diff --git a/checks/check21 b/checks/check21 index 968f6c19e7..d34ed292b5 100644 --- a/checks/check21 +++ b/checks/check21 @@ -32,7 +32,7 @@ check21(){ for regx in $REGIONS; do TRAILS_AND_REGIONS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query 'trailList[*].{Name:TrailARN, HomeRegion:HomeRegion}' --output text 2>&1 | tr " " ',') if [[ $(echo "$TRAILS_AND_REGIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe trails" "$regx" "$trail" + textInfo "$regx: Access Denied trying to describe trails" "$regx" "$trail" continue fi if [[ $TRAILS_AND_REGIONS ]]; then diff --git a/checks/check22 b/checks/check22 index cca1a8da30..98488b2b56 100644 --- a/checks/check22 +++ b/checks/check22 @@ -32,7 +32,7 @@ check22(){ for regx in $REGIONS; do TRAILS_AND_REGIONS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query 'trailList[*].{Name:TrailARN, HomeRegion:HomeRegion}' --output text 2>&1 | tr " " ',') if [[ $(echo "$TRAILS_AND_REGIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe trails" "$regx" "$trail" + textInfo "$regx: Access Denied trying to describe trails" "$regx" "$trail" continue fi if [[ $TRAILS_AND_REGIONS ]]; then diff --git a/checks/check23 b/checks/check23 index 48b9bf44de..f8c5fde06c 100644 --- a/checks/check23 +++ b/checks/check23 @@ -32,7 +32,7 @@ check23(){ for regx in $REGIONS; do TRAILS_AND_REGIONS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query 'trailList[*].{Name:TrailARN, HomeRegion:HomeRegion}' --output text 2>&1 | tr " " ',') if [[ $(echo "$TRAILS_AND_REGIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe trails" "$regx" "$trail" + textInfo "$regx: Access Denied trying to describe trails" "$regx" "$trail" continue fi if [[ $TRAILS_AND_REGIONS ]]; then @@ -63,7 +63,7 @@ check23(){ # BUCKET_LOCATION=$($AWSCLI s3api get-bucket-location $PROFILE_OPT --region $regx --bucket $CLOUDTRAILBUCKET --output text 2>&1) if [[ $(echo "$BUCKET_LOCATION" | grep AccessDenied) ]]; then - textFail "Trail $trail in $TRAIL_REGION Access Denied getting bucket location for $CLOUDTRAILBUCKET" + textInfo "Trail $trail in $TRAIL_REGION Access Denied getting bucket location for $CLOUDTRAILBUCKET" continue fi if [[ $BUCKET_LOCATION == "None" ]]; then diff --git a/checks/check24 b/checks/check24 index 68cabd676c..9a04d0aeda 100644 --- a/checks/check24 +++ b/checks/check24 @@ -32,7 +32,7 @@ check24(){ for regx in $REGIONS; do TRAILS_AND_REGIONS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query 'trailList[*].{Name:TrailARN, HomeRegion:HomeRegion}' --output text 2>&1 | tr " " ',') if [[ $(echo "$TRAILS_AND_REGIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe trails" "$regx" "$trail" + textInfo "$regx: Access Denied trying to describe trails" "$regx" "$trail" continue fi if [[ $TRAILS_AND_REGIONS ]]; then diff --git a/checks/check25 b/checks/check25 index 752235fccf..a1062259f5 100644 --- a/checks/check25 +++ b/checks/check25 @@ -31,7 +31,7 @@ check25(){ CHECK_AWSCONFIG_RECORDING=$($AWSCLI configservice describe-configuration-recorder-status $PROFILE_OPT --region $regx --query 'ConfigurationRecordersStatus[*].recording' --output text 2>&1) CHECK_AWSCONFIG_STATUS=$($AWSCLI configservice describe-configuration-recorder-status $PROFILE_OPT --region $regx --query 'ConfigurationRecordersStatus[*].lastStatus' --output text 2>&1) if [[ $(echo "$CHECK_AWSCONFIG_STATUS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe configuration recorder status" "$regx" "recorder" + textInfo "$regx: Access Denied trying to describe configuration recorder status" "$regx" "recorder" continue fi if [[ $CHECK_AWSCONFIG_RECORDING == "True" ]]; then diff --git a/checks/check26 b/checks/check26 index 166fbea50a..405e6800d6 100644 --- a/checks/check26 +++ b/checks/check26 @@ -31,7 +31,7 @@ check26(){ for regx in $REGIONS; do TRAILS_AND_REGIONS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query 'trailList[*].{Name:TrailARN, HomeRegion:HomeRegion}' --output text 2>&1 | tr " " ',') if [[ $(echo "$TRAILS_AND_REGIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe trails" "$regx" "$trail" + textInfo "$regx: Access Denied trying to describe trails" "$regx" "$trail" continue fi if [[ $TRAILS_AND_REGIONS ]]; then @@ -62,7 +62,7 @@ check26(){ # BUCKET_LOCATION=$($AWSCLI s3api get-bucket-location $PROFILE_OPT --region $regx --bucket $CLOUDTRAILBUCKET --output text 2>&1) if [[ $(echo "$BUCKET_LOCATION" | grep AccessDenied) ]]; then - textFail "$regx: Trail $trail Access Denied getting bucket location for $CLOUDTRAILBUCKET" "$TRAIL_REGION" "$trail" + textInfo "$regx: Trail $trail Access Denied getting bucket location for $CLOUDTRAILBUCKET" "$TRAIL_REGION" "$trail" continue fi if [[ $BUCKET_LOCATION == "None" ]]; then diff --git a/checks/check27 b/checks/check27 index c5304c74a2..166b1a07e6 100644 --- a/checks/check27 +++ b/checks/check27 @@ -32,7 +32,7 @@ check27(){ for regx in $REGIONS; do TRAILS_AND_REGIONS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query 'trailList[*].{Name:TrailARN, HomeRegion:HomeRegion}' --output text 2>&1 | tr " " ',') if [[ $(echo "$TRAILS_AND_REGIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe trails" "$regx" "$trail" + textInfo "$regx: Access Denied trying to describe trails" "$regx" "$trail" continue fi if [[ $TRAILS_AND_REGIONS ]]; then diff --git a/checks/check28 b/checks/check28 index 1008a36df9..2770d0a67e 100644 --- a/checks/check28 +++ b/checks/check28 @@ -30,7 +30,7 @@ check28(){ for regx in $REGIONS; do CHECK_KMS_KEYLIST=$($AWSCLI kms list-keys $PROFILE_OPT --region $regx --output text --query 'Keys[*].KeyId' --output text 2>&1) if [[ $(echo "$CHECK_KMS_KEYLIST" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to list keys" "$regx" "$key" + textInfo "$regx: Access Denied trying to list keys" "$regx" "$key" continue fi if [[ $CHECK_KMS_KEYLIST ]]; then @@ -38,7 +38,7 @@ check28(){ for key in $CHECK_KMS_KEYLIST; do KMSDETAILS=$($AWSCLI kms describe-key --key-id $key $PROFILE_OPT --region $regx --query 'KeyMetadata.