Snapshots Publicly Available

This bot identifies snapshots that are visible to the public. While there may be solid business justification to make a snapshot publicly available, it is important to confirm that the snapshot is publicly available by design. For a more detailed explanation of why discovering publicly available snapshots is so important, please see this write-up.

Recommended Action

Customize this bot with notification, e.g., Slack, to quickly identify if/when a snapshot is made publicly available. If discovered, contact the snapshot owner to confirm its permissions are approrpiate. If not, consider modifying its permissions or deleting outright.

Severity

High

Resource Types Inspected

Snapshot Database Snapshot

Reactive Hookpoints

resource.created resource.modified