<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://cloud.lensix.com</loc>
<changefreq>weekly</changefreq>
<priority>1</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog</loc>
<changefreq>daily</changefreq>
<priority>0.9</priority>
</url>
<url>
<loc>https://cloud.lensix.com/register</loc>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/login</loc>
<changefreq>monthly</changefreq>
<priority>0.5</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-acl-based-public-read-not-blocked-closing-the-hidden-bucket-gap</loc>
<lastmod>2026-06-07T13:44:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-acl-based-public-read-not-blocked-closing-the-other-half-of-block-public-access</loc>
<lastmod>2026-06-07T13:43:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-acl-based-public-read-not-blocked-closing-the-other-door-to-public-buckets</loc>
<lastmod>2026-06-07T13:42:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-access-logging-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T23:05:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-acl-based-public-read-not-blocked-closing-the-gap-policy-controls-miss-1</loc>
<lastmod>2026-06-06T23:04:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vpc-endpoint-allows-cross-account-access-risks-and-remediation</loc>
<lastmod>2026-06-06T16:43:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-no-network-policy-configured-lock-down-pod-to-pod-traffic</loc>
<lastmod>2026-06-06T16:42:43.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-rpc-locking-down-gcp-port-135</loc>
<lastmod>2026-06-06T16:41:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-node-integrity-monitoring-not-enabled-detect-boot-level-tampering</loc>
<lastmod>2026-06-06T16:40:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-smtp-closing-port-25-exposure-on-azure</loc>
<lastmod>2026-06-06T16:39:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sns-topic-allows-global-access-closing-public-sns-policies</loc>
<lastmod>2026-06-06T16:38:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-instance-appears-unused-find-and-remove-idle-databases</loc>
<lastmod>2026-06-06T16:37:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-terminates-during-host-maintenance-why-your-gcp-vms-should-migrate-not-stop</loc>
<lastmod>2026-06-06T16:36:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kms-key-policy-allows-global-access-risks-and-fixes</loc>
<lastmod>2026-06-06T16:35:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/domain-transfer-lock-not-enabled-on-route-53-domains</loc>
<lastmod>2026-06-06T16:34:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ebs-snapshots-older-than-1-year-find-fix-and-prevent</loc>
<lastmod>2026-06-06T16:33:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ecs-container-insights-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:32:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-acl-based-public-read-not-blocked-closing-the-gap-policy-controls-miss</loc>
<lastmod>2026-06-06T16:31:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ebs-volume-not-using-cmk-move-off-aws-managed-keys</loc>
<lastmod>2026-06-06T16:30:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/members-exempted-from-gcp-audit-logging-why-it-s-a-blind-spot-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:29:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redis-cache-non-ssl-port-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:28:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-custom-role-uses-wildcard-actions-risks-and-fixes</loc>
<lastmod>2026-06-06T16:27:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-group-allows-all-ingress-closing-open-ports-on-aws</loc>
<lastmod>2026-06-06T16:26:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ec2-instance-may-be-undersized-detecting-and-fixing-sustained-high-cpu</loc>
<lastmod>2026-06-06T16:25:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-security-contact-configured-in-microsoft-defender-for-cloud</loc>
<lastmod>2026-06-06T16:24:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ami-is-publicly-accessible-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:23:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-storage-auto-growth-disabled-on-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:22:58.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-client-certificate-not-required-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:21:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sqs-queue-allows-cross-account-access-risks-and-remediation</loc>
<lastmod>2026-06-06T16:20:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/app-service-uses-outdated-net-framework</loc>
<lastmod>2026-06-06T16:19:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/network-interface-has-ip-forwarding-enabled-on-azure</loc>
<lastmod>2026-06-06T16:18:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/https-proxy-has-no-custom-ssl-policy-closing-the-tls-1-0-gap-on-gcp</loc>
<lastmod>2026-06-06T16:17:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/synapse-workspace-has-no-managed-vnet-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:16:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/storage-bucket-has-no-lifecycle-rules-gcp</loc>
<lastmod>2026-06-06T16:15:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-allowed-locations-policy-lock-down-azure-deployment-regions</loc>
<lastmod>2026-06-06T16:14:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-supports-insecure-tls-version-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:13:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/service-account-has-privileged-role-fixing-over-permissioned-gcp-identities</loc>
<lastmod>2026-06-06T16:12:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-node-auto-upgrade-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:11:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/key-vault-secret-has-no-content-type-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:10:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-linux-vm-password-authentication-enabled-risks-and-fix</loc>
<lastmod>2026-06-06T16:09:16.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-role-unused-for-90-days-find-and-remove-stale-aws-roles</loc>
<lastmod>2026-06-06T16:08:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-detailed-metrics-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:07:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/msk-cluster-not-encrypted-at-rest-enforcing-customer-managed-kms-keys-on-amazon-msk</loc>
<lastmod>2026-06-06T16:06:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/default-security-group-in-use-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:05:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/network-acl-allows-unrestricted-outbound-why-open-egress-is-a-risk</loc>
<lastmod>2026-06-06T16:04:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/dynamodb-table-not-using-cmk-why-default-encryption-is-not-enough</loc>
<lastmod>2026-06-06T16:03:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ami-contains-unencrypted-volumes-risks-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:02:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firehose-uses-default-kms-key-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:01:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/dax-cluster-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T16:00:35.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/user-has-both-service-account-user-and-admin-roles-a-gcp-privilege-escalation-risk</loc>
<lastmod>2026-06-06T15:59:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/neptune-cluster-not-using-a-customer-managed-kms-key</loc>
<lastmod>2026-06-06T15:58:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-postgresql-closing-port-5432-on-azure</loc>
<lastmod>2026-06-06T15:57:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-temp-file-logging-disabled-on-cloud-sql</loc>
<lastmod>2026-06-06T15:57:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/event-grid-domain-has-public-access-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:56:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/asg-references-inactive-load-balancer-fixing-stale-target-group-references</loc>
<lastmod>2026-06-06T15:55:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-vtpm-not-enabled-securing-gcp-compute-engine-boot-integrity</loc>
<lastmod>2026-06-06T15:54:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticsearch-domain-not-encrypted-at-rest</loc>
<lastmod>2026-06-06T15:53:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/athena-encryption-can-be-overridden-enforce-workgroup-encryption</loc>
<lastmod>2026-06-06T15:52:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/enabling-automatic-repairs-on-azure-vm-scale-sets</loc>
<lastmod>2026-06-06T15:51:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-node-pool-uses-default-service-account-why-it-s-risky-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:50:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/user-can-escalate-privileges-finding-and-fixing-iam-escalation-paths-in-aws</loc>
<lastmod>2026-06-06T15:49:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-api-management-may-allow-insecure-tls-detection-fix-and-prevention</loc>
<lastmod>2026-06-06T15:48:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ebs-snapshot-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:47:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-nsg-changes-catch-risky-network-security-group-edits-in-azure</loc>
<lastmod>2026-06-06T15:46:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vpc-appears-unused-finding-and-cleaning-up-abandoned-aws-networks</loc>
<lastmod>2026-06-06T15:45:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-vpc-route-changes-in-gcp</loc>
<lastmod>2026-06-06T15:44:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/key-vault-key-has-no-expiration-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:43:43.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-aws-organizations-changes-cis-3-15</loc>
<lastmod>2026-06-06T15:42:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/unused-internet-gateway-finding-and-cleaning-up-orphaned-aws-igws</loc>
<lastmod>2026-06-06T15:41:43.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-telnet-why-port-23-should-never-face-the-internet</loc>
<lastmod>2026-06-06T15:40:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-unrestricted-egress-in-gcp-risks-and-remediation</loc>
<lastmod>2026-06-06T15:39:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vpc-endpoint-has-permissive-policy-closing-the-wildcard-principal-gap</loc>
