Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
60
Curated Reports
2077+
Controls Checked
3
Cloud Providers
5 min
To First Results
Application Logging
18 controls
17 services covered
Checks that workloads emit operational logs — ECS, Elastic Beanstalk, Glue, Lambda, Step Functions, CodeBuild, Bedrock AgentCore, Systems Manager sessions, and Transfer Family — for visibility and auditability.
What we check
Parallel Computing Service Clusters2
- PCS Job Completion Log Delivery Configured
- PCS Scaling Logging Enabled
ECS Clusters1
- ECS Container Insights Enabled Check
Elastic Beanstalk Environments1
- Elastic Beanstalk Streaming Logs to CloudWatch Enabled
Glue Jobs1
- AWS Glue Job Logging Enabled Check
Lambda Logging1
- Lambda function Logging is enabled
Step Functions State Machines1
- AWS Step Functions State Machine Logging Enabled Check
CodeBuild Logs1
- CodeBuild Project Logging Enabled Check
Bedrock AgentCore Browser Sessions1
- Bedrock AgentCore custom browsers should have session recording enabled
Systems Manager Automation1
- SSM Automation should have CloudWatch logging enabled
Transfer Family Connectors1
- Transfer Family connectors should have logging enabled
Systems Manager Sessions1
- Systems Manager JIT RDP Session Recording Enabled
ECS Services1
- ECS Service Connect Access Logging Enabled
Transfer Family Workflows1
- Transfer Family Workflow Execution Logging Enabled
API Gateway Stages1
- API Stage Execution Logging
Managed Prometheus Collectors1
- Prometheus Collector Diagnostic Logging Enabled
Application Load Balancers1
- ALB Health Check Logging Enabled
MSK Replicators1
- MSK Replicator Logging Enabled
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.