{key:KeyId,man:KeyManager,origin:Origin,spec:CustomerMasterKeySpec,state:KeyState}' --output text 2>&1 | grep SYMMETRIC) if [[ $(echo "$KMSDETAILS" | grep AccessDenied) ]]; then - textFail "$regx: Key $key Access Denied describing key" "$regx" "$key" + textInfo "$regx: Access Denied describing key $key" "$regx" "$key" continue fi @@ -60,7 +60,7 @@ check28(){ else CHECK_KMS_KEY_ROTATION=$($AWSCLI kms get-key-rotation-status --key-id $key $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$CHECK_KMS_KEY_ROTATION" | grep AccessDenied) ]]; then - textFail "$regx: Key $key Access Denied getting key rotation status" "$regx" "$key" + textInfo "$regx: Access Denied getting key rotation status for $key " "$regx" "$key" continue fi if [[ "$CHECK_KMS_KEY_ROTATION" == "True" ]];then diff --git a/checks/check29 b/checks/check29 index b208f50697..035fc345b9 100644 --- a/checks/check29 +++ b/checks/check29 @@ -31,13 +31,13 @@ check29(){ for regx in $REGIONS; do AVAILABLE_VPC=$($AWSCLI ec2 describe-vpcs $PROFILE_OPT --region $regx --query 'Vpcs[?State==`available`].VpcId' --output text 2>&1) if [[ $(echo "$AVAILABLE_VPC" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe VPCs" "$regx" "$vpcx" + textInfo "$regx: Access Denied trying to describe VPCs" "$regx" "$vpcx" continue fi for vpcx in $AVAILABLE_VPC; do CHECK_FL=$($AWSCLI ec2 describe-flow-logs $PROFILE_OPT --region $regx --filter Name="resource-id",Values="${vpcx}" --query 'FlowLogs[?FlowLogStatus==`ACTIVE`].FlowLogId' --output text 2>&1) if [[ $(echo "$CHECK_FL" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: VPC $vpcx Access Denied trying to describe flow logs" "$regx" "$vpcx" + textInfo "$regx: Access Denied trying to describe flow logs in VPC $vpcx" "$regx" "$vpcx" continue fi if [[ $CHECK_FL ]]; then diff --git a/checks/check41 b/checks/check41 index d6bf98cb06..33e87109b0 100644 --- a/checks/check41 +++ b/checks/check41 @@ -31,7 +31,7 @@ check41(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=`22` && ToPort>=`22`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check42 b/checks/check42 index 4d7350918b..71c678386c 100644 --- a/checks/check42 +++ b/checks/check42 @@ -31,7 +31,7 @@ check42(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=`3389` && ToPort>=`3389`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check43 b/checks/check43 index db704e87f9..8e2f004ce9 100644 --- a/checks/check43 +++ b/checks/check43 @@ -31,7 +31,7 @@ check43(){ for regx in $REGIONS; do CHECK_SGDEFAULT_IDS=$($AWSCLI ec2 describe-security-groups $PROFILE_OPT --region $regx --filters Name=group-name,Values='default' --query 'SecurityGroups[*].GroupId[]' --output text 2>&1) if [[ $(echo "$CHECK_SGDEFAULT_IDS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi for CHECK_SGDEFAULT_ID in $CHECK_SGDEFAULT_IDS; do diff --git a/checks/check44 b/checks/check44 index 3e55536ab9..158e5c327a 100644 --- a/checks/check44 +++ b/checks/check44 @@ -30,7 +30,7 @@ check44(){ for regx in $REGIONS; do LIST_OF_VPCS_PEERING_CONNECTIONS=$($AWSCLI ec2 describe-vpc-peering-connections --output text $PROFILE_OPT --region $regx --query 'VpcPeeringConnections[*].VpcPeeringConnectionId' 2>&1| sort | paste -s -d" " - ) if [[ $(echo "$LIST_OF_VPCS_PEERING_CONNECTIONS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe vpc peering connections" "$regx" + textInfo "$regx: Access Denied trying to describe vpc peering connections" "$regx" continue fi if [[ $LIST_OF_VPCS_PEERING_CONNECTIONS ]];then diff --git a/checks/check45 b/checks/check45 index 550757b42a..cc95207def 100644 --- a/checks/check45 +++ b/checks/check45 @@ -29,7 +29,7 @@ check45(){ for regx in $REGIONS; do NACL_LIST=$($AWSCLI ec2 describe-network-acls --query 'NetworkAcls[?Entries[?(((!PortRange) || (PortRange.From<=`22` && PortRange.To>=`22`)) && ((CidrBlock == `0.0.0.0/0`) && (Egress == `false`) && (RuleAction == `allow`)))]].{NetworkAclId:NetworkAclId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$NACL_LIST" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe vpc network acls" "$regx" + textInfo "$regx: Access Denied trying to describe vpc network acls" "$regx" continue fi if [[ $NACL_LIST ]];then diff --git a/checks/check46 b/checks/check46 index fd2aaabf24..9bcfccd59b 100644 --- a/checks/check46 +++ b/checks/check46 @@ -29,7 +29,7 @@ check46(){ for regx in $REGIONS; do NACL_LIST=$($AWSCLI ec2 describe-network-acls --query 'NetworkAcls[?Entries[?(((!PortRange) || (PortRange.From<=`3389` && PortRange.To>=`3389`)) && ((CidrBlock == `0.0.0.0/0`) && (Egress == `false`) && (RuleAction == `allow`)))]].{NetworkAclId:NetworkAclId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$NACL_LIST" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe vpc network acls" "$regx" + textInfo "$regx: Access Denied trying to describe vpc network acls" "$regx" continue fi if [[ $NACL_LIST ]];then diff --git a/checks/check_extra710 b/checks/check_extra710 index 7edd17e818..22bcd7ab4c 100644 --- a/checks/check_extra710 +++ b/checks/check_extra710 @@ -29,7 +29,7 @@ extra710(){ for regx in $REGIONS; do LIST_OF_PUBLIC_INSTANCES=$($AWSCLI ec2 describe-instances $PROFILE_OPT --region $regx --query 'Reservations[*].Instances[?PublicIpAddress].[InstanceId,PublicIpAddress]' --output text 2>&1) if [[ $(echo "$LIST_OF_PUBLIC_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe instances" "$regx" + textInfo "$regx: Access Denied trying to describe instances" "$regx" continue fi if [[ $LIST_OF_PUBLIC_INSTANCES ]];then diff --git a/checks/check_extra7101 b/checks/check_extra7101 index e2b6528c7a..2efe711a24 100644 --- a/checks/check_extra7101 +++ b/checks/check_extra7101 @@ -28,7 +28,7 @@ extra7101(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra7102 b/checks/check_extra7102 index 40e23692d4..f70492c7c5 100644 --- a/checks/check_extra7102 +++ b/checks/check_extra7102 @@ -38,7 +38,7 @@ extra7102(){ for regx in $REGIONS; do LIST_OF_EIP=$($AWSCLI $PROFILE_OPT --region $regx ec2 describe-network-interfaces --query 'NetworkInterfaces[*].Association.PublicIp' --output text 2>&1) if [[ $(echo "$LIST_OF_EIP" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe network interfaces" "$regx" + textInfo "$regx: Access Denied trying to describe network interfaces" "$regx" continue fi if [[ $LIST_OF_EIP ]]; then diff --git a/checks/check_extra7103 b/checks/check_extra7103 index 9ff11c652d..97713f20bb 100644 --- a/checks/check_extra7103 +++ b/checks/check_extra7103 @@ -28,7 +28,7 @@ extra7103(){ for regx in ${REGIONS}; do LIST_SM_NB_INSTANCES=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-notebook-instances --query 'NotebookInstances[*].NotebookInstanceName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list notebook instances" "$regx" + textInfo "$regx: Access Denied trying to list notebook instances" "$regx" continue fi if [[ $LIST_SM_NB_INSTANCES ]];then diff --git a/checks/check_extra7104 b/checks/check_extra7104 index 451ee532e4..c1a44d4433 100644 --- a/checks/check_extra7104 +++ b/checks/check_extra7104 @@ -28,7 +28,7 @@ extra7104(){ for regx in ${REGIONS}; do LIST_SM_NB_INSTANCES=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-notebook-instances --query 'NotebookInstances[*].NotebookInstanceName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list notebook instances" "$regx" + textInfo "$regx: Access Denied trying to list notebook instances" "$regx" continue fi if [[ $LIST_SM_NB_INSTANCES ]];then diff --git a/checks/check_extra7105 b/checks/check_extra7105 index 9948e7840c..5ba8d94d34 100644 --- a/checks/check_extra7105 +++ b/checks/check_extra7105 @@ -28,7 +28,7 @@ extra7105(){ for regx in ${REGIONS}; do LIST_SM_NB_MODELS=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-models --query 'Models[*].ModelName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_MODELS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list models" "$regx" + textInfo "$regx: Access Denied trying to list models" "$regx" continue fi if [[ $LIST_SM_NB_MODELS ]];then diff --git a/checks/check_extra7106 b/checks/check_extra7106 index b363fbb502..9863edf7b4 100644 --- a/checks/check_extra7106 +++ b/checks/check_extra7106 @@ -28,7 +28,7 @@ extra7106(){ for regx in ${REGIONS}; do LIST_SM_NB_MODELS=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-models --query 'Models[*].ModelName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_MODELS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list models" "$regx" + textInfo "$regx: Access Denied trying to list models" "$regx" continue fi if [[ $LIST_SM_NB_MODELS ]];then diff --git a/checks/check_extra7107 b/checks/check_extra7107 index 02d983ca93..1a94873b65 100644 --- a/checks/check_extra7107 +++ b/checks/check_extra7107 @@ -28,7 +28,7 @@ extra7107(){ for regx in ${REGIONS}; do LIST_SM_NB_JOBS=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-training-jobs --query 'TrainingJobSummaries[*].TrainingJobName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_JOBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list training jobs" "$regx" + textInfo "$regx: Access Denied trying to list training jobs" "$regx" continue fi if [[ $LIST_SM_NB_JOBS ]];then diff --git a/checks/check_extra7108 b/checks/check_extra7108 index a26e0b61c1..183cd302b2 100644 --- a/checks/check_extra7108 +++ b/checks/check_extra7108 @@ -28,7 +28,7 @@ extra7108(){ for regx in ${REGIONS}; do LIST_SM_NB_JOBS=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-training-jobs --query 'TrainingJobSummaries[*].TrainingJobName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_JOBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list training jobs" "$regx" + textInfo "$regx: Access Denied trying to list training jobs" "$regx" continue fi if [[ $LIST_SM_NB_JOBS ]];then diff --git a/checks/check_extra7109 b/checks/check_extra7109 index 808875a278..8775ee741b 100644 --- a/checks/check_extra7109 +++ b/checks/check_extra7109 @@ -28,7 +28,7 @@ extra7109(){ for regx in ${REGIONS}; do LIST_SM_NB_JOBS=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-training-jobs --query 'TrainingJobSummaries[*].TrainingJobName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_JOBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list training jobs" "$regx" + textInfo "$regx: Access Denied trying to list training jobs" "$regx" continue fi if [[ $LIST_SM_NB_JOBS ]];then diff --git a/checks/check_extra711 b/checks/check_extra711 index d7f0645546..2b8335d961 100644 --- a/checks/check_extra711 +++ b/checks/check_extra711 @@ -28,7 +28,7 @@ extra711(){ for regx in $REGIONS; do LIST_OF_PUBLIC_REDSHIFT_CLUSTERS=$($AWSCLI redshift describe-clusters $PROFILE_OPT --region $regx --query 'Clusters[?PubliclyAccessible == `true`].[ClusterIdentifier,Endpoint.Address]' --output text 2>&1) if [[ $(echo "$LIST_OF_PUBLIC_REDSHIFT_CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe clusters" "$regx" + textInfo "$regx: Access Denied trying to describe clusters" "$regx" continue fi if [[ $LIST_OF_PUBLIC_REDSHIFT_CLUSTERS ]];then diff --git a/checks/check_extra7110 b/checks/check_extra7110 index 45bd7cbfc7..151d35cf2f 100644 --- a/checks/check_extra7110 +++ b/checks/check_extra7110 @@ -28,7 +28,7 @@ extra7110(){ for regx in ${REGIONS}; do LIST_SM_NB_JOBS=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-training-jobs --query 'TrainingJobSummaries[*].TrainingJobName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_JOBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list training jobs" "$regx" + textInfo "$regx: Access Denied trying to list training jobs" "$regx" continue fi if [[ $LIST_SM_NB_JOBS ]];then diff --git a/checks/check_extra7111 b/checks/check_extra7111 index 5c00f4518d..936931fd36 100644 --- a/checks/check_extra7111 +++ b/checks/check_extra7111 @@ -28,7 +28,7 @@ extra7111(){ for regx in ${REGIONS}; do LIST_SM_NB_INSTANCES=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-notebook-instances --query 'NotebookInstances[*].NotebookInstanceName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list notebook instances" "$regx" + textInfo "$regx: Access Denied trying to list notebook instances" "$regx" continue fi if [[ $LIST_SM_NB_INSTANCES ]];then diff --git a/checks/check_extra7112 b/checks/check_extra7112 index b40c5996da..c3143cb79a 100644 --- a/checks/check_extra7112 +++ b/checks/check_extra7112 @@ -28,7 +28,7 @@ extra7112(){ for regx in ${REGIONS}; do LIST_SM_NB_INSTANCES=$($AWSCLI $PROFILE_OPT --region $regx sagemaker list-notebook-instances --query 'NotebookInstances[*].NotebookInstanceName' --output text 2>&1) if [[ $(echo "$LIST_SM_NB_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list notebook instances" "$regx" + textInfo "$regx: Access Denied trying to list notebook instances" "$regx" continue fi if [[ $LIST_SM_NB_INSTANCES ]];then diff --git a/checks/check_extra7113 b/checks/check_extra7113 index a70ebe4855..e8e61201e7 100644 --- a/checks/check_extra7113 +++ b/checks/check_extra7113 @@ -39,7 +39,7 @@ extra7113(){ for regx in $REGIONS; do LIST_OF_RDS_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query "DBInstances[?Engine != 'docdb'].DBInstanceIdentifier" --output text 2>&1) if [[ $(echo "$LIST_OF_RDS_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe DB instances" "$regx" + textInfo "$regx: Access Denied trying to describe DB instances" "$regx" continue fi if [[ $LIST_OF_RDS_INSTANCES ]];then diff --git a/checks/check_extra7114 b/checks/check_extra7114 index cc62ca5baf..9179e63ff4 100644 --- a/checks/check_extra7114 +++ b/checks/check_extra7114 @@ -28,7 +28,7 @@ extra7114(){ for regx in $REGIONS; do LIST_EP_SC=$($AWSCLI glue get-dev-endpoints $PROFILE_OPT --region $regx --query 'DevEndpoints[*].{Name:EndpointName,Security:SecurityConfiguration}' --output json 2>&1) if [[ $(echo "$LIST_EP_SC" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get dev endpoints" "$regx" + textInfo "$regx: Access Denied trying to get dev endpoints" "$regx" continue fi if [[ $LIST_EP_SC != '[]' ]]; then diff --git a/checks/check_extra7115 b/checks/check_extra7115 index 6f8fd9bc9c..8abca268ea 100644 --- a/checks/check_extra7115 +++ b/checks/check_extra7115 @@ -27,7 +27,7 @@ extra7115(){ for regx in $REGIONS; do CONNECTION_LIST=$($AWSCLI glue get-connections $PROFILE_OPT --region $regx --output json --query 'ConnectionList[*].