<lastmod>2026-06-06T15:38:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/acm-certificate-expiring-soon-prevent-tls-outages-on-aws</loc>
<lastmod>2026-06-06T15:37:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ecr-repository-allows-cross-account-access-risks-and-remediation</loc>
<lastmod>2026-06-06T15:36:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/imdsv2-not-enforced-closing-the-ec2-metadata-credential-theft-gap</loc>
<lastmod>2026-06-06T15:35:51.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/secrets-found-in-ec2-user-data-why-it-s-risky-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:34:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/activity-log-storage-account-is-publicly-accessible</loc>
<lastmod>2026-06-06T15:33:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-uses-default-service-account-with-full-access-gcp</loc>
<lastmod>2026-06-06T15:32:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sagemaker-notebook-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:31:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sns-topic-not-using-cmk-why-customer-managed-keys-matter</loc>
<lastmod>2026-06-06T15:31:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-allows-public-mysql-risks-and-remediation</loc>
<lastmod>2026-06-06T15:30:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-container-registry-allows-anonymous-pull-risks-and-remediation</loc>
<lastmod>2026-06-06T15:29:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/msk-cluster-has-no-broker-logging-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:28:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-custom-domain-certificate-expired-causes-fixes-and-prevention</loc>
<lastmod>2026-06-06T15:27:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-sql-server-gcp</loc>
<lastmod>2026-06-06T15:26:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/emr-local-disk-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:25:18.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-kubernetes-version-outdated-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:24:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-connection-logging-disabled-on-azure</loc>
<lastmod>2026-06-06T15:23:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudwatch-log-group-has-no-retention-policy</loc>
<lastmod>2026-06-06T15:22:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sqs-queue-has-no-dead-letter-queue-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:21:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-resource-group-has-no-management-lock-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:20:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-bucket-lacks-delete-protection-lock-down-your-audit-trail</loc>
<lastmod>2026-06-06T15:19:42.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-cluster-has-no-diagnostic-logs-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:18:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-function-x-ray-tracing-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:17:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cdn-endpoint-has-no-diagnostic-settings-azure-logging-gaps-explained</loc>
<lastmod>2026-06-06T15:16:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-engine-version-outdated-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:15:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/unattached-ebs-volumes-stop-paying-for-storage-you-are-not-using</loc>
<lastmod>2026-06-06T15:14:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ecr-image-tags-are-mutable-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:14:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-allows-public-dns-risks-and-remediation</loc>
<lastmod>2026-06-06T15:13:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-os-login-disabled-securing-compute-engine-ssh-access-with-iam</loc>
<lastmod>2026-06-06T15:12:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-storage-allow-trusted-microsoft-services-to-bypass-network-rules</loc>
<lastmod>2026-06-06T15:11:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-checkpoint-logging-disabled-on-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:10:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/unattached-elastic-ips-stop-paying-for-addresses-you-don-t-use</loc>
<lastmod>2026-06-06T15:09:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-instance-publicly-accessible-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:08:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-logs-all-statements-on-cloud-sql-why-it-s-risky-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:07:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-secure-boot-not-enabled-securing-the-compute-engine-boot-chain</loc>
<lastmod>2026-06-06T15:06:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/storage-account-queue-service-logging-disabled-in-azure</loc>
<lastmod>2026-06-06T15:06:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-smb-closing-port-445-on-gcp</loc>
<lastmod>2026-06-06T15:05:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/front-door-does-not-enforce-https-fixing-the-frontdoor-nohttps-check</loc>
<lastmod>2026-06-06T15:04:16.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-cloudtrail-config-changes-cis-3-5</loc>
<lastmod>2026-06-06T15:03:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/container-app-has-no-managed-identity</loc>
<lastmod>2026-06-06T15:02:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/mysql-local-infile-enabled-on-gcp-cloud-sql-risk-and-remediation</loc>
<lastmod>2026-06-06T15:01:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/eks-kubernetes-version-outdated-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T15:00:38.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/acm-certificate-has-no-validation-method-why-it-breaks-auto-renewal-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:59:43.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/secrets-manager-secret-not-using-a-customer-managed-key-cmk</loc>
<lastmod>2026-06-06T14:58:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/mysql-slow-query-logging-disabled-on-gcp-cloud-sql</loc>
<lastmod>2026-06-06T14:57:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-engine-in-extended-support-what-it-costs-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:56:51.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/neptune-cluster-not-exporting-logs-to-cloudwatch</loc>
<lastmod>2026-06-06T14:55:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudfront-uses-outdated-tls-version-detection-and-fix</loc>
<lastmod>2026-06-06T14:55:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kms-key-uses-weak-encryption-detecting-and-fixing-weak-gcp-cloud-kms-keys</loc>
<lastmod>2026-06-06T14:54:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-not-sending-to-cloudwatch-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:53:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-has-no-targets-why-empty-elbs-cost-you-money</loc>
<lastmod>2026-06-06T14:52:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-front-door-has-no-waf-policy-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:51:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/eks-secrets-not-encrypted-enable-envelope-encryption-on-your-clusters</loc>
<lastmod>2026-06-06T14:50:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vpc-peering-to-external-account-auditing-and-securing-cross-account-connections</loc>
<lastmod>2026-06-06T14:49:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-running-outdated-java-risks-and-remediation</loc>
<lastmod>2026-06-06T14:48:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-workload-metadata-not-hardened-stop-pods-from-stealing-node-credentials</loc>
<lastmod>2026-06-06T14:47:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-function-uses-deprecated-runtime-risks-and-fixes</loc>
<lastmod>2026-06-06T14:46:17.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/encrypting-gcp-log-buckets-with-customer-managed-keys-cmek</loc>
<lastmod>2026-06-06T14:45:18.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kms-key-is-disabled-and-unused-stop-paying-for-dead-encryption-keys</loc>
<lastmod>2026-06-06T14:44:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-ssh-on-gcp-risks-and-remediation</loc>
<lastmod>2026-06-06T14:43:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-aws-config-changes-cis-3-9-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:42:38.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vm-data-disk-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:41:42.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-sql-server-closing-port-1433-on-azure</loc>
<lastmod>2026-06-06T14:40:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-not-encrypted-with-a-customer-managed-kms-key</loc>
<lastmod>2026-06-06T14:39:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/instance-appears-unused-finding-and-fixing-idle-ec2-instances</loc>
<lastmod>2026-06-06T14:38:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-service-bus-namespace-has-public-access-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:37:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-query-duration-logging-disabled-on-azure</loc>
<lastmod>2026-06-06T14:36:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-automatic-restart-disabled-on-gcp-compute-engine</loc>
<lastmod>2026-06-06T14:35:34.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-bucket-versioning-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:34:35.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/root-account-uses-virtual-mfa-why-hardware-mfa-matters-on-aws</loc>
<lastmod>2026-06-06T14:33:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/neptune-cluster-storage-not-encrypted-detection-fix-and-prevention</loc>
<lastmod>2026-06-06T14:32:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-function-http-trigger-does-not-require-https</loc>
<lastmod>2026-06-06T14:31:42.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-audit-logging-not-configured-on-gcp-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:30:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sns-topic-not-encrypted-enabling-server-side-encryption-on-aws-sns</loc>
<lastmod>2026-06-06T14:29:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/workspaces-has-no-ip-access-control-lock-down-your-cloud-desktops</loc>
<lastmod>2026-06-06T14:29:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/workspace-disk-not-encrypted-securing-amazon-workspaces-at-rest</loc>
