HomeEvidence RepositoryCloud Provider EvidenceCloud Provider EvidenceWhere to locate common evidence items on AWS, Azure, and GCPBy Stephanie Lorraine and 1 otherβ’47 articlesAmazon Web ServicesAWS: Backup Schedule and SettingsAWS: Availability Monitoring ToolAWS: Asset List, Server ListAWS: API SecurityAWS: Role Access ManagementAWS: Production System Restricted Access, Remote System AuthenticationAWS: Password Policy and Settings, Password Policy EvidenceAWS: Patch Scan, Server ConfigurationAWS: Network Admin UsersAWS: Network Access LogAWS: Log Aggregation, Monitoring Tools EnabledAWS: Multi-Factor Authentication Access, Multi Factor Authentication EvidenceAWS: IDS ScreenshotsAWS: Hardening ConfigurationsAWS: Firewall RulesAWS: Encryption Key Access, Key/Secrets AccessAWS: Encryption in TransitAWS: Denial of ServiceAWS: Cloud Service AccessAWS: Cloud Security AlertingAWS: Cloud Monitoring Insights and ToolsAWS: Cloud Monitoring DashboardAWS: Application FirewallAWS: Access to ProductionAWS: Antivirus InstallMicrosoft AzureWhere to Find Common Azure Evidence ItemsGoogle Cloud PlatformGCP: Role Access ManagementGCP: Production System Restricted Access, Remote System AuthenticationGCP: Patch Scan, Server ConfigurationGCP: Multi-Factor Authentication Access, Multi-Factor Authentication EvidenceGCP: IDS ScreenshotsGCP: Hardening ConfigurationsGCP: Firewall RulesGCP: Key & Secrets AccessGCP: Cloud Monitoring Dashboard, Cloud Security AlertingGCP: Denial of ServiceGCP: Cloud Key Evidence, Encryption Key AccessGCP: Change Network Infrastructure Evidence, Cloud Monitoring Insights and Tools, Log Aggregation, Monitoring Tools Enabled, Network Access LogGCP: Breach Events, Security Alerts, Threat Detection AlertingGCP: Backup Schedule and SettingsGCP: Availability Monitoring ToolGCP: Asset List, Server ListGCP: Application FirewallGCP: API SecurityGCP: Antivirus InstallGCP: Access to Production, Cloud Service AccessGCP: Network Admin Users