Loose access configurations can expose systems and broaden an organization's attack surface. Services open to interaction with the public are typically subjected to near-continuous scanning and probing by malicious entities.

This is especially problematic when a zero-day exploit for an exposed service is discovered and published, such as Heartbleed. Attackers can actively pursue and search for unpatched and exposed systems to exploit.

IAM policies allowing unrestricted access to resources place an organization at risk. Poorly structured policies undermine the ability of an organization to control and manage changes to resources.

Uncontrolled access to critical or sensitive resources can significantly impact an organization in various ways, including disclosure of or tampering with critical data.

Uncontrolled access to critical or sensitive resources can significantly impact an organization in various ways, including disclosure of or tampering with critical data.

Insufficiently protected data communication channels can put critical organizational data at risk of theft, tampering, or disclosure.

Amazon CloudFront Distribution can be misconfigured to allow unauthenticated or unencrypted communication, or use an outdated protocol. Such misconfigurations can cause compromise and allow an attacker, residing on a shared network, to snoop and tamper with data in transit.

Insufficiently protected data communication channels can put critical organizational data at risk of theft, tampering, or disclosure.