<lastmod>2026-06-06T14:28:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/personal-gmail-accounts-in-gcp-iam-why-they-re-a-risk-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:27:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-has-an-invalid-execution-role-detect-and-fix-orphaned-iam-references</loc>
<lastmod>2026-06-06T14:26:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-mysql-why-port-3306-should-never-face-the-internet</loc>
<lastmod>2026-06-06T14:25:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-kibana-closing-port-5601-on-azure</loc>
<lastmod>2026-06-06T14:24:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-managed-instance-group-has-no-autoscaling-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:23:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-bucket-has-no-encryption-configuration-detection-fix-and-prevention</loc>
<lastmod>2026-06-06T14:22:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/unused-elastic-network-interfaces-in-aws-why-they-matter-and-how-to-clean-them-up</loc>
<lastmod>2026-06-06T14:21:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/auto-scaling-group-spans-single-az-why-it-s-a-reliability-risk-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:20:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-route-table-changes-cis-3-13</loc>
<lastmod>2026-06-06T14:19:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/recovery-services-vault-has-no-diagnostic-logging</loc>
<lastmod>2026-06-06T14:18:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-azure-bastion-host-provisioned-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:17:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/encrypt-azure-recovery-services-vaults-with-customer-managed-keys-byok</loc>
<lastmod>2026-06-06T14:16:38.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-postgresql-on-gcp-risks-and-fixes</loc>
<lastmod>2026-06-06T14:15:42.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-transfer-family-server-has-a-public-endpoint-risks-and-remediation</loc>
<lastmod>2026-06-06T14:14:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-automated-backups-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:10:43.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-network-acl-changes-cis-3-11</loc>
<lastmod>2026-06-06T14:09:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-ssl-policy-allows-weak-ciphers-on-gcp</loc>
<lastmod>2026-06-06T14:08:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/application-gateway-has-no-ssl-policy-lock-down-azure-edge-tls</loc>
<lastmod>2026-06-06T14:07:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-monitor-log-retention-too-short-why-365-days-matters</loc>
<lastmod>2026-06-06T14:06:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/defender-for-storage-not-enabled-detecting-and-fixing-the-azure-gap</loc>
<lastmod>2026-06-06T14:06:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-policy-assignments-why-an-empty-azure-policy-surface-is-a-governance-gap</loc>
<lastmod>2026-06-06T14:05:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-auto-minor-version-upgrade-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:04:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-storage-bucket-retention-policy-not-locked-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:03:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudfront-distribution-has-no-waf-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:02:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kinesis-stream-uses-default-kms-key-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T14:01:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/user-has-admin-and-kms-cryptokey-roles-fixing-a-separation-of-duties-gap-in-gcp</loc>
<lastmod>2026-06-06T14:00:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-function-allows-all-ingress-traffic-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:59:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-backend-logging-disabled-on-gcp-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:58:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-security-policy-changes-in-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:57:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-cluster-has-no-managed-identity-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:56:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-cloud-sql-configuration-changes</loc>
<lastmod>2026-06-06T13:55:37.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/domain-expiring-soon-renew-route-53-domains-before-they-lapse</loc>
<lastmod>2026-06-06T13:54:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-group-not-attached-cleaning-up-orphaned-aws-security-groups</loc>
<lastmod>2026-06-06T13:53:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/storage-bucket-uniform-access-not-enabled-fixing-gcp-bucket-permissions</loc>
<lastmod>2026-06-06T13:52:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-config-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:51:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-mongodb-locking-down-port-27017-on-gcp</loc>
<lastmod>2026-06-06T13:50:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-group-references-a-deleted-sg-cleaning-up-stale-aws-rules</loc>
<lastmod>2026-06-06T13:49:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-contact-has-no-email-fixing-silent-defender-for-cloud-alerts</loc>
<lastmod>2026-06-06T13:48:58.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-no-automatic-failover-why-zonal-databases-are-a-risk</loc>
<lastmod>2026-06-06T13:48:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/key-vault-does-not-allow-trusted-microsoft-services-bypass</loc>
<lastmod>2026-06-06T13:47:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-log-delivery-failing-diagnose-and-fix-the-gap-in-your-audit-trail</loc>
<lastmod>2026-06-06T13:46:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sql-server-tls-version-not-enforced-why-azure-sql-needs-tls-1-2</loc>
<lastmod>2026-06-06T13:45:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-acl-based-public-read-not-blocked-closing-the-hidden-public-access-gap</loc>
<lastmod>2026-06-06T13:44:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticsearch-domain-not-in-vpc-why-public-opensearch-endpoints-are-a-risk</loc>
<lastmod>2026-06-06T13:43:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-load-balancer-has-no-diagnostic-settings-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:42:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/unattached-managed-disks-in-azure-cost-and-security-risk</loc>
<lastmod>2026-06-06T13:41:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-not-in-vpc-when-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:40:35.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-iam-policy-changes-cis-3-4-detect-and-fix-it</loc>
<lastmod>2026-06-06T13:39:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-saltstack-locking-down-gcp-ports-4505-and-4506</loc>
<lastmod>2026-06-06T13:38:34.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/auto-scaling-group-is-empty-why-it-happens-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:37:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/fixing-redshift-clusters-still-running-on-ec2-classic</loc>
<lastmod>2026-06-06T13:36:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-web-dashboard-enabled-why-you-should-disable-it</loc>
<lastmod>2026-06-06T13:35:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-nodes-are-not-private-why-public-worker-nodes-are-a-risk-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:34:51.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-boot-diagnostics-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:33:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/codecommit-repository-detected-migrating-off-a-deprecated-git-host</loc>
<lastmod>2026-06-06T13:33:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-application-gateway-waf-in-detection-mode-why-it-s-not-protecting-you</loc>
<lastmod>2026-06-06T13:31:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-ssl-not-enforced-on-azure-risks-and-remediation</loc>
<lastmod>2026-06-06T13:31:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-project-ownership-changes-in-gcp</loc>
<lastmod>2026-06-06T13:30:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-ssl-certificate-expiring-soon-detect-fix-and-prevent</loc>
<lastmod>2026-06-06T13:29:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/codebuild-uses-public-source-provider-securing-your-build-sources</loc>
<lastmod>2026-06-06T13:27:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/blob-storage-has-no-immutability-policy-securing-azure-data-against-tampering</loc>
<lastmod>2026-06-06T13:26:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sql-server-firewall-allows-public-access-on-azure-risk-and-remediation</loc>
<lastmod>2026-06-06T13:25:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudfront-origin-bucket-does-not-exist-fixing-orphaned-s3-origins</loc>
<lastmod>2026-06-06T13:24:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-root-account-activity-cis-3-3-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:24:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticsearch-node-to-node-encryption-off-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:22:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vnet-has-peering-connection-reviewing-azure-network-peerings</loc>
<lastmod>2026-06-06T13:21:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-api-server-has-no-authorized-ip-ranges-lock-down-your-control-plane</loc>
<lastmod>2026-06-06T13:21:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticsearch-domain-has-no-audit-logging-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:20:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/instance-may-be-oversized-right-sizing-ec2-to-cut-waste</loc>
<lastmod>2026-06-06T13:19:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-alpha-features-enabled-why-alpha-clusters-don-t-belong-in-production</loc>
<lastmod>2026-06-06T13:18:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-stage-missing-access-logging-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:17:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-has-no-cloudwatch-log-exports-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:16:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vpc-has-single-az-subnets-why-it-breaks-resilience-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:15:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticache-replication-group-not-encrypted-fix-and-prevention</loc>
<lastmod>2026-06-06T13:14:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-allows-all-inbound-ports-risks-and-remediation</loc>
