|
3 | 3 | "release_date": "2025-06-23T00:00:00+00:00"
|
4 | 4 | },
|
5 | 5 | "content": [
|
| 6 | + { |
| 7 | + "id": "cloud_security", |
| 8 | + "name": "Cloud Security", |
| 9 | + "type": "category", |
| 10 | + "children": [ |
| 11 | + { |
| 12 | + "id": "identity_and_access_management_iam_misconfigurations", |
| 13 | + "name": "Identity and Access Management (IAM) Misconfigurations", |
| 14 | + "type": "subcategory", |
| 15 | + "children": [ |
| 16 | + { |
| 17 | + "id": "overly_permissive_iam_roles", |
| 18 | + "name": "Overly Permissive IAM Roles", |
| 19 | + "type": "variant", |
| 20 | + "priority": 2 |
| 21 | + }, |
| 22 | + { |
| 23 | + "id": "publicly_accessible_iam_credentials", |
| 24 | + "name": "Publicly Accessible IAM Credentials", |
| 25 | + "type": "variant", |
| 26 | + "priority": 1 |
| 27 | + } |
| 28 | + ] |
| 29 | + }, |
| 30 | + { |
| 31 | + "id": "storage_misconfigurations", |
| 32 | + "name": "Storage Misconfigurations", |
| 33 | + "type": "subcategory", |
| 34 | + "children": [{ |
| 35 | + "id": "publicly_accessible_cloud_storage", |
| 36 | + "name": "Publicly Accessible Cloud Storage", |
| 37 | + "type": "variant", |
| 38 | + "priority": null |
| 39 | + }, |
| 40 | + { |
| 41 | + "id": "unencrypted_sensitive_data_at_rest", |
| 42 | + "name": "Unencrypted Sensitive Data at Rest", |
| 43 | + "type": "variant", |
| 44 | + "priority": 2 |
| 45 | + } |
| 46 | + ] |
| 47 | + }, |
| 48 | + { |
| 49 | + "id": "network_configuration_issues", |
| 50 | + "name": "Network Configuration Issues", |
| 51 | + "type": "subcategory", |
| 52 | + "children": [ |
| 53 | + { |
| 54 | + "id": "open_management_ports_to_the_internet", |
| 55 | + "name": "Open Management Ports to the Internet", |
| 56 | + "type": "variant", |
| 57 | + "priority": 3 |
| 58 | + }, |
| 59 | + { |
| 60 | + "id": "lack_of_network_segmentation", |
| 61 | + "name": "Lack of Network Segmentation", |
| 62 | + "type": "variant", |
| 63 | + "priority": 3 |
| 64 | + } |
| 65 | + ] |
| 66 | + }, |
| 67 | + { |
| 68 | + "id": "misconfigured_services_and_apis", |
| 69 | + "name": "Misconfigured Services and APIs", |
| 70 | + "type": "subcategory", |
| 71 | + "children": [ |
| 72 | + { |
| 73 | + "id": "exposed_debug_or_admin_interfaces", |
| 74 | + "name": "Exposed Debug or Admin Interfaces", |
| 75 | + "type": "variant", |
| 76 | + "priority": null |
| 77 | + }, |
| 78 | + { |
| 79 | + "id": "insecure_api_endpoints", |
| 80 | + "name": "Insecure API Endpoints", |
| 81 | + "type": "variant", |
| 82 | + "priority": 4 |
| 83 | + } |
| 84 | + ] |
| 85 | + }, |
| 86 | + { |
| 87 | + "id": "logging_and_monitoring_issues", |
| 88 | + "name": "Logging and Monitoring Issues", |
| 89 | + "type": "subcategory", |
| 90 | + "children": [ |
| 91 | + { |
| 92 | + "id": "disabled_or_insufficient_logging", |
| 93 | + "name": "Disabled or Insufficient Logging", |
| 94 | + "type": "variant", |
| 95 | + "priority": 5 |
| 96 | + } |
| 97 | + ] |
| 98 | + } |
| 99 | + ] |
| 100 | + }, |
6 | 101 | {
|
7 | 102 | "id": "ai_application_security",
|
8 | 103 | "name": "AI Application Security",
|
|
0 commit comments