fix: azure tests

prowler/lib/outputs/asff/asff.py

@@ -279,7 +279,7 @@ class Resource(BaseModel):
     Id: str
     Partition: str
     Region: str
-    Tags: Optional[dict]
+    Tags: Optional[dict] = None
 
     @validator("Tags", pre=True, always=True)
     def tags_cannot_be_empty_dict(tags):

prowler/lib/outputs/compliance/aws_well_architected/models.py

@@ -19,7 +19,7 @@ class AWSWellArchitectedModel(BaseModel):
     Requirements_Attributes_WellArchitectedQuestionId: str
     Requirements_Attributes_WellArchitectedPracticeId: str
     Requirements_Attributes_Section: str
-    Requirements_Attributes_SubSection: Optional[str]
+    Requirements_Attributes_SubSection: Optional[str] = None
     Requirements_Attributes_LevelOfRisk: str
     Requirements_Attributes_AssessmentMethod: str
     Requirements_Attributes_Description: str

prowler/lib/outputs/compliance/cis/models.py

@@ -25,9 +25,9 @@ class AWSCISModel(BaseModel):
     Requirements_Attributes_RemediationProcedure: str
     Requirements_Attributes_AuditProcedure: str
     Requirements_Attributes_AdditionalInformation: str
-    Requirements_Attributes_DefaultValue: Optional[
-        str
-    ]  # TODO Optional for now since it's not present in the CIS 1.5, 2.0 and 3.0 AWS benchmark
+    Requirements_Attributes_DefaultValue: Optional[str] = (
+        None  # TODO Optional for now since it's not present in the CIS 1.5, 2.0 and 3.0 AWS benchmark
+    )
     Requirements_Attributes_References: str
     Status: str
     StatusExtended: str

prowler/lib/outputs/compliance/generic/models.py

@@ -15,11 +15,11 @@ class GenericComplianceModel(BaseModel):
     AssessmentDate: str
     Requirements_Id: str
     Requirements_Description: str
-    Requirements_Attributes_Section: Optional[str]
-    Requirements_Attributes_SubSection: Optional[str]
-    Requirements_Attributes_SubGroup: Optional[str]
-    Requirements_Attributes_Service: Optional[str]
-    Requirements_Attributes_Type: Optional[str]
+    Requirements_Attributes_Section: Optional[str] = None
+    Requirements_Attributes_SubSection: Optional[str] = None
+    Requirements_Attributes_SubGroup: Optional[str] = None
+    Requirements_Attributes_Service: Optional[str] = None
+    Requirements_Attributes_Type: Optional[str] = None
     Status: str
     StatusExtended: str
     ResourceId: str

prowler/lib/outputs/compliance/kisa_ismsp/models.py

@@ -19,10 +19,10 @@ class AWSKISAISMSPModel(BaseModel):
     Requirements_Attributes_Domain: str
     Requirements_Attributes_Subdomain: str
     Requirements_Attributes_Section: str
-    Requirements_Attributes_AuditChecklist: Optional[list[str]]
-    Requirements_Attributes_RelatedRegulations: Optional[list[str]]
-    Requirements_Attributes_AuditEvidence: Optional[list[str]]
-    Requirements_Attributes_NonComplianceCases: Optional[list[str]]
+    Requirements_Attributes_AuditChecklist: Optional[list[str]] = None
+    Requirements_Attributes_RelatedRegulations: Optional[list[str]] = None
+    Requirements_Attributes_AuditEvidence: Optional[list[str]] = None
+    Requirements_Attributes_NonComplianceCases: Optional[list[str]] = None
     Status: str
     StatusExtended: str
     ResourceId: str