<lastmod>2026-06-06T13:13:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/classic-load-balancer-has-no-ssl-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T13:12:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/secrets-manager-using-the-aws-managed-key-instead-of-a-cmk</loc>
<lastmod>2026-06-06T13:11:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-kibana-on-gcp-risks-and-remediation</loc>
<lastmod>2026-06-06T13:10:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-policy-allows-unrestricted-passrole</loc>
<lastmod>2026-06-06T13:09:17.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-docker-closing-the-open-daemon-on-gcp</loc>
<lastmod>2026-06-06T13:08:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-group-has-no-members-cleaning-up-empty-aws-groups</loc>
<lastmod>2026-06-06T13:07:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-custom-domain-certificate-expiring-detection-fix-and-prevention</loc>
<lastmod>2026-06-06T13:06:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-cluster-has-a-single-instance-why-your-aurora-cluster-can-t-fail-over</loc>
<lastmod>2026-06-06T13:05:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-custom-iam-role-changes-in-gcp</loc>
<lastmod>2026-06-06T13:04:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/documentdb-cluster-not-exporting-logs-to-cloudwatch</loc>
<lastmod>2026-06-06T13:03:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/storage-account-not-https-only-enforce-secure-transfer-on-azure-storage</loc>
<lastmod>2026-06-06T13:02:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/mysql-root-account-may-be-insecure-on-gcp-cloud-sql</loc>
<lastmod>2026-06-06T13:01:37.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-environment-variables-not-encrypted-with-a-kms-key</loc>
<lastmod>2026-06-06T13:00:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-node-pools-on-different-kubernetes-versions-risks-and-fixes</loc>
<lastmod>2026-06-06T12:59:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-vpc-firewall-rule-changes-in-gcp</loc>
<lastmod>2026-06-06T12:58:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kms-key-rotation-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:57:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/x-ray-not-using-kms-encryption-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:56:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-checkpoint-logging-disabled-on-cloud-sql-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:55:51.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-storage-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:54:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vnet-has-only-one-subnet-why-flat-networks-are-a-risk</loc>
<lastmod>2026-06-06T12:54:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sql-server-email-audit-alerts-disabled-on-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:53:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/workspaces-ip-access-control-too-permissive-locking-down-desktop-access</loc>
<lastmod>2026-06-06T12:52:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-os-login-2fa-not-enabled-securing-gcp-ssh-access</loc>
<lastmod>2026-06-06T12:51:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/workload-identity-provider-has-no-conditions-locking-down-gcp-federation</loc>
<lastmod>2026-06-06T12:50:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-cache-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:49:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/application-gateway-has-no-https-listener-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:48:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ecr-scan-on-push-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:47:42.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-docker-closing-the-open-docker-daemon-port-on-azure</loc>
<lastmod>2026-06-06T12:46:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-deletion-protection-not-enabled-on-gcp-compute-engine</loc>
<lastmod>2026-06-06T12:45:51.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sns-topic-allows-cross-account-access-risk-and-remediation</loc>
<lastmod>2026-06-06T12:44:58.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/documentdb-not-using-a-customer-managed-kms-key-cmk</loc>
<lastmod>2026-06-06T12:43:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-center-high-severity-alerts-disabled-why-your-azure-threat-alerts-need-notifications</loc>
<lastmod>2026-06-06T12:42:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-cross-account-access-auditing-and-locking-down-shared-buckets</loc>
<lastmod>2026-06-06T12:41:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-service-account-has-full-api-access-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:41:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/defender-for-containers-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:40:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-group-has-inline-policies-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:39:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-pod-security-policy-not-configured-how-to-lock-down-pod-permissions</loc>
<lastmod>2026-06-06T12:38:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-node-pool-host-encryption-disabled-what-it-means-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:37:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-function-http-trigger-uses-anonymous-auth-risks-and-fixes</loc>
<lastmod>2026-06-06T12:36:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-key-vault-secret-has-no-expiration-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:06:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/key-vault-has-no-diagnostic-settings-why-it-matters-and-how-to-fix-it-1</loc>
<lastmod>2026-06-06T12:05:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-connection-throttling-disabled-on-azure-risk-and-fix</loc>
<lastmod>2026-06-06T12:04:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-container-registry-not-encrypted-with-a-customer-managed-key</loc>
<lastmod>2026-06-06T12:03:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-has-public-ip-why-it-s-risky-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:02:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cosmos-db-has-public-network-access-risks-and-remediation</loc>
<lastmod>2026-06-06T12:01:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-user-has-no-mfa-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T12:00:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-smb-closing-the-port-445-door-in-azure</loc>
<lastmod>2026-06-06T11:59:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-center-auto-provisioning-disabled-in-microsoft-defender-for-cloud</loc>
<lastmod>2026-06-06T11:58:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-ssl-not-enforced-deny-non-https-requests-to-your-buckets</loc>
<lastmod>2026-06-06T11:57:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-version-upgrade-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:56:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-disk-not-using-customer-managed-key-securing-azure-disk-encryption-with-byok</loc>
<lastmod>2026-06-06T11:55:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-identity-center-not-enabled-centralize-aws-access-the-right-way</loc>
<lastmod>2026-06-06T11:54:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/event-grid-domain-has-no-diagnostic-logs</loc>
<lastmod>2026-06-06T11:53:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-rdp-why-open-port-3389-is-a-ransomware-magnet</loc>
<lastmod>2026-06-06T11:52:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cdn-endpoint-allows-plain-http-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:51:34.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-deletion-protection-disabled-on-aws</loc>
<lastmod>2026-06-06T11:50:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ecr-repository-has-public-access-detect-and-fix-public-container-registries</loc>
<lastmod>2026-06-06T11:49:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/app-service-has-no-managed-identity-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:48:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ssm-parameter-not-using-securestring-stop-storing-secrets-in-plaintext</loc>
<lastmod>2026-06-06T11:47:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-aws-budget-configured-why-cost-alerts-are-a-security-control</loc>
<lastmod>2026-06-06T11:47:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-not-highly-available-fixing-single-az-databases-on-aws</loc>
<lastmod>2026-06-06T11:46:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-not-https-only-risks-and-remediation</loc>
<lastmod>2026-06-06T11:45:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticache-redis-has-no-backup-enabling-snapshot-retention-for-recovery</loc>
<lastmod>2026-06-06T11:44:16.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ebs-default-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:43:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-shielded-nodes-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:42:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-ssl-certificate-expired-fixing-and-preventing-gcp-database-cert-expiry</loc>
<lastmod>2026-06-06T11:41:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/default-service-account-has-iam-role-locking-down-gcp-s-riskiest-default</loc>
<lastmod>2026-06-06T11:40:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/defender-for-kubernetes-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:39:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/blob-soft-delete-not-enabled-on-azure-storage-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:38:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-has-no-healthy-targets-diagnosing-and-fixing-empty-aws-target-groups</loc>
<lastmod>2026-06-06T11:37:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-boot-disk-auto-delete-enabled-on-gcp-compute-engine</loc>
<lastmod>2026-06-06T11:36:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-has-no-log-group-why-it-happens-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:35:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/eks-public-endpoint-open-to-all-cidrs-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:34:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-using-default-master-username-why-awsuser-is-a-risk-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:33:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-azure-monitor-log-profile-why-your-activity-logs-need-a-home</loc>