{Name:Name,SSL:ConnectionProperties.JDBC_ENFORCE_SSL}' 2>&1) if [[ $(echo "$CONNECTION_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get connections" "$regx" + textInfo "$regx: Access Denied trying to get connections" "$regx" continue fi if [[ $CONNECTION_LIST != '[]' ]]; then diff --git a/checks/check_extra7116 b/checks/check_extra7116 index 7ebd9d3c58..4aad3ecbcb 100644 --- a/checks/check_extra7116 +++ b/checks/check_extra7116 @@ -27,7 +27,7 @@ extra7116(){ for regx in $REGIONS; do TABLE_LIST=$($AWSCLI glue search-tables --max-results 1 $PROFILE_OPT --region $regx --output text --query 'TableList[*]' 2>&1) if [[ $(echo "$TABLE_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to search tables" "$regx" + textInfo "$regx: Access Denied trying to search tables" "$regx" continue fi if [[ ! -z $TABLE_LIST ]]; then diff --git a/checks/check_extra7117 b/checks/check_extra7117 index 389e50d31f..c390fcacb1 100644 --- a/checks/check_extra7117 +++ b/checks/check_extra7117 @@ -27,7 +27,7 @@ extra7117(){ for regx in $REGIONS; do CONNECTION_LIST=$($AWSCLI glue get-connections $PROFILE_OPT --region $regx --output text --query 'ConnectionList[*]' 2>&1) if [[ $(echo "$CONNECTION_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get connections" "$regx" + textInfo "$regx: Access Denied trying to get connections" "$regx" continue fi if [[ ! -z $CONNECTION_LIST ]]; then diff --git a/checks/check_extra7118 b/checks/check_extra7118 index 22dca80288..53303c08ac 100644 --- a/checks/check_extra7118 +++ b/checks/check_extra7118 @@ -27,7 +27,7 @@ extra7118(){ for regx in $REGIONS; do JOB_LIST=$($AWSCLI glue get-jobs $PROFILE_OPT --region $regx --output json --query 'Jobs[*].{Name:Name,SecurityConfiguration:SecurityConfiguration,JobEncryption:DefaultArguments."--encryption-type"}' 2>&1) if [[ $(echo "$JOB_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get jobs" "$regx" + textInfo "$regx: Access Denied trying to get jobs" "$regx" continue fi if [[ $JOB_LIST != '[]' ]]; then diff --git a/checks/check_extra7119 b/checks/check_extra7119 index d8098c55d1..0627073688 100644 --- a/checks/check_extra7119 +++ b/checks/check_extra7119 @@ -28,7 +28,7 @@ extra7119(){ for regx in $REGIONS; do LIST_EP_SC=$($AWSCLI glue get-dev-endpoints $PROFILE_OPT --region $regx --query 'DevEndpoints[*].{Name:EndpointName,Security:SecurityConfiguration}' --output json 2>&1) if [[ $(echo "$LIST_EP_SC" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get dev endpoints" "$regx" + textInfo "$regx: Access Denied trying to get dev endpoints" "$regx" continue fi if [[ $LIST_EP_SC != '[]' ]]; then diff --git a/checks/check_extra7120 b/checks/check_extra7120 index 4b444d4357..018067c5c8 100644 --- a/checks/check_extra7120 +++ b/checks/check_extra7120 @@ -27,7 +27,7 @@ extra7120(){ for regx in $REGIONS; do JOB_LIST=$($AWSCLI glue get-jobs $PROFILE_OPT --region $regx --output json --query 'Jobs[*].{Name:Name,SecurityConfiguration:SecurityConfiguration}' 2>&1) if [[ $(echo "$JOB_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get jobs" "$regx" + textInfo "$regx: Access Denied trying to get jobs" "$regx" continue fi if [[ $JOB_LIST != '[]' ]]; then diff --git a/checks/check_extra7121 b/checks/check_extra7121 index 65c2f566b8..bdc041d135 100644 --- a/checks/check_extra7121 +++ b/checks/check_extra7121 @@ -28,7 +28,7 @@ extra7121(){ for regx in $REGIONS; do LIST_EP_SC=$($AWSCLI glue get-dev-endpoints $PROFILE_OPT --region $regx --query 'DevEndpoints[*].{Name:EndpointName,Security:SecurityConfiguration}' --output json 2>&1) if [[ $(echo "$LIST_EP_SC" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get dev endpoints" "$regx" + textInfo "$regx: Access Denied trying to get dev endpoints" "$regx" continue fi if [[ $LIST_EP_SC != '[]' ]]; then diff --git a/checks/check_extra7122 b/checks/check_extra7122 index 8e3216a55b..6c91dfcad7 100644 --- a/checks/check_extra7122 +++ b/checks/check_extra7122 @@ -27,7 +27,7 @@ extra7122(){ for regx in $REGIONS; do JOB_LIST=$($AWSCLI glue get-jobs $PROFILE_OPT --region $regx --output json --query 'Jobs[*].{Name:Name,SecurityConfiguration:SecurityConfiguration}' 2>&1) if [[ $(echo "$JOB_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get jobs" "$regx" + textInfo "$regx: Access Denied trying to get jobs" "$regx" continue fi if [[ $JOB_LIST != '[]' ]]; then diff --git a/checks/check_extra7124 b/checks/check_extra7124 index 54064650e8..72b1e1c1c8 100644 --- a/checks/check_extra7124 +++ b/checks/check_extra7124 @@ -29,7 +29,7 @@ extra7124(){ # Filters running instances only LIST_EC2_INSTANCES=$($AWSCLI ec2 describe-instances $PROFILE_OPT --query 'Reservations[*].Instances[*].[InstanceId]' --filters Name=instance-state-name,Values=running --region $regx --output text 2>&1) if [[ $(echo "$LIST_EC2_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe instances" "$regx" + textInfo "$regx: Access Denied trying to describe instances" "$regx" continue fi if [[ $LIST_EC2_INSTANCES ]]; then diff --git a/checks/check_extra7127 b/checks/check_extra7127 index f044346b21..346501679f 100644 --- a/checks/check_extra7127 +++ b/checks/check_extra7127 @@ -29,7 +29,7 @@ extra7127(){ for regx in $REGIONS; do NON_COMPLIANT_SSM_MANAGED_INSTANCES=$($AWSCLI ssm list-resource-compliance-summaries $PROFILE_OPT --region $regx --filters Key=Status,Values=NON_COMPLIANT --query ResourceComplianceSummaryItems[].ResourceId --output text 2>&1) if [[ $(echo "$NON_COMPLIANT_SSM_MANAGED_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list resource compliance summaries" "$regx" + textInfo "$regx: Access Denied trying to list resource compliance summaries" "$regx" continue fi COMPLIANT_SSM_MANAGED_INSTANCES=$($AWSCLI ssm list-resource-compliance-summaries $PROFILE_OPT --region $regx --filters Key=Status,Values=COMPLIANT --query ResourceComplianceSummaryItems[].ResourceId --output text) diff --git a/checks/check_extra7128 b/checks/check_extra7128 index fc2944f726..61c7f6e3a9 100644 --- a/checks/check_extra7128 +++ b/checks/check_extra7128 @@ -28,7 +28,7 @@ extra7128(){ for regx in $REGIONS; do DDB_TABLES_LIST=$($AWSCLI dynamodb list-tables $PROFILE_OPT --region $regx --output text --query TableNames 2>&1) if [[ $(echo "$DDB_TABLES_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list tables" "$regx" + textInfo "$regx: Access Denied trying to list tables" "$regx" continue fi if [[ $DDB_TABLES_LIST ]]; then diff --git a/checks/check_extra7129 b/checks/check_extra7129 index e798c919ba..29031a6cfb 100644 --- a/checks/check_extra7129 +++ b/checks/check_extra7129 @@ -31,7 +31,7 @@ extra7129(){ # ( LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[?Scheme == `internet-facing` && Type == `application`].