Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
60
Curated Reports
2077+
Controls Checked
3
Cloud Providers
5 min
To First Results
Messaging & Eventing Best Practices
27 controls
21 services covered
Reviews integration and messaging services — SNS, SQS, EventBridge, Step Functions, Kinesis, Data Firehose, SES, Transfer Family, and Directory Service — for encryption, private access, and logging.
What we check
SNS Topics3
- SNS Topic Encryption Enabled
- No Public SNS Topics
- SNS Topic Message Delivery Notification Enabled Check
Kinesis Data Streams3
- Kinesis Data Stream Server Side Encryption Enabled
- Kinesis Stream Backup Retention Check
- Kinesis streams should have an adequate data retention period
SQS Queues2
- SQS Queue Encryption Enabled
- No Public SQS Queues
EventBridge Event Buses2
- Custom EventBridge Event Bus Policy Attachment Check
- Custom EventBridge Buses Use Customer Managed Keys
EventBridge Schema Registries1
- Custom Schema Registry Policy Attachment Check
EventBridge Global Endpoints1
- EventBridge Global Endpoint Event Replication Enabled Check
Step Functions State Machines1
- AWS Step Functions State Machine Logging Enabled Check
Transfer Family Servers1
- Ensure AWS Transfer Family Server Does Not Use FTP
Transfer Family Connectors1
- Transfer Family connectors should have logging enabled
Data Firehose Delivery Streams1
- Firehose delivery streams should be encrypted at rest
SES Configuration Sets1
- SES configuration sets should have TLS enabled for sending emails
Directory Service Directories1
- Directory Service directories should have SNS notification enabled
Amazon MQ Brokers1
- Amazon MQ Brokers Run Supported Versions
Transfer Family Certificates1
- Transfer Family AS2 Certificates Remain Valid
SES Mail Manager Ingress Points1
- SES Mail Manager Ingress Points Require TLS
EventBridge Archives1
- EventBridge Archives Use Customer Managed Keys
EventBridge Connections1
- EventBridge Connections Use Customer Managed Keys
Managed Service for Apache Flink Applications1
- Flink Applications Use Customer Managed Keys
Transfer Family Workflows1
- Transfer Family Workflow Execution Logging Enabled
MSK Clusters1
- MSK Broker Logging
S3 Event Notifications1
- S3 Event Notifications Enabled Check
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.