Understanding Consolidated Scan Result Behavior
TABLE OF CONTENTS
Background
Some CSPM scan reports have the capability of producing hundreds or thousands of results, depending on how many resources are in the target cloud account. For example, the plugin "EBS Volume Encryption" checks every EBS volume and produces a passing or failing result depending on the encryption configuration.
To avoid polluting scan reports with this quantity of results, CSPM sometimes collapses the total number of results if the issue appears to be systemic across the account.
For example, if there are 250 unencrypted and 100 encrypted EBS volumes, instead of producing 350 total results, these will be collapsed into a single FAIL result with the message:
"EBS volumes unencrypted: 250; encrypted: 100".
Configuration
Some plugins allow you to configure this behavior by adjusting the threshold at which consolidation occurs. This change can be made on the "Plugins" page for supported plugins.
Did you find it helpful? Yes No
Send feedback