Subset of AWS related tests showing inaccurate test results

Incident Report for Vanta

Resolved

We identified an issue impacting customers using the AWS integration that in some cases caused the following tests to provide inaccurate test results since August 6, 2024:

- S3 Block Public Access feature enabled (AWS)
- S3 server access logs enabled
- Logging buckets are versioned (AWS)
- Only authorized users can access logging buckets
- S3 buckets with ePHI data have access logs enabled
- User data in S3 is encrypted at rest (AWS)
- Storage buckets versioned
- Deleting from a logging bucket requires MFA
- Inventory items have descriptions
- Inventory items have active owners
- Inventory list tracks resources that contain user data

This issue has been resolved and you should no longer see incorrect test results moving forward. If you have any questions or concerns, please don’t hesitate to contact our Support Team at support@vanta.com.

Posted Aug 06, 2024 - 11:00 PDT