[LoadBalancerName]' --output text 2>&1) if [[ $(echo "$LIST_OF_ELBSV2" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi LIST_OF_WAFV2_WEBACL_ARN=$($AWSCLI wafv2 list-web-acls $PROFILE_OPT --region=$regx --scope=REGIONAL --query WebACLs[*].ARN --output text) diff --git a/checks/check_extra7130 b/checks/check_extra7130 index 4e68318223..0980eea9be 100644 --- a/checks/check_extra7130 +++ b/checks/check_extra7130 @@ -28,7 +28,7 @@ extra7130(){ for regx in $REGIONS; do LIST_SNS=$($AWSCLI sns list-topics $PROFILE_OPT --region $regx --query 'Topics[*].TopicArn' --output text 2>&1) if [[ $(echo "$LIST_SNS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list topics" "$regx" + textInfo "$regx: Access Denied trying to list topics" "$regx" continue fi if [[ $LIST_SNS ]];then diff --git a/checks/check_extra7131 b/checks/check_extra7131 index 871136b267..af4bc42938 100644 --- a/checks/check_extra7131 +++ b/checks/check_extra7131 @@ -28,7 +28,7 @@ extra7131(){ # LIST_OF_RDS_PUBLIC_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query 'DBInstances[?PubliclyAccessible==`true` && DBInstanceStatus==`"available"`].[DBInstanceIdentifier,Endpoint.Address]' --output text) LIST_OF_RDS_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query 'DBInstances[*].[DBInstanceIdentifier,AutoMinorVersionUpgrade]' --output text 2>&1) if [[ $(echo "$LIST_OF_RDS_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe DB instances" "$regx" + textInfo "$regx: Access Denied trying to describe DB instances" "$regx" continue fi if [[ $LIST_OF_RDS_INSTANCES ]];then diff --git a/checks/check_extra7132 b/checks/check_extra7132 index eecf140a27..a2bbba7449 100644 --- a/checks/check_extra7132 +++ b/checks/check_extra7132 @@ -27,7 +27,7 @@ extra7132(){ for regx in $REGIONS; do RDS_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query "DBInstances[?Engine != 'docdb'].DBInstanceIdentifier" --output text 2>&1) if [[ $(echo "$RDS_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe DB instances" "$regx" + textInfo "$regx: Access Denied trying to describe DB instances" "$regx" continue fi if [[ $RDS_INSTANCES ]];then diff --git a/checks/check_extra7133 b/checks/check_extra7133 index 23a8fab731..eae0f3a078 100644 --- a/checks/check_extra7133 +++ b/checks/check_extra7133 @@ -27,7 +27,7 @@ extra7133(){ for regx in $REGIONS; do RDS_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query "DBInstances[?Engine != 'docdb'].DBInstanceIdentifier" --output text 2>&1) if [[ $(echo "$RDS_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe DB instances" "$regx" + textInfo "$regx: Access Denied trying to describe DB instances" "$regx" continue fi if [[ $RDS_INSTANCES ]];then diff --git a/checks/check_extra7134 b/checks/check_extra7134 index 2ec1a44ead..4919262ffd 100644 --- a/checks/check_extra7134 +++ b/checks/check_extra7134 @@ -27,7 +27,7 @@ extra7134(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort==`20` && ToPort==`21`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra7135 b/checks/check_extra7135 index 2978b6c421..74c9cb74f8 100644 --- a/checks/check_extra7135 +++ b/checks/check_extra7135 @@ -27,7 +27,7 @@ extra7135(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort==`9092` && ToPort==`9092`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra7136 b/checks/check_extra7136 index 04df4c55be..3646a82756 100644 --- a/checks/check_extra7136 +++ b/checks/check_extra7136 @@ -27,7 +27,7 @@ extra7136(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort==`23` && ToPort==`23`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra7137 b/checks/check_extra7137 index d624a609cd..00afed6136 100644 --- a/checks/check_extra7137 +++ b/checks/check_extra7137 @@ -27,7 +27,7 @@ extra7137(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort==`1433` && ToPort==`1434`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra7138 b/checks/check_extra7138 index b12d2e12bd..14b05ebbeb 100644 --- a/checks/check_extra7138 +++ b/checks/check_extra7138 @@ -28,7 +28,7 @@ extra7138(){ for regx in $REGIONS; do NACL_LIST=$($AWSCLI ec2 describe-network-acls --query 'NetworkAcls[?Entries[?((!PortRange) && (CidrBlock == `0.0.0.0/0`) && (Egress == `false`) && (RuleAction == `allow`))]].{NetworkAclId:NetworkAclId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$NACL_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe network acls" "$regx" + textInfo "$regx: Access Denied trying to describe network acls" "$regx" continue fi if [[ $NACL_LIST ]];then diff --git a/checks/check_extra7139 b/checks/check_extra7139 index e655a2a73a..4268c26f1d 100644 --- a/checks/check_extra7139 +++ b/checks/check_extra7139 @@ -27,7 +27,7 @@ extra7139(){ DETECTORS_LIST="" DETECTORS_LIST=$($AWSCLI guardduty list-detectors --query DetectorIds $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$DETECTORS_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list detectors" "$regx" + textInfo "$regx: Access Denied trying to list detectors" "$regx" continue fi if [[ $DETECTORS_LIST ]];then diff --git a/checks/check_extra7140 b/checks/check_extra7140 index 6ef144dd30..3cab4570e1 100644 --- a/checks/check_extra7140 +++ b/checks/check_extra7140 @@ -26,7 +26,7 @@ extra7140(){ for regx in $REGIONS; do SSM_DOCS=$($AWSCLI $PROFILE_OPT --region $regx ssm list-documents --filters Key=Owner,Values=Self --query DocumentIdentifiers[].Name --output text 2>&1) if [[ $(echo "$SSM_DOCS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list documents" "$regx" + textInfo "$regx: Access Denied trying to list documents" "$regx" continue fi if [[ $SSM_DOCS ]];then diff --git a/checks/check_extra7141 b/checks/check_extra7141 index 84dc47f123..1768b4fc01 100644 --- a/checks/check_extra7141 +++ b/checks/check_extra7141 @@ -33,7 +33,7 @@ extra7141(){ for regx in $REGIONS; do SSM_DOCS=$($AWSCLI $PROFILE_OPT --region $regx ssm list-documents --filters Key=Owner,Values=Self --query DocumentIdentifiers[].Name --output text 2>&1) if [[ $(echo "$SSM_DOCS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list documents" "$regx" + textInfo "$regx: Access Denied trying to list documents" "$regx" continue fi if [[ $SSM_DOCS ]];then diff --git a/checks/check_extra7142 b/checks/check_extra7142 index fa1cc2a5f8..ded331ecfb 100644 --- a/checks/check_extra7142 +++ b/checks/check_extra7142 @@ -29,7 +29,7 @@ extra7142(){ for regx in $REGIONS; do LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[?Type == `application`].