Datadog Cloud Security Management misconfigurations

• High - EC2 subnets should not automatically assign public IP addresses
• High - Application Load Balancers should be configured to drop HTTP headers
• Medium - Outbound access on all ports should be restricted

Related

• SecurityAudit managed policy in DatadogAWSIntegrationRole

See also

• Datadog Cloud Security Management: Identity Risk, Misconfigurations