<lastmod>2026-06-06T11:32:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/acm-certificate-validation-failed-why-it-happens-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:31:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-disconnection-logging-disabled-on-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:30:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/unused-virtual-private-gateway-why-detached-vgws-cost-you-and-how-to-clean-them-up</loc>
<lastmod>2026-06-06T11:30:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticsearch-does-not-enforce-https-risks-and-remediation</loc>
<lastmod>2026-06-06T11:29:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-ftp-why-open-port-21-is-a-liability-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:28:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/instance-health-check-failing-recovering-ec2-from-hardware-and-hypervisor-issues</loc>
<lastmod>2026-06-06T11:27:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/instance-group-has-no-auto-healing-why-it-matters-and-how-to-fix-it-on-gcp</loc>
<lastmod>2026-06-06T11:26:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-ssh-closing-port-22-on-azure</loc>
<lastmod>2026-06-06T11:25:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/old-disk-snapshots-in-gcp-why-stale-compute-engine-snapshots-are-a-cost-and-security-risk</loc>
<lastmod>2026-06-06T11:24:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-geo-redundant-backups-disabled-on-azure</loc>
<lastmod>2026-06-06T11:23:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-uses-deprecated-runtime-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:22:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ec2-termination-protection-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:21:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-for-sql-server-disable-cross-database-ownership-chaining</loc>
<lastmod>2026-06-06T11:20:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-network-interface-has-no-nsg-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:19:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-bucket-has-no-access-logging-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:18:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-management-has-no-managed-identity</loc>
<lastmod>2026-06-06T11:17:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-allows-public-ftp-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:16:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-vpc-network-changes-in-gcp-detection-and-remediation</loc>
<lastmod>2026-06-06T11:15:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-function-allows-public-invocation-why-it-s-dangerous-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:14:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-http-2-0-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:13:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-uses-outdated-tls-policy</loc>
<lastmod>2026-06-06T11:12:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/service-bus-namespace-local-authentication-enabled</loc>
<lastmod>2026-06-06T11:11:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/key-vault-soft-delete-and-purge-protection-why-every-azure-vault-needs-them</loc>
<lastmod>2026-06-06T11:10:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-vnc-closing-an-open-door-on-azure</loc>
<lastmod>2026-06-06T11:09:18.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/members-exempted-from-audit-logging-in-gcp-iam</loc>
<lastmod>2026-06-06T11:08:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-oracle-closing-open-gcp-database-ports</loc>
<lastmod>2026-06-06T11:07:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-uses-outdated-tls-policy-enforcing-tls-1-2-on-custom-domains</loc>
<lastmod>2026-06-06T11:06:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-console-sign-in-failures-cis-3-2</loc>
<lastmod>2026-06-06T11:05:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-nsg-has-no-diagnostic-settings-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:04:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-function-not-connected-to-vpc-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:03:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-deletion-protection-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:02:51.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-cluster-logging-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:02:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/app-service-always-on-disabled-why-it-breaks-background-jobs-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:00:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-has-no-cloud-armor-policy-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T11:00:08.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/key-vault-has-no-network-acl-locking-down-azure-secrets-access</loc>
<lastmod>2026-06-06T10:59:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-has-public-ip-address-why-it-matters-and-how-to-fix-it-on-gcp</loc>
<lastmod>2026-06-06T10:58:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticache-in-transit-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:57:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudfront-origin-uses-insecure-protocol-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:56:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/secret-rotation-not-enabled-securing-aws-secrets-manager</loc>
<lastmod>2026-06-06T10:55:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-password-policy-allows-password-reuse-risks-and-fix</loc>
<lastmod>2026-06-06T10:54:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/root-account-has-active-access-keys-why-they-should-never-exist</loc>
<lastmod>2026-06-06T10:53:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/emr-cluster-in-transit-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:52:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/documentdb-storage-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:51:34.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/route-53-domain-has-expired-risks-recovery-and-prevention</loc>
<lastmod>2026-06-06T10:50:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vnet-has-no-ddos-protection-securing-azure-virtual-networks</loc>
<lastmod>2026-06-06T10:49:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-audit-configuration-changes-in-gcp</loc>
<lastmod>2026-06-06T10:48:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/transfer-server-has-no-logging-closing-the-aws-transfer-family-blind-spot</loc>
<lastmod>2026-06-06T10:47:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-cluster-has-no-network-policy-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:46:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-netbios-why-it-s-risky-and-how-to-fix-it-on-gcp</loc>
<lastmod>2026-06-06T10:45:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/amazon-mq-broker-audit-logging-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:44:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-has-no-ip-access-restrictions-risks-and-fixes</loc>
<lastmod>2026-06-06T10:43:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-audit-logging-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:42:37.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-cluster-not-in-a-vpc-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:41:42.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/fixing-unencrypted-ebs-volumes-on-aws</loc>
<lastmod>2026-06-06T10:40:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/glue-security-config-s3-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:39:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-user-has-two-active-access-keys-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:38:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudfront-allows-unencrypted-http-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:38:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-log-validation-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:37:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vpc-flow-logs-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:36:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-iam-support-role-configured-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:35:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-guest-diagnostics-disabled-on-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:34:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-legacy-abac-authorization-enabled-why-it-s-a-risk-and-how-to-fix-it</loc>
<lastmod>2026-06-06T10:33:18.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-redis-closing-an-open-door-on-gcp</loc>
<lastmod>2026-06-06T10:32:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-disk-image-is-publicly-accessible-gcp-compute-image-exposure</loc>
<lastmod>2026-06-06T10:31:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-node-pool-not-using-container-optimized-os-cos</loc>
<lastmod>2026-06-06T02:58:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/deregistration-delay-not-configured-why-a-zero-second-drain-breaks-your-deploys</loc>
<lastmod>2026-06-06T02:57:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-lock-wait-logging-disabled-on-cloud-sql</loc>
<lastmod>2026-06-06T02:56:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ebs-snapshot-is-publicly-accessible-risk-and-remediation</loc>
<lastmod>2026-06-06T02:55:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/event-hub-namespace-has-public-access-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:54:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/pub-sub-topic-not-encrypted-with-cmek-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:53:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/stopped-ec2-instances-with-ebs-volumes-the-hidden-cost-that-keeps-billing</loc>
<lastmod>2026-06-06T02:52:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vm-has-no-backup-policy-detection-fix-and-prevention</loc>
<lastmod>2026-06-06T02:51:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kinesis-stream-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:50:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-rule-allows-large-port-range-fixing-overly-broad-gcp-firewall-rules</loc>
<lastmod>2026-06-06T02:49:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudfront-distribution-has-no-access-logs-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:48:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ebs-volume-has-no-recent-backup-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:47:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ec2-classic-instance-detected-migrating-off-retired-aws-infrastructure</loc>
