resource_type
stringclasses
4 values
name
stringclasses
8 values
configuration
stringclasses
8 values
posture
stringclasses
2 values
expected_finding
stringclasses
5 values
s3_bucket
acme-internal-backups
private
secure
none
s3_bucket
acme-public-uploads
public-read
insecure
public S3 bucket
security_group
sg-insecure-ssh
SSH open to 0.0.0.0/0
insecure
unrestricted SSH ingress
security_group
sg-secure-web
HTTPS public, SSH restricted
secure
none
ec2_instance
legacy-jump-box
uses sg-insecure-ssh
insecure
exposed via insecure SG
ec2_instance
web-frontend
uses sg-secure-web
secure
none
iam_user
svc-legacy-app
inline policy Action:* Resource:*
insecure
admin-equivalent privileges
iam_user
alice-analyst
scoped read-only policy
secure
none