AWS > EC2 >

Amazon EBS Public Snapshots

HIGH

Source

CloudSploit

amazon-ebs-public-snapshots

management console

Amazon EBS Public Snapshots

Ensure that Amazon EBS volume snapshots are not shared to all AWS accounts.

AWS Elastic Block Store (EBS) volume snapshots should not be not publicly shared with other AWS account to avoid data exposure.

Recommended Actions

Modify the permissions of public snapshots to remove public access.

Links

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-modifying-snapshot-permissions.html

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.