<lastmod>2026-06-06T02:46:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-vnc-securing-gcp-vnc-ports-5900-and-5500</loc>
<lastmod>2026-06-06T02:45:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vm-not-in-an-availability-set-or-zone-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:44:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/bigquery-dataset-is-publicly-accessible-risks-and-remediation</loc>
<lastmod>2026-06-06T02:43:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/microsoft-defender-for-app-service-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:42:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/root-account-in-use-locking-down-aws-root-access</loc>
<lastmod>2026-06-06T02:41:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/efs-uses-default-kms-key-why-a-cmk-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:40:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-allows-public-telnet-why-it-is-dangerous-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:39:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-ssl-not-required-enforce-encrypted-connections</loc>
<lastmod>2026-06-06T02:38:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-integrity-monitoring-not-enabled-on-gcp-compute-engine</loc>
<lastmod>2026-06-06T02:37:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-security-solution-changes-in-azure</loc>
<lastmod>2026-06-06T02:36:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-oracle-closing-port-1521-to-the-internet</loc>
<lastmod>2026-06-06T02:35:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-connection-logging-disabled-on-gcp-cloud-sql</loc>
<lastmod>2026-06-06T02:34:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/dnssec-uses-deprecated-rsasha1-in-gcp-cloud-dns</loc>
<lastmod>2026-06-06T02:33:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/asg-not-using-elb-health-checks-why-it-breaks-self-healing</loc>
<lastmod>2026-06-06T02:32:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/service-account-has-user-managed-keys-why-gcp-keyless-auth-wins</loc>
<lastmod>2026-06-06T02:31:26.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/custom-role-has-owner-equivalent-permissions-in-azure</loc>
<lastmod>2026-06-06T02:30:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/alb-does-not-drop-invalid-headers-closing-an-http-smuggling-gap-on-aws</loc>
<lastmod>2026-06-06T02:29:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-all-inbound-traffic-why-it-s-dangerous-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:28:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-unfiltered-log-sinks-configured-exporting-gcp-audit-logs-the-right-way</loc>
<lastmod>2026-06-06T02:27:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-iam-password-policy-has-no-expiration-risk-and-fix</loc>
<lastmod>2026-06-06T02:26:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/glue-security-config-log-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:25:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/app-service-authentication-not-configured-closing-the-anonymous-access-gap-in-azure</loc>
<lastmod>2026-06-06T02:24:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-user-inactive-for-90-days-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:23:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/log-container-has-public-access-fixing-anonymous-azure-storage-logs</loc>
<lastmod>2026-06-06T02:22:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/pub-sub-subscription-has-no-dead-letter-topic</loc>
<lastmod>2026-06-06T02:21:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-s3-bucket-policy-changes-cis-3-8-detect-and-fix</loc>
<lastmod>2026-06-06T02:20:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-running-outdated-php-risks-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:19:37.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-cluster-secrets-not-kms-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:18:43.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-has-no-waf-why-your-alb-needs-a-web-acl</loc>
<lastmod>2026-06-06T02:17:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/old-azure-disk-snapshots-why-stale-snapshots-cost-you-money-and-data</loc>
<lastmod>2026-06-06T02:16:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-container-registry-has-public-access-risks-and-remediation</loc>
<lastmod>2026-06-06T02:15:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/fixing-azure-postgresql-servers-with-no-azure-ad-admin</loc>
<lastmod>2026-06-06T02:14:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/eks-api-endpoint-is-publicly-accessible</loc>
<lastmod>2026-06-06T02:13:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-allows-public-smtp-risks-and-remediation</loc>
<lastmod>2026-06-06T02:12:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-iam-authentication-disabled-replace-database-passwords-with-short-lived-tokens</loc>
<lastmod>2026-06-06T02:11:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/os-login-not-enabled-at-project-level-gcp</loc>
<lastmod>2026-06-06T02:11:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/application-gateway-waf-not-enabled-closing-the-gap-in-your-azure-edge</loc>
<lastmod>2026-06-06T02:10:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-allows-public-cassandra-closing-gcp-port-7001-exposure</loc>
<lastmod>2026-06-06T02:09:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-s3-lifecycle-rules-stop-paying-for-data-you-forgot-about</loc>
<lastmod>2026-06-06T02:08:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cross-account-iam-roles-without-external-id-or-mfa-risk-and-remediation</loc>
<lastmod>2026-06-06T02:07:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vm-scale-sets-not-spread-across-availability-zones</loc>
<lastmod>2026-06-06T02:06:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ssl-not-enforced-on-rds-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:05:18.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/acm-certificate-expired-detect-fix-and-prevent-tls-outages</loc>
<lastmod>2026-06-06T02:04:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-snapshot-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:03:17.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-config-delivery-failing-how-to-diagnose-and-fix-it</loc>
<lastmod>2026-06-06T02:02:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-cluster-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:01:18.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ec2-instance-has-a-public-ip-why-it-s-risky-and-how-to-fix-it</loc>
<lastmod>2026-06-06T02:00:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-cdn-endpoint-has-no-diagnostic-logging-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:59:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/dnssec-not-enabled-on-gcp-cloud-dns-zones</loc>
<lastmod>2026-06-06T01:58:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-error-logging-not-configured-on-cloud-sql</loc>
<lastmod>2026-06-06T01:57:38.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-disk-not-using-customer-managed-key-cmek-on-gcp</loc>
<lastmod>2026-06-06T01:56:38.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-legacy-metadata-endpoints-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:55:34.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/user-has-service-account-impersonation-role-on-gcp</loc>
<lastmod>2026-06-06T01:54:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-not-logging-s3-data-events-why-it-s-a-blind-spot-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:53:43.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/glue-data-catalog-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:52:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-automated-backups-disabled-why-retention-0-is-a-data-loss-trap</loc>
<lastmod>2026-06-06T01:51:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-security-group-changes-cis-3-10-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:51:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-storage-bucket-logging-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:49:56.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-access-logging-disabled-on-aws-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:49:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-unauthorized-api-calls-cis-3-1</loc>
<lastmod>2026-06-06T01:48:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-dns-closing-port-53-on-azure</loc>
<lastmod>2026-06-06T01:47:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/audit-logging-not-fully-configured-in-gcp-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:46:17.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-rbac-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:45:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/log-sink-points-to-non-existent-bucket-fixing-gcp-dangling-sink-destinations</loc>
<lastmod>2026-06-06T01:44:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-snapshot-retention-not-configured-why-zero-day-retention-is-a-backup-time-bomb</loc>
<lastmod>2026-06-06T01:43:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sqs-queue-policy-has-wildcard-principal-why-it-s-dangerous-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:42:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-has-no-execution-role-why-it-breaks-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:41:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/instance-group-deployed-in-single-zone-fixing-zonal-mig-risk-on-gcp</loc>
<lastmod>2026-06-06T01:40:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-storage-account-encryption-disabled-detection-fix-and-prevention</loc>
<lastmod>2026-06-06T01:39:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-mfa-delete-not-enabled-protecting-versioned-buckets-from-permanent-deletion</loc>
<lastmod>2026-06-06T01:38:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sagemaker-notebook-publicly-accessible-why-direct-internet-access-is-a-risk-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:37:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/project-wide-ssh-keys-in-gcp-why-they-re-risky-and-how-to-fix-them</loc>
<lastmod>2026-06-06T01:36:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/disable-local-authentication-on-azure-event-hubs-namespaces</loc>
<lastmod>2026-06-06T01:36:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-node-disk-not-using-cmek-take-control-of-your-encryption-keys</loc>
