Page Comparison

Description: Added support for Azure User Assigned Identity in compliance engine and protected assets.
Case ID: INT-2177
Known limitations: N/A
Affected Components:

Description: Fixed bug in 'combinedPolicies' property in AWS IAM Role, AWS IAM User and AWS IAM Group in Compliance Engine & Protected Assets.
Case ID: DFT-1159
Known limitations: N/A 
Affected Components:

Description: Added "Tags" property to AWS ECS Cluster in Compliance Engine & Protected Assets.
Case ID: IN-6474, DFR-2559
Known limitations: N/A 
Affected Components:

Description: Added "Tags" property to AWS WAF Regional V2 in Compliance Engine & Protected Assets.
Case ID: IN-6474
Known limitations: N/A 
Affected Components:

Description: Added "Tags" property to AWS IAM Server Certificate in Compliance Engine & Protected Assets.
Case ID: IN-6474
Known limitations: N/A 
Affected Components:

Description: Added "Tags" property to AWS DMS Endpoint in Compliance Engine & Protected Assets.
Case ID: IN-6474
Known limitations: N/A 
Affected Components:

Description: The first release of the AWS PCI-DSS v4.0 Ruleset. AWS and GCP rules improvements. AZURE rules deprecation (due to refactoring). A complete list can be found here.
Case ID: IN-6644
Known limitations: N/A 
Affected Components:

Description: The first release of the GCP CIS v2.0 Ruleset. AWS and AZURE rules improvements. AWS rules deprecation (due to duplication). A complete list can be found here.
Case ID: IN-6530
Known limitations: N/A 
Affected Components:

Description: Updating Severity to Intelligence rules. A list can be found here
Case ID: IN-4677
Known limitations: N/A
Affected Components:

Description: Updating Intelligence rules for Azure and Kubernetes. A list can be found here
Case ID: IN-6372
Known limitations: N/A
Affected Components:

Description: Added "dbSnapshotAttributes" property to AWS RDS DB Snapshot in Compliance Engine & Protected Assets.
Case ID: DFR-2167
Known limitations: N/A 
Affected Components:

Description: Added "dbClusterSnapshotAttributes" property to AWS RDS DB Cluster Snapshot in Compliance Engine & Protected Assets.
Case ID: DFR-2167
Known limitations: N/A 
Affected Components:

Description: Added support for Azure Active Directory Access Reviews Schedule Definition in compliance engine and protected assets.
Case ID: IN-5927
Known limitations: N/A
Affected Components:

Description: New Kubernetes rules; AWS and AZURE and Kubernetes rules improvements. 1 Azure rules was deprecated. A complete list can be found here.

D9.AZU.AKS.03 - The Pod security feature for Azure Kubernetes Service (AKS) service was deprecated
Case ID: IN-6479, DFT-2292
Known limitations: N/A 
Affected Components:

Description: Fix Service Account’s ‘Last Used’ column change on details update in the UI.
Case ID: DFT-2243,PLAT-6628
Known limitations: N/A
Affected Components:

Description: Added "CreateVolumePermissions" property to AWS EBS Snapshot in Compliance Engine & Protected Assets.
Case ID: DFR-1644
Known limitations: The property is currently being updated once in 6 hours, due to performance issue.
Affected Components:

Description: Added support for Azure Active Directory Security Defaults in compliance engine and protected assets.
Case ID: IN-5899
Known limitations: N/A
Affected Components:

Description: Added support for Azure Active Directory Authorization Policy in compliance engine and protected assets.
Case ID: IN-5897
Known limitations: N/A
Affected Components:

Description:

• Added CIEM 'IAM Sensitivity' score into the Risk Score calculation for AWS EC2 Instance, Lambda and IAM Role.

• IAM Sensitivity is a number from 0 - 100 and represents the potential damage caused to the cloud environment due to IAM permissions granted.

• This number will modify the asset's risk score as it relates to the impact of a potential attack on the asset.

Case ID: SEC-397
Known limitations: N/A 
Affected Components:

Description: AWS and AZURE rules improvements. A complete list can be found here.
Case ID: IN-6408, DFT-2307
Known limitations: N/A 
Affected Components:

Description: Added "ownerId" property to AWS Security Group in Compliance Engine & Protected Assets.
Case ID: DFR-2574
Known limitations: N/A 
Affected Components: