#security - February 2022

hi all, I need some general best practice

when I check cloudformation / terraform config for a s3 bucket

I see this:

Check: CKV_AWS_18: "Ensure the S3 bucket has access logging enabled"
        FAILED for resource: AWS::Bucket.S3Bucket
and
Check: CKV_AWS_21: "Ensure the S3 bucket has versioning enabled"
        FAILED for resource: AWS::Bucket.S3Bucket

Both are valid remarks

but I want some best practice when to enable them because both incur costs

Hi All
Our Managed Kubernetes Clusters: Avoiding risky defaults, K8s threat modeling and securing EKS clusters webinar starts in less than an hour, still time to register 🔥

https://bit.ly/3LRJWwt