When reviewing your Compliance data within the Compliance > Cloud dashboard there are a number of available status fields:
Compliant
Non-Compliant
Exception
Errors
Scope
Compliance Data on Cloud Dashboard
Solution
To find out more regarding the Errors you can utilize the View Report button within the Compliance Assessment or you can navigate directly to the Reports section of the platform.
Within the specific report you will most likely see the status Could Not Assess.
Currently the platform does not surface the reasoning behind the Could Not Assess errors to enable you (the user) to immediately drill down into this but you can reach out to Lacework Support who will have the ability to query this data on your behalf and provide the output via CSV. Please see the example below:
REQUEST_GUID
INTG_GUID
ARN
API_KEY
ACCOUNT_ID
ACCOUNT_ALIAS
RESOURCE_TYPE
RESOURCE_REGION
STATUS:ERRORMESSAGE::STRING
12a34bb56-cbbd-78ef-g90-abcde12345
TESTING_123456789987654321abcdeedcba
arn:aws:s3:::xxxx-xxx-xxx
get-bucket-policy
1234567890121
X
s3:bucket
eu-east-1
An error occurred (NoSuchBucketPolicy) when calling the GetBucketPolicy operation: The bucket policy does not exist
12a34bb56-cbbd-78ef-g90-abcde12345
TESTING_123456789987654321abcdeedcba
arn:aws:s3:::aws-xxxx-assets-123456789-us-east-1
get-public-access-block
1234567890121
s3:bucket
us-east-1
An error occurred (NoSuchPublicAccessBlockConfiguration) when calling the GetPublicAccessBlock operation: The public access block configuration was not found
