Checks if aws config delivery channel not enabled

Checks if CloudTrail trails are integrated with CloudWatch Logs

Checks if a log metric filter and alarm exist for changes to Network Access Control Lists (NACL)

Checks if a log metric filter and alarm exist for usage of "root" account

Checks if IAM password policy require at least one symbol

Checks if CloudTrail is enabled in all regions

Checks if a log metric filter and alarm exist for CloudTrail configuration changes

Checks if a log metric filter and alarm exist for AWS Management Console authentication failures

Checks for log metric filter and Management Console sign-in without MFA alarm in your aws account.

It is AWS best practice to get aware of Security Groups which allows HTTPS access from public IP to reduce possibility of breach. Allowing unrestricted HTTPs access can increase threats like hacking, denial-of-service (DoS) attacks and loss of data.

Sends a report of IAM users which have Admin access. Administrator access should be given to trusted users only.

Checks if a log metric filter and alarm exist for disabling or scheduled deletion of customer created CMKs

Checks if AWS config configuration recorder not enabled

Checks for log metric filter and Management Console sign-in without MFA alarm in your aws account

Checks if a log metric filter and alarm exist for changes to network gateways