Automation and remediation bots for Dome9's (Continuous) Compliance Engine

Restrict guest user access to applications in Azure tenant

A Reflex Rule for enforcing the enablement of DynamoDB point in time recovery.

Rule to detect disabling of S3 bucket public access blocks.

A rule for enforcing EBS Volume encryption by default.

Reflex enforcement measure to disallow any AMI to be modified as public

Rule to detect the deletion of an AWS account password policy.

Rule to detect the sharing of an RDS snapshot with the public.

A Reflex Rule for detecting the scheduling of KMS Keys for deletion.

A Reflex Rule for enforcing KMS Key rotation.

Rule to detect the disabling of log file validation for a CloudTrail trail.

Measure to detect when a security group with open to anywhere ingress is allowed.

Enforces SQS queue encryption. Will encrypt queues with the default KMS key.

Reflex rule that detects and remediates an S3 bucket with no SSE.

Rule to detect when automated backup is disabled for an RDS instance.

Measure that automatically sets an EBS snapshot to private if made public.

A Reflex rule to alert when S3 bucket versioning is disabled