[LoadBalancerArn]' --output text 2>&1) if [[ $(echo "$LIST_OF_ELBSV2" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi if [[ $LIST_OF_ELBSV2 ]];then diff --git a/checks/check_extra7143 b/checks/check_extra7143 index cb9a1c3fe8..abf1d81f17 100644 --- a/checks/check_extra7143 +++ b/checks/check_extra7143 @@ -28,7 +28,7 @@ extra7143(){ for regx in $REGIONS; do LIST_OF_EFS_IDS=$($AWSCLI efs describe-file-systems $PROFILE_OPT --region $regx --query FileSystems[*].FileSystemId --output text 2>&1|xargs -n1 ) if [[ $(echo "$LIST_OF_EFS_IDS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe file systems" "$regx" + textInfo "$regx: Access Denied trying to describe file systems" "$regx" continue fi if [[ $LIST_OF_EFS_IDS ]]; then diff --git a/checks/check_extra7145 b/checks/check_extra7145 index 8d63e0eeb6..c62b7c61c0 100644 --- a/checks/check_extra7145 +++ b/checks/check_extra7145 @@ -28,7 +28,7 @@ extra7145(){ for regx in $REGIONS; do LIST_OF_LAMBDA_FUNCTIONS=$($AWSCLI lambda list-functions $PROFILE_OPT --region $regx --query Functions[*].FunctionName --output text 2>&1) if [[ $(echo "$LIST_OF_LAMBDA_FUNCTIONS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list functions" "$regx" + textInfo "$regx: Access Denied trying to list functions" "$regx" continue fi if [[ $LIST_OF_LAMBDA_FUNCTIONS ]]; then diff --git a/checks/check_extra7146 b/checks/check_extra7146 index c5afa3ded3..2c4682a8fe 100644 --- a/checks/check_extra7146 +++ b/checks/check_extra7146 @@ -28,7 +28,7 @@ extra7146(){ for regx in $REGIONS; do ELASTIC_IP_ADDRESSES=$($AWSCLI ec2 describe-addresses $PROFILE_OPT --region $regx --query Addresses --output json 2>&1) if [[ $(echo "$ELASTIC_IP_ADDRESSES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe addresses" "$regx" + textInfo "$regx: Access Denied trying to describe addresses" "$regx" continue fi if [[ $ELASTIC_IP_ADDRESSES != [] ]]; then diff --git a/checks/check_extra7147 b/checks/check_extra7147 index 3dd82cf525..ef9ee88bc2 100644 --- a/checks/check_extra7147 +++ b/checks/check_extra7147 @@ -27,7 +27,7 @@ extra7147(){ for regx in $REGIONS; do LIST_OF_VAULTS=$($AWSCLI glacier list-vaults $PROFILE_OPT --region $regx --account-id $ACCOUNT_NUM --query VaultList[*].VaultName --output text 2>&1|xargs -n1) if [[ $(echo "$LIST_OF_VAULTS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list vaults" "$regx" + textInfo "$regx: Access Denied trying to list vaults" "$regx" continue fi if [[ $LIST_OF_VAULTS ]]; then diff --git a/checks/check_extra7148 b/checks/check_extra7148 index 56f03a961c..4f035a884e 100644 --- a/checks/check_extra7148 +++ b/checks/check_extra7148 @@ -27,7 +27,7 @@ extra7148() { for regx in $REGIONS; do LIST_OF_EFS_SYSTEMS=$($AWSCLI efs describe-file-systems $PROFILE_OPT --region $regx --query 'FileSystems[*].FileSystemId' --output text 2>&1) if [[ $(echo "$LIST_OF_EFS_SYSTEMS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe file systems" "$regx" + textInfo "$regx: Access Denied trying to describe file systems" "$regx" continue fi if [[ $LIST_OF_EFS_SYSTEMS ]]; then diff --git a/checks/check_extra7149 b/checks/check_extra7149 index 4e0d0ecd0c..2fd07c6c33 100644 --- a/checks/check_extra7149 +++ b/checks/check_extra7149 @@ -28,7 +28,7 @@ extra7149() { for regx in $REGIONS; do LIST_OF_REDSHIFT_CLUSTERS=$($AWSCLI redshift describe-clusters $PROFILE_OPT --region $regx --query 'Clusters[*].ClusterIdentifier' --output text 2>&1) if [[ $(echo "$LIST_OF_REDSHIFT_CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe clusters" "$regx" + textInfo "$regx: Access Denied trying to describe clusters" "$regx" continue fi if [[ $LIST_OF_REDSHIFT_CLUSTERS ]]; then diff --git a/checks/check_extra715 b/checks/check_extra715 index 8877d28237..20d03ac768 100644 --- a/checks/check_extra715 +++ b/checks/check_extra715 @@ -27,7 +27,7 @@ extra715(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra7150 b/checks/check_extra7150 index 07896b94d6..c9f945a65f 100644 --- a/checks/check_extra7150 +++ b/checks/check_extra7150 @@ -28,7 +28,7 @@ extra7150(){ for regx in $REGIONS; do LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[*].LoadBalancerArn' --output text 2>&1|xargs -n1 ) if [[ $(echo "$LIST_OF_ELBSV2" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi if [[ $LIST_OF_ELBSV2 ]]; then diff --git a/checks/check_extra7151 b/checks/check_extra7151 index a973d99947..bb95ce1a3f 100644 --- a/checks/check_extra7151 +++ b/checks/check_extra7151 @@ -29,7 +29,7 @@ extra7151(){ for regx in $REGIONS; do LIST_OF_DYNAMODB_TABLES=$($AWSCLI dynamodb list-tables $PROFILE_OPT --region $regx --query 'TableNames[*]' --output text 2>&1) if [[ $(echo "$LIST_OF_DYNAMODB_TABLES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list tables" "$regx" + textInfo "$regx: Access Denied trying to list tables" "$regx" continue fi if [[ $LIST_OF_DYNAMODB_TABLES ]]; then diff --git a/checks/check_extra7154 b/checks/check_extra7154 index c68b6511b2..7d4dcc421a 100644 --- a/checks/check_extra7154 +++ b/checks/check_extra7154 @@ -36,7 +36,7 @@ extra7154() { for regx in $REGIONS; do CFN_STACKS=$($AWSCLI cloudformation describe-stacks $PROFILE_OPT --region $regx --output json 2>&1) if [[ $(echo "$CFN_STACKS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe stacks" "$regx" + textInfo "$regx: Access Denied trying to describe stacks" "$regx" continue fi LIST_OF_CFN_STACKS=$(echo $CFN_STACKS | jq -r '.Stacks[].StackName') diff --git a/checks/check_extra7155 b/checks/check_extra7155 index f1544fb4db..e593a80532 100644 --- a/checks/check_extra7155 +++ b/checks/check_extra7155 @@ -35,7 +35,7 @@ extra7155() { for regx in $REGIONS; do LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[?Type == `application`].[LoadBalancerArn]' --output text 2>&1) if [[ $(echo "$LIST_OF_ELBSV2" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi if [[ $LIST_OF_ELBSV2 ]];then diff --git a/checks/check_extra7156 b/checks/check_extra7156 index 91dfbd4e5a..7c8de499b1 100644 --- a/checks/check_extra7156 +++ b/checks/check_extra7156 @@ -30,7 +30,7 @@ extra7156(){ for regx in $REGIONS; do LIST_OF_API_GW=$($AWSCLI apigatewayv2 get-apis $PROFILE_OPT --region $regx --query Items[*].ApiId --output text 2>&1) if [[ $(echo "$LIST_OF_API_GW" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get APIs" "$regx" + textInfo "$regx: Access Denied trying to get APIs" "$regx" continue fi if [[ $LIST_OF_API_GW ]];then diff --git a/checks/check_extra7157 b/checks/check_extra7157 index 6626c7e8b6..755435c5f1 100644 --- a/checks/check_extra7157 +++ b/checks/check_extra7157 @@ -27,7 +27,7 @@ extra7157(){ for regx in $REGIONS; do LIST_OF_API_GW=$($AWSCLI apigatewayv2 get-apis $PROFILE_OPT --region $regx --query "Items[*].ApiId" --output text 2>&1) if [[ $(echo "$LIST_OF_API_GW" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get APIs" "$regx" + textInfo "$regx: Access Denied trying to get APIs" "$regx" continue fi if [[ $LIST_OF_API_GW ]];then diff --git a/checks/check_extra7158 b/checks/check_extra7158 index 2f9bf2165f..ee1bad9fa9 100644 --- a/checks/check_extra7158 +++ b/checks/check_extra7158 @@ -27,7 +27,7 @@ extra7158(){ for regx in $REGIONS; do LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers --query 'LoadBalancers[*].LoadBalancerArn' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$LIST_OF_ELBSV2" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi