Overview
This report assesses AWS resources against 17 enabled configuration checks across the areas below. It identifies passed and failed checks, unavailable evidence, and affected resources so you can prioritize configuration changes and investigate operational gaps.
SNS Topics
- SNS Topic Encryption Enabled
- No Public SNS Topics
- SNS Topic Message Delivery Notification Enabled Check
SQS Queues
- SQS Queue Encryption Enabled
- No Public SQS Queues
EventBridge Schema Registries
- Custom Schema Registry Policy Attachment Check
EventBridge Event Buses
- Custom EventBridge Event Bus Policy Attachment Check
EventBridge Global Endpoints
- EventBridge Global Endpoint Event Replication Enabled Check
Step Functions State Machines
- AWS Step Functions State Machine Logging Enabled Check
Kinesis Data Streams
- Kinesis Data Stream Server Side Encryption Enabled
- Kinesis Stream Backup Retention Check
- Kinesis streams should have an adequate data retention period
Transfer Family Servers
- Ensure AWS Transfer Family Server Does Not Use FTP
Transfer Family Connectors
- Transfer Family connectors should have logging enabled
Data Firehose Delivery Streams
- Firehose delivery streams should be encrypted at rest
SES Configuration Sets
- SES configuration sets should have TLS enabled for sending emails
Directory Service Directories
- Directory Service directories should have SNS notification enabled
The report includes actionable findings and remediation guidance for supported checks.