With this new feature, you can now discover and address malware risks within your AWS S3 and Azure Storage environments.
A primary use case is identifying files infected with malware designed to steal credentials and exploit vulnerabilities, facilitating lateral movement within their environment and potentially to other environments.
Which response actions are supported for AWS and Azure?
Currently, monitoring is the supported response action for AWS and Azure. Due to the inherent risk of deleting or quarantining files in IaaS environments—which are typically mission-critical we do not support automatic remediation actions. This approach ensures that we avoid any inadvertent disruptions to essential services while still providing robust monitoring capabilities for sensitive data exposure.
Where can I find more information?
Refer to Secure Access documentation for guidance.
Enable Cloud Malware Protection for AWS Tenants
Enable Cloud Malware Protection for Azure Tenants