<lastmod>2026-06-06T01:35:17.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-rule-logging-missing-metadata-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:34:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/hardening-azure-file-share-smb-security-to-maximum</loc>
<lastmod>2026-06-06T01:33:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/msk-cluster-does-not-enforce-tls-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:32:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/key-vault-has-no-diagnostic-settings-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:31:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/encrypting-azure-event-hub-namespaces-with-customer-managed-keys</loc>
<lastmod>2026-06-06T01:30:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/enforce-tls-1-2-on-azure-storage-accounts</loc>
<lastmod>2026-06-06T01:29:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/defender-for-azure-sql-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:28:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/subnet-private-google-access-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T01:27:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-nsg-flow-log-retention-too-short-why-90-days-matters</loc>
<lastmod>2026-06-06T01:26:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-gateway-changes-cis-3-12</loc>
<lastmod>2026-06-06T01:25:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cosmos-db-advanced-threat-protection-disabled-detection-and-fix</loc>
<lastmod>2026-06-06T01:24:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sql-server-contained-db-authentication-enabled-on-gcp-cloud-sql</loc>
<lastmod>2026-06-06T01:23:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vm-custom-data-why-secrets-don-t-belong-there</loc>
<lastmod>2026-06-06T01:22:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nsg-allows-public-saltstack-ports-4505-4506</loc>
<lastmod>2026-06-06T00:31:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/codebuild-artifacts-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:30:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-cross-zone-disabled-why-it-causes-uneven-traffic-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:29:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-x-ray-tracing-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:28:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-load-balancer-has-no-backend-instances-why-it-happens-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:27:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-storage-queue-has-permissive-access-locking-down-shared-key-auth</loc>
<lastmod>2026-06-06T00:26:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kms-key-rotation-not-enabled-why-it-matters-and-how-to-fix-it-in-gcp</loc>
<lastmod>2026-06-06T00:25:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/root-account-has-no-mfa-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:25:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-vpc-changes-fixing-cis-3-14-on-aws</loc>
<lastmod>2026-06-06T00:24:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/service-account-key-not-rotated-fixing-stale-gcp-keys</loc>
<lastmod>2026-06-06T00:23:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/locking-down-the-azure-app-service-scm-kudu-endpoint</loc>
<lastmod>2026-06-06T00:22:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-cluster-not-using-byok-encryption-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:21:02.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-storage-account-allows-public-network-access-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:20:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-accessible-from-0-0-0-0-0-why-it-s-dangerous-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:18:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/emr-cluster-at-rest-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:18:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-blob-container-has-public-access-how-to-find-and-fix-it</loc>
<lastmod>2026-06-06T00:17:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-storage-permission-changes-in-gcp</loc>
<lastmod>2026-06-06T00:16:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-performance-insights-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:15:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-iam-role-attached-why-your-ec2-instances-need-instance-profiles</loc>
<lastmod>2026-06-06T00:14:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudfront-s3-origin-is-publicly-accessible-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:13:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-api-server-is-publicly-accessible-lock-down-your-cluster-control-plane</loc>
<lastmod>2026-06-06T00:12:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/classic-load-balancer-in-use-why-you-should-migrate-to-alb-or-nlb</loc>
<lastmod>2026-06-06T00:11:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/fixing-a-weak-iam-password-policy-on-aws</loc>
<lastmod>2026-06-06T00:10:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/nat-gateway-not-highly-available-fixing-single-az-egress-in-aws-vpcs</loc>
<lastmod>2026-06-06T00:09:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-node-auto-repair-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:08:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-container-app-is-externally-accessible-risks-and-remediation</loc>
<lastmod>2026-06-06T00:07:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-firewall-allows-public-rdp-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-06T00:06:44.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-permission-lacks-source-arn-condition-closing-the-confused-deputy-gap</loc>
<lastmod>2026-06-06T00:05:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/user-has-full-admin-access-why-administratoraccess-on-iam-users-is-a-risk</loc>
<lastmod>2026-06-06T00:04:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-bucket-not-using-a-customer-managed-kms-key-cmk</loc>
<lastmod>2026-06-06T00:04:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/secret-rotation-window-too-short-in-aws-secrets-manager</loc>
<lastmod>2026-06-06T00:03:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/default-vpc-network-exists-in-gcp-why-you-should-remove-it</loc>
<lastmod>2026-06-06T00:01:59.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-ip-forwarding-enabled-on-compute-engine-risk-and-remediation</loc>
<lastmod>2026-06-06T00:01:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-cluster-publicly-accessible-risks-and-remediation</loc>
<lastmod>2026-06-06T00:00:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/app-service-uses-outdated-python-risks-and-remediation</loc>
<lastmod>2026-06-05T23:59:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kms-key-is-publicly-accessible-finding-and-fixing-public-cloud-kms-keys-in-gcp</loc>
<lastmod>2026-06-05T23:58:05.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/firewall-rule-logging-disabled-on-gcp-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:57:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aks-cluster-has-no-log-analytics-monitoring</loc>
<lastmod>2026-06-05T23:56:19.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-node-secure-boot-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:55:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticsearch-uses-outdated-tls-policy-enforcing-tls-1-2-on-aws-opensearch</loc>
<lastmod>2026-06-05T23:54:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-endpoint-is-public-locking-down-rest-apis-on-aws</loc>
<lastmod>2026-06-05T23:53:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gcp-storage-bucket-not-using-cmek-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:52:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-data-factory-has-public-network-access-why-it-matters-and-how-to-lock-it-down</loc>
<lastmod>2026-06-05T23:51:37.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-disconnection-logging-disabled-on-cloud-sql</loc>
<lastmod>2026-06-05T23:50:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/mysql-ssl-not-enforced-on-azure-risk-and-remediation</loc>
<lastmod>2026-06-05T23:49:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/api-gateway-stage-has-no-waf-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:48:52.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-center-admin-alerts-disabled-wiring-defender-for-cloud-to-page-your-team</loc>
<lastmod>2026-06-05T23:47:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/subnet-vpc-flow-logs-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:47:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/s3-public-access-block-incomplete-closing-the-door-on-public-buckets</loc>
<lastmod>2026-06-05T23:46:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-not-using-cmek-why-customer-managed-keys-matter-and-how-to-enforce-them</loc>
<lastmod>2026-06-05T23:45:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sqs-queue-not-using-a-customer-managed-kms-key</loc>
<lastmod>2026-06-05T23:44:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/service-account-has-admin-access-locking-down-over-privileged-gcp-identities</loc>
<lastmod>2026-06-05T23:43:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-security-contact-has-no-phone-number-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:42:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alert-for-azure-policy-assignment-changes-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:41:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/access-key-older-than-1-year-rotating-stale-aws-iam-credentials</loc>
<lastmod>2026-06-05T23:40:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/efs-file-system-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:39:18.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/elasticsearch-domain-allows-global-access-why-it-happens-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:38:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/new-instance-not-using-spot-pricing-when-on-demand-ec2-is-costing-you</loc>
<lastmod>2026-06-05T23:37:31.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/kinesis-stream-has-no-recent-activity-find-and-fix-abandoned-streams</loc>
<lastmod>2026-06-05T23:36:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-user-has-directly-attached-policies-why-groups-matter</loc>
<lastmod>2026-06-05T23:35:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/defender-for-key-vault-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:34:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sql-server-advanced-threat-protection-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:33:37.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ami-not-in-use-cleaning-up-orphaned-amazon-machine-images</loc>