prowler/lib/outputs/compliance/prowler_threatscore/models.py

@@ -17,7 +17,7 @@ class ProwlerThreatScoreAWSModel(BaseModel):
     Requirements_Description: str
     Requirements_Attributes_Title: str
     Requirements_Attributes_Section: str
-    Requirements_Attributes_SubSection: Optional[str]
+    Requirements_Attributes_SubSection: Optional[str] = None
     Requirements_Attributes_AttributeDescription: str
     Requirements_Attributes_AdditionalInformation: str
     Requirements_Attributes_LevelOfRisk: int
@@ -44,7 +44,7 @@ class ProwlerThreatScoreAzureModel(BaseModel):
     Requirements_Description: str
     Requirements_Attributes_Title: str
     Requirements_Attributes_Section: str
-    Requirements_Attributes_SubSection: Optional[str]
+    Requirements_Attributes_SubSection: Optional[str] = None
     Requirements_Attributes_AttributeDescription: str
     Requirements_Attributes_AdditionalInformation: str
     Requirements_Attributes_LevelOfRisk: int
@@ -71,7 +71,7 @@ class ProwlerThreatScoreGCPModel(BaseModel):
     Requirements_Description: str
     Requirements_Attributes_Title: str
     Requirements_Attributes_Section: str
-    Requirements_Attributes_SubSection: Optional[str]
+    Requirements_Attributes_SubSection: Optional[str] = None
     Requirements_Attributes_AttributeDescription: str
     Requirements_Attributes_AdditionalInformation: str
     Requirements_Attributes_LevelOfRisk: int
@@ -98,7 +98,7 @@ class ProwlerThreatScoreM365Model(BaseModel):
     Requirements_Description: str
     Requirements_Attributes_Title: str
     Requirements_Attributes_Section: str
-    Requirements_Attributes_SubSection: Optional[str]
+    Requirements_Attributes_SubSection: Optional[str] = None
     Requirements_Attributes_AttributeDescription: str
     Requirements_Attributes_AdditionalInformation: str
     Requirements_Attributes_LevelOfRisk: int

prowler/providers/aws/lib/arn/models.py

@@ -10,7 +10,7 @@ class ARN(BaseModel):
     arn: str
     partition: str
     service: str
-    region: Optional[str]  # In IAM ARN's do not have region
+    region: Optional[str] = None  # In IAM ARN's do not have region
     account_id: str
     resource: str
     resource_type: str

prowler/providers/aws/services/account/account_service.py

@@ -101,6 +101,6 @@ class Account(AWSService):
 
 class Contact(BaseModel):
     type: str
-    email: Optional[str]
-    name: Optional[str]
-    phone_number: Optional[str]
+    email: Optional[str] = None
+    name: Optional[str] = None
+    phone_number: Optional[str] = None

prowler/providers/aws/services/acm/acm_service.py

@@ -111,5 +111,5 @@ class Certificate(BaseModel):
     tags: Optional[list] = []
     expiration_days: int
     in_use: bool
-    transparency_logging: Optional[bool]
+    transparency_logging: Optional[bool] = None
     region: str

prowler/providers/aws/services/apigateway/apigateway_service.py

@@ -224,11 +224,11 @@ class Stage(BaseModel):
     arn: str
     logging: bool
     client_certificate: bool
-    waf: Optional[str]
+    waf: Optional[str] = None
     tags: Optional[list] = []
-    tracing_enabled: Optional[bool]
-    cache_enabled: Optional[bool]
-    cache_data_encrypted: Optional[bool]
+    tracing_enabled: Optional[bool] = None
+    cache_enabled: Optional[bool] = None
+    cache_data_encrypted: Optional[bool] = None
 
 
 class PathResourceMethods(BaseModel):

prowler/providers/aws/services/awslambda/awslambda_service.py

@@ -196,12 +196,12 @@ class Function(BaseModel):
     name: str
     arn: str
     security_groups: list
-    runtime: Optional[str]
+    runtime: Optional[str] = None
     environment: dict = None
     region: str
-    policy: dict = None
+    policy: dict = {}
     code: LambdaCode = None
     url_config: URLConfig = None
-    vpc_id: Optional[str]
-    subnet_ids: Optional[set]
+    vpc_id: Optional[str] = None
+    subnet_ids: Optional[set] = None
     tags: Optional[list] = []

prowler/providers/aws/services/backup/backup_service.py

@@ -227,7 +227,7 @@ class BackupVault(BaseModel):
     locked: bool
     min_retention_days: int = None
     max_retention_days: int = None
-    tags: Optional[list]
+    tags: Optional[list] = None
 
