# \#security

**URL:** https://community.cloudquery.io/tag/security/7.md

[Latest](https://community.cloudquery.io/latest.md) · [Categories](https://community.cloudquery.io/categories.md) · [Tags](https://community.cloudquery.io/tags.md)

---

## [AWS EC2 instances authorizing SSH from anywhere](https://community.cloudquery.io/t/aws-ec2-instances-authorizing-ssh-from-anywhere/1224)

<div class="topic-metadata">

**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Replies:** 0\
**Last updated:** [August 12, 2025, 1:19pm UTC](https://community.cloudquery.io/t/aws-ec2-instances-authorizing-ssh-from-anywhere/1224 "2025-08-12T13:19:34Z")

</div>

EC2 instances with an open port 22 are a major security risk that could allow unauthorized access from any IP address. To find all instances with this port open, run a CloudQuery sync with AWS source plugins for these ta…

---

## [List Inactive IAM Users](https://community.cloudquery.io/t/list-inactive-iam-users/1223)

<div class="topic-metadata">

**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Replies:** 0\
**Last updated:** [August 11, 2025, 11:57am UTC](https://community.cloudquery.io/t/list-inactive-iam-users/1223 "2025-08-11T11:57:54Z")

</div>

Inactive IAM users represent dormant accounts that could be compromised by attackers to gain unauthorized access to AWS resources without being noticed. Regular identification and removal of unused accounts reduces the a…

---

## [Find AWS RDS Instances not Using Encryption at Rest](https://community.cloudquery.io/t/find-aws-rds-instances-not-using-encryption-at-rest/1219)

<div class="topic-metadata">

**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Replies:** 0\
**Last updated:** [August 11, 2025, 10:45am UTC](https://community.cloudquery.io/t/find-aws-rds-instances-not-using-encryption-at-rest/1219 "2025-08-11T10:45:55Z")

</div>

Many regulatory frameworks (PCI DSS, HIPAA, GDPR) mandate encryption at rest for sensitive data, making unencrypted instances a compliance violation. Unencrypted databases are vulnerable if the underlying storage is comp…

---

## [AWS Lambda Functions close to deprecation](https://community.cloudquery.io/t/aws-lambda-functions-close-to-deprecation/1216)

<div class="topic-metadata">

**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Replies:** 0\
**Last updated:** [August 8, 2025, 12:42pm UTC](https://community.cloudquery.io/t/aws-lambda-functions-close-to-deprecation/1216 "2025-08-08T12:42:36Z")

</div>

Older runtimes often have slower cold start times, which can increase your billable duration. They also come with a bit of higher security risks than the modern ones. We built the End of Life plugin that syncs data from…

---

## [Publicly Accessible EC2 Instances](https://community.cloudquery.io/t/publicly-accessible-ec2-instances/1217)

<div class="topic-metadata">

**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Replies:** 0\
**Last updated:** [August 8, 2025, 12:54pm UTC](https://community.cloudquery.io/t/publicly-accessible-ec2-instances/1217 "2025-08-08T12:54:29Z")

</div>

Exposed instances create attack vectors for unauthorized access. You can easily list all publicly accessible AWS EC2 instances synced with CloudQuery with this PostgreSQL query: SELECT account\_id, instance\_id, subnet\_id…

---

## [List IAM users without MFA](https://community.cloudquery.io/t/list-iam-users-without-mfa/1214)

<div class="topic-metadata">

**Author:** [@pilvikala](https://community.cloudquery.io/u/pilvikala)\
**Replies:** 0\
**Last updated:** [August 7, 2025, 10:04am UTC](https://community.cloudquery.io/t/list-iam-users-without-mfa/1214 "2025-08-07T10:04:34Z")

</div>

IAM users with access to your AWS infrastructure without the multi-factor authentication represent a significant security risk. If you need to audit and report on MFA adoption across all your AWS accounts, here’s a simpl…