Amazon KMS

5.3: Ensure your AWS Key Management Service Master Keys are Not Publicly Exposed

📘 Public exposure of AWS Key Management Service (KMS) master keys poses a critical security risk, potentially leading to unauthorized access and data breaches. It is essential to ensure these keys are kept confidential and protected from public exposure to safeguard sensitive data and maintain robust security.

  • Section: Secret Management
  • Severity: Critical
  • CWE: CWE-668 Exposure of Resource to the Wrong Sphere
  • Assurance Scope: PCI, NIST
  • Threat Modeling Principal: Information Disclosure, Tampering
  • Rule Set: Rapticore Benchmark

Updated 5 months ago

What’s Next