Release Notes

Release Summary

InsightCloudSec is pleased to announce release version 25.4.8. This release includes expanded source documents support, new Query Filters and Insights, and improved performance on the Resources Inventory page.

New

• Added the following Insights:
  • BigQuery Tables Not Encrypted To Use Customer-Managed Encryption Key
  • BigQuery Dataset Encrypted using Cloud Managed Key Instead of Customer Managed Key
  • Database Instance Flag 'max user connection' Enabled
• Added source documents support for the following resource types:
  • AWS ElasticBeanstalk Environment
  • AWS ElasticBeanstalk Application
  • AWS ACM Private Certificate Authority
• Added the following Query Filters:
  • Email Service Domain Current DKIM Signing Key Length
  • Email Service Domain Next DKIM Signing Key Length

Improved

• Turned on the new interface for Clouds > Organizations page by default.
• Improved the rendering speed for the resource type tooltip while navigating the Resources inventory.
• Updated the Cloud Credential Not Rotated Within 90 Days Insight and Cloud Credentials Accessible To The Public Query Filter to use key create time instead of updated time.
• Improved the recommendations for the DNS Zone With Weak Key Signing Algorithm (GCP) and DNS Zone With Weak Zone Signing Algorithm (GCP) Query Filters to match the case of the GCP API response.
• Updated the following columns in the Vulnerability Report for clarity:
  • last_assessed updated to resource_last_assessed
  • first_assessed updated to resource_first_assessed
• Added a setting to include or exclude disabled access lists from the Access List Exposes Port (Security Group) and Access List Exposes Ports to the Public Query Filters. As a result, any access list-related Insights now automatically exclude disabled access lists, including:
  • Access List Exposes High Risk Port to the Public
  • Access List Exposes SSH or Windows RDP to the Public over IPv4 (Security Group)
  • Access List Exposes SSH or Windows RDP to the Public Over IPv6 (Security Group)
  • Access List Exposes SSH to the Public (SG)
  • Access List Exposes CIFS Port to the Public
• Added the following resource types as supported for the Resource Missing Tag Key Query Filter:
  • App Stream Fleet
  • ETL Job
  • ETL Crawler

Fixed

• Fixed an issue causing columns to overlap in the resource properties panel.
• Fixed an issue where changes to Query Filters were not updating the Resources inventory list view as expected.
• Replaced placeholder description for the Google User With Unauthorized Role Insight.
• Fixed an issue where the ElasticsearchPipelineHarvester job would fail when logging was not configured on an ingestion pipeline resource.
• Fixed an issue causing false positives on the Database Instance not Encrypted Insight for Alibaba Cloud Database Instances.