Table of Contents

minLevel	1
maxLevel	7

May 16 2022

Cloud Platform	Name	Change Type	Correlating Rules
AWS	secretsmanager_enable_encryption cloudbot	New	D9.AWS.CRY.50
GCP	cloud_sql_delete_public_ip_ranges	New	D9.GCP.NET.23
GCP	storage_bucket_remove_allow_public_access_rules	New	D9.GCP.IAM.09
GCP	subnet_set_private_google_access_on	New	D9.GCP.NET.14
GCP	gke_subnet_set_private_google_access_on	New	D9.GCP.NET.19
GCP	vm_instance_disable_public_ip	New	D9.GCP.NET.04
GCP	gke_enable_master_authorized_networks	New	D9.GCP.NET.10

December 1 2021

Cloud Platform	Name	Change Type	Correlating Rules
AWS	route53domain_enable_transfer_lock	New	D9.AWS.DNS.03
AWS	route53domain_enable_auto_renew	New	D9.AWS.DNS.02

Cloud Platform	Name	Change Type	Correlating Rules
AWS	ecs_service_role_detach_inline_policy	New	D9.AWS.IAM.47
AWS	iam_generate_credential_report	New	D9.AWS.PRE.01
AWS	iam_role_clone_with_non_enumerable_name	New	D9.AWS.IAM.60
AWS	kms_cmk_enable_key	New	D9.AWS.OPE.06
AWS	lambda_tag	New	D9.AWS.AS.03
AWS	load_balancer_enable_access_logs	New	D9.AWS.LOG.13 D9.AWS.LOG.15
AWS	network_firewall_enable_logging	New	D9.AWS.LOG.20 D9.AWS.LOG.21
AWS	s3_limit_access	New	D9.AWS.IAM.36 D9.AWS.IAM.37 D9.AWS.IAM.38 D9.AWS.IAM.40 D9.AWS.IAM.41
AWS	sns_topic_delete	New	D9.AWS.MON.19
AWS	sqs_configure_dlq	New	D9.AWS.OPE.12 D9.AWS.OPE.19
AWS	sqs_enforce_sse	New	D9.AWS.CRY.44
Azure	cosmos_db_account_add_tag	New	D9.AZU.AS.02

...