if [[ $LIST_OF_ELBSV2 ]]; then diff --git a/checks/check_extra7159 b/checks/check_extra7159 index 36109bcdf9..ddbe5452b7 100644 --- a/checks/check_extra7159 +++ b/checks/check_extra7159 @@ -27,7 +27,7 @@ extra7159(){ for regx in $REGIONS; do LIST_OF_ELBS=$($AWSCLI elb describe-load-balancers --query 'LoadBalancerDescriptions[*].LoadBalancerName' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$LIST_OF_ELBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi if [[ $LIST_OF_ELBS ]]; then diff --git a/checks/check_extra716 b/checks/check_extra716 index c6ca608660..0bac7f7fe3 100644 --- a/checks/check_extra716 +++ b/checks/check_extra716 @@ -27,7 +27,7 @@ extra716(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra7160 b/checks/check_extra7160 index 14c49bdfc1..066fa66b9c 100644 --- a/checks/check_extra7160 +++ b/checks/check_extra7160 @@ -27,7 +27,7 @@ extra7160(){ for regx in $REGIONS; do LIST_OF_CLUSTERS=$($AWSCLI redshift describe-clusters $PROFILE_OPT --query 'Clusters[*].ClusterIdentifier' --region $regx --output text 2>&1) if [[ $(echo "$LIST_OF_CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe clusters" "$regx" + textInfo "$regx: Access Denied trying to describe clusters" "$regx" continue fi if [[ $LIST_OF_CLUSTERS ]]; then diff --git a/checks/check_extra7161 b/checks/check_extra7161 index 67a9836cb0..0fbe00217a 100644 --- a/checks/check_extra7161 +++ b/checks/check_extra7161 @@ -28,7 +28,7 @@ extra7161(){ for regx in $REGIONS; do LIST_OF_EFS_IDS=$($AWSCLI efs describe-file-systems $PROFILE_OPT --region $regx --query 'FileSystems[*].FileSystemId' --output text 2>&1| xargs -n1 ) if [[ $(echo "$LIST_OF_EFS_IDS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe file systems" "$regx" + textInfo "$regx: Access Denied trying to describe file systems" "$regx" continue fi if [[ $LIST_OF_EFS_IDS ]]; then diff --git a/checks/check_extra7162 b/checks/check_extra7162 index 0ed53445d8..b0d17eac2e 100644 --- a/checks/check_extra7162 +++ b/checks/check_extra7162 @@ -29,7 +29,7 @@ extra7162() { for regx in $REGIONS; do LIST_OF_365_RETENTION_LOG_GROUPS=$($AWSCLI logs describe-log-groups $PROFILE_OPT --region $regx --query 'logGroups[?retentionInDays=="${LOG_GROUP_RETENTION_PERIOD_DAYS}"].[logGroupName]' --output text 2>&1) if [[ $(echo "$LIST_OF_365_RETENTION_LOG_GROUPS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe log groups" "$regx" + textInfo "$regx: Access Denied trying to describe log groups" "$regx" continue fi if [[ $LIST_OF_365_RETENTION_LOG_GROUPS ]]; then diff --git a/checks/check_extra7163 b/checks/check_extra7163 index e7378ea69d..6d5b45d883 100644 --- a/checks/check_extra7163 +++ b/checks/check_extra7163 @@ -42,7 +42,7 @@ extra7163(){ for regx in $REGIONS; do LIST_OF_SECRETS=$($AWSCLI secretsmanager list-secrets $PROFILE_OPT --region $regx --query 'SecretList[*].Name' --output text 2>&1) if [[ $(echo "$LIST_OF_SECRETS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list secrets" "$regx" + textInfo "$regx: Access Denied trying to list secrets" "$regx" continue fi if [[ $LIST_OF_SECRETS ]]; then diff --git a/checks/check_extra7164 b/checks/check_extra7164 index 4ef958facf..9c9a819887 100644 --- a/checks/check_extra7164 +++ b/checks/check_extra7164 @@ -38,7 +38,7 @@ extra7164(){ for regx in $REGIONS; do LIST_OF_LOGGROUPS=$($AWSCLI logs describe-log-groups $PROFILE_OPT --region $regx --output json 2>&1 ) if [[ $(echo "$LIST_OF_LOGGROUPS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe log groups" "$regx" + textInfo "$regx: Access Denied trying to describe log groups" "$regx" continue fi if [[ $LIST_OF_LOGGROUPS ]]; then diff --git a/checks/check_extra7165 b/checks/check_extra7165 index fdd8a1acdc..95f990a5cd 100644 --- a/checks/check_extra7165 +++ b/checks/check_extra7165 @@ -41,7 +41,7 @@ extra7165(){ for regx in $REGIONS; do LIST_OF_DAX_CLUSTERS=$($AWSCLI dax describe-clusters $PROFILE_OPT --region $regx --query 'Clusters[*]' --output json 2>&1) if [[ $(echo "$LIST_OF_DAX_CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe clusters" "$regx" + textInfo "$regx: Access Denied trying to describe clusters" "$regx" continue fi if [[ $(echo "$LIST_OF_DAX_CLUSTERS" | grep -E 'Could not connect') ]]; then diff --git a/checks/check_extra717 b/checks/check_extra717 index 7d01cb906c..4be331cd55 100644 --- a/checks/check_extra717 +++ b/checks/check_extra717 @@ -28,12 +28,12 @@ extra717(){ for regx in $REGIONS; do LIST_OF_ELBS=$($AWSCLI elb describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancerDescriptions[*].LoadBalancerName' --output text 2>&1 |xargs -n1) if [[ $(echo "$LIST_OF_ELBS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to list load balancers v1" "$regx" + textInfo "$regx: Access Denied trying to list load balancers v1" "$regx" continue fi LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[*].LoadBalancerArn' --output text 2>&1 |xargs -n1) if [[ $(echo "$LIST_OF_ELBSV2" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to list load balancers v2" "$regx" + textInfo "$regx: Access Denied trying to list load balancers v2" "$regx" continue fi if [[ $LIST_OF_ELBS || $LIST_OF_ELBSV2 ]]; then diff --git a/checks/check_extra718 b/checks/check_extra718 index c747e1c874..775d7958f3 100644 --- a/checks/check_extra718 +++ b/checks/check_extra718 @@ -30,7 +30,7 @@ extra718(){ for bucket in $LIST_OF_BUCKETS;do BUCKET_SERVER_LOG_ENABLED=$($AWSCLI s3api get-bucket-logging --bucket $bucket $PROFILE_OPT --query [LoggingEnabled] --output text 2>&1) if [[ $(echo "$BUCKET_SERVER_LOG_ENABLED" | grep AccessDenied) ]]; then - textFail "$REGION: Access Denied Trying to Get Bucket Logging for $bucket" "$REGION" "$bucket" + textInfo "$REGION: Access Denied Trying to Get Bucket Logging for $bucket" "$REGION" "$bucket" continue fi if [[ $(echo "$BUCKET_SERVER_LOG_ENABLED" | grep "^None$") ]]; then diff --git a/checks/check_extra72 b/checks/check_extra72 index 89bad44a38..36ba6ed41e 100644 --- a/checks/check_extra72 +++ b/checks/check_extra72 @@ -30,7 +30,7 @@ extra72(){ for regx in $REGIONS; do LIST_OF_EBS_SNAPSHOTS=$($AWSCLI ec2 describe-snapshots $PROFILE_OPT --region $regx --owner-ids $ACCOUNT_NUM --output text --query 'Snapshots[*].