible for implementing and maintaining cloud security settings such as access control, audit logging, backup and disaster recovery (DR), firewall/networking and encryption in order to maintain security and compliance with standards such as HIPAA, SOC 2, and HITRUST.
Dash ComplyOps provides security scanning and continuous compliance monitoring that makes it easy for teams to manage cloud compliance. Teams can run hundreds of Dash provided security scans and security controls.
AWS Security Scanning With Dash ComplyOps
Dash continuous compliance monitoring and AWS security scanning provides cloud security teams with hundreds of cloud security and compliance scans for AWS. Managed scans cover a wide range of cloud security best practices and regulatory compliance standards such as HIPAA, SOC 2, and HITRUST across AWS cloud services. Managed scans are available in Dash ComplyOps and may be automatically enabled to identify cloud security issues.
Amazon EC2
- Security Group: All Ports Open To All
- Security Group: DNS port open to all
- Security Group: FTP port open
- Security Group: MsSQL port open to all
- Security Group: Unrestricted network traffic within security group
- Security Group: Use of port ranges
- Unencrypted EBS volumes
Amazon IAM
- Password expiration disabled
- Minimum password length is too short
- Lack of key rotation
- Role uses Inline policy
- Managed policy allows NotActions
- Managed policy allows sts:AssumeRole *
Amazon Redshift
- Redshift cluster publicly accessible
- Redshift cluster database unencrypted
- Redshift Security Group allows all
Amazon RDS
- RDS backup disabled
- RDS instance storage unencrypted
- RDS Security Group allows all IP addresses
Amazon S3
- S3 Bucket world-writable
- S3 Bucket world-readable
- S3 Bucket access logging disabled
Amazon SNS
- AddPermission authorized to all principals
- DeleteTopic authorized to all principals
- Publish authorized to all principals
Additional AWS Cloud Service Scans
Dash is continually adding additional compliance scans and cloud services to our scanning and continuous compliance monitoring offerings. Below is a list of some of the other AWS services Dash provides security scanning and monitoring insight.
- Amazon CloudFormation
- Amazon CloudTrail
- Amazon CloudWatch
- Amazon Elastic Load Balancer (ELB/ELBv2)
- Amazon Lambda
- Amazon Route53
- Amazon SES
- Amazon SNS
- Amazon SQS
- Amazon VPC
Connect Dash Cloud Security Scanning To Your Security Program
Security teams can extend Dash ComplyOps scanning and monitoring capabilities by connecting Dash security and compliance findings into existing security solutions and workflow tools.
JIRA
Connect Dash security findings to your JIRA boards and existing security workflow. Manage Dash issues to within existing DevOps team systems.
Compliance Calendar
Setup a compliance calendar and track technical and administrative security tasks with Dash ComplyOps Compliance Tasks module.
Administrative Polices
Tie your administrative policies to cloud technical controls. Cloud security monitoring can be configured to enforce standards established through administrative policies and procedures.
AWS Cloud Security With Dash ComplyOps
Dash ComplyOps provides teams with a solution for building and monitoring security programs in Amazon Web Services. ComplyOps enables organizations to create robust cloud security policies and security programs and then enforces polices through compliance monitoring. ComplyOps provides AWS security scanner functionality and allows teams to find and resolve potential security and compliance issues.
Automated Cloud Security Monitoring
Dash continuous compliance monitoring provides teams with automated security scanning of your AWS cloud environments. Dash identifies security issues within individual AWS services such as Amazon EC2, S3, RDS and IAM and provides steps for remediating cloud issues. Unlike traditional single point-in-time audits, teams can use ComplyOps to continually audit and monitor cloud security issues and ensure the integrity of your cloud security posture.
Streamlined Compliance
Dash security policies and cloud scanning is built around HIPAA, HITRUST and SOC 2 compliance standards, so your team can easily manage regulatory compliance in AWS. Each security scan is mapped to compliance standards so your team can see determine your state of compliance in AWS. Dash makes it easy to develop a robust cloud compliance program and enforce security standards across AWS resources to meet compliance requirements.
AWS Security Reports
Dash cloud security reports provide security teams with a solution for validating cloud security efforts. Teams can utilize AWS cloud security reports to see security safeguards, determine gaps and help teams answer security risk assessments (SRAs).
Cloud Native Security
Dash is built for AWS cloud environments. Teams can utilize the Dash ComplyOps platform to monitor and maintain security across multiple AWS accounts and environments. Dash operates as a true nerve-center for AWS security and compliance.
Implement Dash AWS Security Scanning
Automate cloud security and compliance programs in AWS