 
 class BackupPlan(BaseModel):
@@ -236,17 +236,17 @@ class BackupPlan(BaseModel):
     region: str
     name: str
     version_id: str
-    last_execution_date: Optional[datetime]
+    last_execution_date: Optional[datetime] = None
     advanced_settings: list
-    tags: Optional[list]
+    tags: Optional[list] = None
 
 
 class BackupReportPlan(BaseModel):
     arn: str
     region: str
     name: str
-    last_attempted_execution_date: Optional[datetime]
-    last_successful_execution_date: Optional[datetime]
+    last_attempted_execution_date: Optional[datetime] = None
+    last_successful_execution_date: Optional[datetime] = None
 
 
 class RecoveryPoint(BaseModel):
@@ -256,4 +256,4 @@ class RecoveryPoint(BaseModel):
     backup_vault_name: str
     encrypted: bool
     backup_vault_region: str
-    tags: Optional[list]
+    tags: Optional[list] = None

prowler/providers/aws/services/bedrock/bedrock_service.py

@@ -116,7 +116,7 @@ class Guardrail(BaseModel):
     region: str
     tags: Optional[list] = []
     sensitive_information_filter: bool = False
-    prompt_attack_filter_strength: Optional[str]
+    prompt_attack_filter_strength: Optional[str] = None
 
 
 class BedrockAgent(AWSService):
@@ -169,6 +169,6 @@ class Agent(BaseModel):
     id: str
     name: str
     arn: str
-    guardrail_id: Optional[str]
+    guardrail_id: Optional[str] = None
     region: str
     tags: Optional[list] = []

prowler/providers/aws/services/cloudfront/cloudfront_service.py

@@ -186,7 +186,7 @@ class SSLSupportMethod(Enum):
 
 
 class DefaultCacheConfigBehaviour(BaseModel):
-    realtime_log_config_arn: Optional[str]
+    realtime_log_config_arn: Optional[str] = None
     viewer_protocol_policy: ViewerProtocolPolicy
     field_level_encryption_id: str
 
@@ -196,8 +196,8 @@ class Origin(BaseModel):
     domain_name: str
     origin_protocol_policy: str
     origin_ssl_protocols: list[str]
-    origin_access_control: Optional[str]
-    s3_origin_config: Optional[dict]
+    origin_access_control: Optional[str] = None
+    s3_origin_config: Optional[dict] = None
 
 
 class Distribution(BaseModel):
@@ -207,14 +207,14 @@ class Distribution(BaseModel):
     id: str
     region: str
     logging_enabled: bool = False
-    default_cache_config: Optional[DefaultCacheConfigBehaviour]
-    geo_restriction_type: Optional[GeoRestrictionType]
+    default_cache_config: Optional[DefaultCacheConfigBehaviour] = None
+    geo_restriction_type: Optional[GeoRestrictionType] = None
     origins: list[Origin]
     web_acl_id: str = ""
-    default_certificate: Optional[bool]
-    default_root_object: Optional[str]
-    viewer_protocol_policy: Optional[str]
+    default_certificate: Optional[bool] = None
+    default_root_object: Optional[str] = None
+    viewer_protocol_policy: Optional[str] = None
     tags: Optional[list] = []
-    origin_failover: Optional[bool]
-    ssl_support_method: Optional[SSLSupportMethod]
-    certificate: Optional[str]
+    origin_failover: Optional[bool] = None
+    ssl_support_method: Optional[SSLSupportMethod] = None
+    certificate: Optional[str] = None

prowler/providers/aws/services/cloudwatch/cloudwatch_service.py

@@ -278,8 +278,8 @@ class Logs(AWSService):
 class MetricAlarm(BaseModel):
     arn: str
     name: str
-    metric: Optional[str]
-    name_space: Optional[str]
+    metric: Optional[str] = None
+    name_space: Optional[str] = None
     region: str
     tags: Optional[list] = []
     alarm_actions: list
@@ -310,7 +310,7 @@ class MetricFilter(BaseModel):
     name: str
     metric: str
     pattern: str
-    log_group: Optional[LogGroup]
+    log_group: Optional[LogGroup] = None
     region: str
 