<lastmod>2026-06-05T23:32:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vm-os-disk-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:31:48.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-network-watcher-configured-fixing-azure-s-network-visibility-gap</loc>
<lastmod>2026-06-05T23:30:41.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redis-cache-supports-insecure-tls-enforce-tls-1-2-on-azure-cache-for-redis</loc>
<lastmod>2026-06-05T23:29:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/unencrypted-ebs-volume-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:28:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-app-service-remote-debugging-enabled-risks-and-remediation</loc>
<lastmod>2026-06-05T23:28:00.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-console-login-without-mfa-cis-3-2</loc>
<lastmod>2026-06-05T23:27:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-container-app-authentication-not-enabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:26:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/amazon-mq-broker-general-logging-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:25:16.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-auto-storage-increase-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:24:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-data-lake-store-not-encrypted-risks-and-remediation</loc>
<lastmod>2026-06-05T23:23:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-ip-aliasing-not-enabled-fixing-routes-based-clusters</loc>
<lastmod>2026-06-05T23:22:27.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-has-admin-privileges-why-it-s-dangerous-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:21:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-config-not-recording-global-resources-why-iam-changes-slip-through</loc>
<lastmod>2026-06-05T23:20:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/defender-for-servers-not-enabled-how-to-fix-and-prevent-it</loc>
<lastmod>2026-06-05T23:19:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-sql-ssl-not-enforced-encrypt-your-gcp-database-connections</loc>
<lastmod>2026-06-05T23:18:40.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-basic-authentication-enabled-why-it-s-a-risk-and-how-to-disable-it</loc>
<lastmod>2026-06-05T23:17:46.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-auto-update-disabled-patching-azure-windows-vms-the-right-way</loc>
<lastmod>2026-06-05T23:16:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-using-default-port-why-5439-is-a-liability-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:15:50.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-azure-ad-authentication-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:14:57.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-monitor-log-profile-has-no-storage-account-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:14:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/no-alarm-for-kms-cmk-disable-or-deletion-cis-3-7</loc>
<lastmod>2026-06-05T23:13:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-cluster-monitoring-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:12:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/storage-bucket-is-publicly-accessible-gcp-cloud-storage</loc>
<lastmod>2026-06-05T23:11:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/bigquery-dataset-not-using-cmek-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:10:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/auto-scaling-group-has-suspended-processes-why-it-breaks-self-healing-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:09:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloud-function-uses-default-service-account-why-it-s-risky-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:08:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/athena-workgroup-results-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:07:25.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/expired-iam-server-certificate-detection-fix-and-prevention</loc>
<lastmod>2026-06-05T23:06:28.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/postgresql-log-retention-too-short-on-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:05:33.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-control-plane-is-publicly-accessible-why-it-matters-and-how-to-lock-it-down</loc>
<lastmod>2026-06-05T23:04:39.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-bucket-can-be-publicly-accessible-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:03:47.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-glue-bookmark-encryption-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T23:02:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/dynamodb-table-has-no-point-in-time-recovery</loc>
<lastmod>2026-06-05T23:01:55.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/service-bus-namespace-not-encrypted-with-cmk</loc>
<lastmod>2026-06-05T23:00:53.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/vm-serial-port-access-enabled-why-it-s-risky-and-how-to-fix-it</loc>
<lastmod>2026-06-05T22:59:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-spans-single-az-why-it-s-a-hidden-single-point-of-failure</loc>
<lastmod>2026-06-05T22:59:03.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/route-53-hosted-zone-missing-spf-record-stop-email-spoofing</loc>
<lastmod>2026-06-05T22:58:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/eks-control-plane-logging-incomplete-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:47:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-user-has-both-a-password-and-access-keys-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:46:01.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-container-registry-disable-the-admin-user</loc>
<lastmod>2026-06-05T21:45:04.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/cloudtrail-not-logging-events-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:44:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/aws-config-not-aggregating-all-regions-closing-your-cross-region-blind-spots</loc>
<lastmod>2026-06-05T21:43:12.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-container-app-allows-insecure-http-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:42:15.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-cdn-not-enabled-why-it-matters-and-how-to-fix-it-on-gcp</loc>
<lastmod>2026-06-05T21:41:20.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-iam-authentication-not-enabled-kill-static-database-passwords</loc>
<lastmod>2026-06-05T21:40:22.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/gke-master-authorized-networks-not-configured-lock-down-your-api-server</loc>
<lastmod>2026-06-05T21:39:21.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/storage-bucket-versioning-not-enabled-on-gcp-risks-and-fixes</loc>
<lastmod>2026-06-05T21:38:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-monitor-not-archiving-critical-activity-categories-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:37:35.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/rds-automated-backups-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:36:36.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/guardduty-not-enabled-closing-the-blind-spots-in-your-aws-account</loc>
<lastmod>2026-06-05T21:35:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/redshift-uses-default-kms-key-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:34:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-has-single-target-fixing-non-redundant-target-groups-on-aws</loc>
<lastmod>2026-06-05T21:33:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/service-bus-namespace-uses-insecure-tls</loc>
<lastmod>2026-06-05T21:32:54.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-permission-granted-directly-to-user-on-gcp</loc>
<lastmod>2026-06-05T21:32:06.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/alb-has-http-listener-without-https-redirect</loc>
<lastmod>2026-06-05T21:31:09.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/mq-broker-is-publicly-accessible-risks-and-remediation</loc>
<lastmod>2026-06-05T21:30:10.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sql-server-auditing-not-enabled-on-azure-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:29:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/security-group-rule-has-no-description-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:28:14.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/scale-set-automatic-os-upgrade-disabled-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:27:13.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/lambda-function-allows-public-invocation-why-it-s-dangerous-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:26:11.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/storage-bucket-has-no-retention-policy-gcp-remediation-guide</loc>
<lastmod>2026-06-05T21:25:17.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/public-facing-azure-load-balancer-risks-and-remediation</loc>
<lastmod>2026-06-05T21:24:29.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/access-keys-unused-for-90-days-find-fix-and-prevent-stale-iam-credentials</loc>
<lastmod>2026-06-05T21:23:32.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/domain-auto-renewal-not-enabled-on-route-53-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:22:35.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/ecr-repository-not-using-a-customer-managed-kms-key</loc>
<lastmod>2026-06-05T21:21:45.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/sqs-queue-not-encrypted-why-it-matters-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:20:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/fixing-unencrypted-kinesis-firehose-delivery-streams</loc>
<lastmod>2026-06-05T21:19:49.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/load-balancer-uses-plain-http-encrypting-gcp-backend-traffic</loc>
<lastmod>2026-06-05T21:15:24.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/azure-vm-scale-set-has-no-instances-what-it-means-and-how-to-fix-it</loc>
<lastmod>2026-06-05T21:14:23.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/iam-access-analyzer-not-enabled-find-unintended-external-access-in-aws</loc>
<lastmod>2026-06-05T21:13:30.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://cloud.lensix.com/blog/fixing-plaintext-secrets-in-ecs-task-definitions</loc>
<lastmod>2026-06-05T21:12:07.000Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
</urlset>
