Update Management

Update management keeps software and devices protected against known vulnerabilities. Once a weakness is public, attackers move fast — unpatched systems give them a clean route in.

This control focuses on keeping operating systems, applications, firmware, and security tools supported and up to date. The goal is simple: remove known vulnerabilities before they become an entry point into your environment.

Update Management Documentation

Instances Running Outside VPC
high
aws ec2

Instances Running Outside VPC

Instances not running inside a VPC are unsupported
IAM Users Password Policy Requires Special Characters
advisory
aws iam

IAM Users Password Policy Requires Special Characters

The use of special characters in passwords is not recommended.
EKS Cluster out of Date
moderate
aws eks

EKS Cluster out of Date

EKS Clusters should remain updated to prevent publicly exposed APIs from compromise and avoid forced updates which can break service
Cloud9 Environments Found
advisory
aws cloud9

Cloud9 Environments Found

Cloud9 has sadly been decommissioned and AWS customers are advised to decommission and replace Cloud9 environments