 

prowler/providers/aws/services/codeartifact/codeartifact_service.py

@@ -246,7 +246,7 @@ class Package(BaseModel):
     """Details of a package"""
 
     name: str
-    namespace: Optional[str]
+    namespace: Optional[str] = None
     format: str
     origin_configuration: OriginConfiguration
     latest_version: LatestPackageVersion

prowler/providers/aws/services/codebuild/codebuild_service.py

@@ -211,15 +211,15 @@ class Project(BaseModel):
     name: str
     arn: str
     region: str
-    last_build: Optional[Build]
-    last_invoked_time: Optional[datetime.datetime]
-    buildspec: Optional[str]
-    source: Optional[Source]
+    last_build: Optional[Build] = None
+    last_invoked_time: Optional[datetime.datetime] = None
+    buildspec: Optional[str] = None
+    source: Optional[Source] = None
     secondary_sources: Optional[list[Source]] = []
-    environment_variables: Optional[List[EnvironmentVariable]]
-    s3_logs: Optional[s3Logs]
-    cloudwatch_logs: Optional[CloudWatchLogs]
-    tags: Optional[list]
+    environment_variables: Optional[List[EnvironmentVariable]] = []
+    s3_logs: Optional[s3Logs] = None
+    cloudwatch_logs: Optional[CloudWatchLogs] = None
+    tags: Optional[list] = []
 
 
 class ExportConfig(BaseModel):
@@ -233,6 +233,6 @@ class ReportGroup(BaseModel):
     arn: str
     name: str
     region: str
-    status: Optional[str]
-    export_config: Optional[ExportConfig]
-    tags: Optional[list]
+    status: Optional[str] = None
+    export_config: Optional[ExportConfig] = None
+    tags: Optional[list] = []

prowler/providers/azure/services/entra/entra_service.py

@@ -367,12 +367,12 @@ class User(BaseModel):
 
 
 class DefaultUserRolePermissions(BaseModel):
-    allowed_to_create_apps: Optional[bool]
-    allowed_to_create_security_groups: Optional[bool]
-    allowed_to_create_tenants: Optional[bool]
-    allowed_to_read_bitlocker_keys_for_owned_device: Optional[bool]
-    allowed_to_read_other_users: Optional[bool]
-    odata_type: Optional[str]
+    allowed_to_create_apps: Optional[bool] = None
+    allowed_to_create_security_groups: Optional[bool] = None
+    allowed_to_create_tenants: Optional[bool] = None
+    allowed_to_read_bitlocker_keys_for_owned_device: Optional[bool] = None
+    allowed_to_read_other_users: Optional[bool] = None
+    odata_type: Optional[str] = None
     permission_grant_policies_assigned: Optional[List[str]] = None
 
 
@@ -380,20 +380,20 @@ class AuthorizationPolicy(BaseModel):
     id: str
     name: str
     description: str
-    default_user_role_permissions: Optional[DefaultUserRolePermissions]
+    default_user_role_permissions: Optional[DefaultUserRolePermissions] = None
     guest_invite_settings: str
     guest_user_role_id: UUID
 
 
 class SettingValue(BaseModel):
-    name: Optional[str]
-    odata_type: Optional[str]
-    value: Optional[str]
+    name: Optional[str] = None
+    odata_type: Optional[str] = None
+    value: Optional[str] = None
 
 
 class GroupSetting(BaseModel):
-    name: Optional[str]
-    template_id: Optional[str]
+    name: Optional[str] = None
+    template_id: Optional[str] = None
     settings: List[SettingValue]
 
 

tests/providers/azure/lib/mutelist/azure_mutelist_test.py

@@ -63,7 +63,7 @@ class TestAzureMutelist:
         finding.location = "West Europe"
         finding.status = "FAIL"
         finding.resource_name = "test_resource"
-        finding.resource_tags = []
+        finding.resource_tags = {}
         finding.subscription = "subscription_1"
 
         assert mutelist.is_finding_muted(finding)
@@ -91,7 +91,7 @@ class TestAzureMutelist:
             account_uid="subscription_1",
             region="subscription_1",
             resource_uid="test_resource",
-            resource_tags=[],
+            resource_tags={},
             muted=False,
         )