{ID:SnapshotId}' --max-items $MAXITEMS 2>&1 | grep -v None ) if [[ $(echo "$LIST_OF_EBS_SNAPSHOTS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe snapshot" "$regx" + textInfo "$regx: Access Denied trying to describe snapshot" "$regx" continue fi for snapshot in $LIST_OF_EBS_SNAPSHOTS; do diff --git a/checks/check_extra720 b/checks/check_extra720 index 7f035229a7..c8af3fcaf4 100644 --- a/checks/check_extra720 +++ b/checks/check_extra720 @@ -28,13 +28,13 @@ extra720(){ for regx in $REGIONS; do LIST_OF_FUNCTIONS=$($AWSCLI lambda list-functions $PROFILE_OPT --region $regx --query 'Functions[*].FunctionName' --output text 2>&1) if [[ $(echo "$LIST_OF_FUNCTIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to list functions" "$regx" + textInfo "$regx: Access Denied trying to list functions" "$regx" continue fi if [[ $LIST_OF_FUNCTIONS ]]; then LIST_OF_TRAILS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query 'trailList[*].TrailARN' --output text 2>&1) if [[ $(echo "$LIST_OF_TRAILS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to describe trails" "$regx" + textInfo "$regx: Access Denied trying to describe trails" "$regx" continue fi for lambdafunction in $LIST_OF_FUNCTIONS; do diff --git a/checks/check_extra721 b/checks/check_extra721 index a8bfe0b288..4d4116ffa6 100644 --- a/checks/check_extra721 +++ b/checks/check_extra721 @@ -28,7 +28,7 @@ extra721(){ for regx in $REGIONS; do LIST_OF_REDSHIFT_CLUSTERS=$($AWSCLI redshift describe-clusters $PROFILE_OPT --region $regx --query 'Clusters[*].ClusterIdentifier' --output text 2>&1) if [[ $(echo "$LIST_OF_REDSHIFT_CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe clusters" "$regx" + textInfo "$regx: Access Denied trying to describe clusters" "$regx" continue fi if [[ $LIST_OF_REDSHIFT_CLUSTERS ]]; then diff --git a/checks/check_extra722 b/checks/check_extra722 index a7423a6e2c..ab99217452 100644 --- a/checks/check_extra722 +++ b/checks/check_extra722 @@ -28,7 +28,7 @@ extra722(){ for regx in $REGIONS; do LIST_OF_API_GW=$($AWSCLI apigateway get-rest-apis $PROFILE_OPT --region $regx --query items[*].id --output text 2>&1) if [[ $(echo "$LIST_OF_API_GW" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to get rest APIs" "$regx" + textInfo "$regx: Access Denied trying to get rest APIs" "$regx" continue fi if [[ $LIST_OF_API_GW ]];then diff --git a/checks/check_extra723 b/checks/check_extra723 index 5195b00b8f..7f4aee3f7e 100644 --- a/checks/check_extra723 +++ b/checks/check_extra723 @@ -29,7 +29,7 @@ extra723(){ # RDS snapshots LIST_OF_RDS_SNAPSHOTS=$($AWSCLI rds describe-db-snapshots $PROFILE_OPT --region $regx --query DBSnapshots[*].DBSnapshotIdentifier --output text 2>&1) if [[ $(echo "$LIST_OF_RDS_SNAPSHOTS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe db snapshots" "$regx" + textInfo "$regx: Access Denied trying to describe db snapshots" "$regx" continue fi if [[ $LIST_OF_RDS_SNAPSHOTS ]]; then diff --git a/checks/check_extra725 b/checks/check_extra725 index 3f1edcf356..6424d08377 100644 --- a/checks/check_extra725 +++ b/checks/check_extra725 @@ -29,12 +29,12 @@ extra725(){ # "Check if S3 buckets have Object-level logging enabled in CloudTrail " LIST_OF_BUCKETS=$($AWSCLI s3api list-buckets $PROFILE_OPT --region $REGION --query 'Buckets[*].{Name:Name}' --output text 2>&1) if [[ $(echo "$LIST_OF_BUCKETS" | grep AccessDenied) ]]; then - textFail "$REGION: Access Denied trying to list buckets" + textInfo "$REGION: Access Denied trying to list buckets" return fi LIST_OF_TRAILS=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $REGION --query 'trailList[].TrailARN' --output text 2>&1) if [[ $(echo "$LIST_OF_TRAILS" | grep AccessDenied) ]]; then - textFail "$REGION: Access Denied trying to describe trails" + textInfo "$REGION: Access Denied trying to describe trails" return fi if [[ $LIST_OF_BUCKETS ]]; then diff --git a/checks/check_extra727 b/checks/check_extra727 index f9ff05fd9e..c6b9a7920a 100644 --- a/checks/check_extra727 +++ b/checks/check_extra727 @@ -28,7 +28,7 @@ extra727(){ for regx in $REGIONS; do LIST_SQS=$($AWSCLI sqs list-queues $PROFILE_OPT --region $regx --query QueueUrls --output text 2>&1|grep -v ^None ) if [[ $(echo "$LIST_SQS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to list queues" "$regx" + textInfo "$regx: Access Denied trying to list queues" "$regx" continue fi if [[ $LIST_SQS ]]; then diff --git a/checks/check_extra728 b/checks/check_extra728 index 310f2e0cd5..ada64c0f3a 100644 --- a/checks/check_extra728 +++ b/checks/check_extra728 @@ -29,7 +29,7 @@ extra728(){ for regx in $REGIONS; do LIST_SQS=$($AWSCLI sqs list-queues $PROFILE_OPT --region $regx --query QueueUrls --output text 2>&1|grep -v ^None ) if [[ $(echo "$LIST_SQS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to list queues" "$regx" + textInfo "$regx: Access Denied trying to list queues" "$regx" continue fi if [[ $LIST_SQS ]]; then diff --git a/checks/check_extra729 b/checks/check_extra729 index 383425be4b..ca5d5433fd 100644 --- a/checks/check_extra729 +++ b/checks/check_extra729 @@ -30,7 +30,7 @@ extra729(){ for regx in $REGIONS; do LIST_OF_EBS_NON_ENC_VOLUMES=$($AWSCLI ec2 describe-volumes $PROFILE_OPT --region $regx --query 'Volumes[?Encrypted==`false`].VolumeId' --output text 2>&1) if [[ $(echo "$LIST_OF_EBS_NON_ENC_VOLUMES" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe volumes" "$regx" + textInfo "$regx: Access Denied trying to describe volumes" "$regx" continue fi if [[ $LIST_OF_EBS_NON_ENC_VOLUMES ]];then diff --git a/checks/check_extra73 b/checks/check_extra73 index 6bb99f69fa..621ab43e99 100644 --- a/checks/check_extra73 +++ b/checks/check_extra73 @@ -48,7 +48,7 @@ extra73(){ # ACCOUNT_PUBLIC_ACCESS_BLOCK=$($AWSCLI s3control get-public-access-block $PROFILE_OPT --region $REGION --account-id $ACCOUNT_NUM --output json 2>&1) if [[ $(echo "$ACCOUNT_PUBLIC_ACCESS_BLOCK" | grep AccessDenied) ]]; then - textFail "$REGION: Access Denied getting PublicAccessBlock configuration for AWS account" "$REGION" "$bucket" + textInfo "$REGION: Access Denied getting PublicAccessBlock configuration for AWS account" "$REGION" "$bucket" return fi if [[ $(echo "$ACCOUNT_PUBLIC_ACCESS_BLOCK" | grep NoSuchPublicAccessBlockConfiguration) ]]; then @@ -68,7 +68,7 @@ extra73(){ # ALL_BUCKETS_LIST=$($AWSCLI s3api list-buckets --query 'Buckets[*].{Name:Name}' $PROFILE_OPT --output text 2>&1) if [[ $(echo "$ALL_BUCKETS_LIST" | grep AccessDenied) ]]; then - textFail "$REGION: Access Denied Trying to List Buckets" "$REGION" "$bucket" + textInfo "$REGION: Access Denied Trying to List Buckets" "$REGION" "$bucket" return fi if [[ "$ALL_BUCKETS_LIST" == "" ]]; then @@ -85,7 +85,7 @@ extra73(){ # BUCKET_LOCATION=$($AWSCLI s3api get-bucket-location $PROFILE_OPT --region $REGION --bucket $bucket --output text 2>&1) if [[ $(echo "$BUCKET_LOCATION" | grep AccessDenied) ]]; then - textFail "$REGION: Access Denied Trying to Get Bucket Location for $bucket" "$REGION" "$bucket" + textInfo "$REGION: Access Denied Trying to Get Bucket Location for $bucket" "$REGION" "$bucket" continue fi if [[ $BUCKET_LOCATION == "None" ]]; then @@ -99,7 +99,7 @@ extra73(){ # BUCKET_PUBLIC_ACCESS_BLOCK=$($AWSCLI s3api get-public-access-block $PROFILE_OPT --region $BUCKET_LOCATION --bucket $bucket --output json 2>&1) if [[ $(echo "$BUCKET_PUBLIC_ACCESS_BLOCK" | grep AccessDenied) ]]; then - textFail "$BUCKET_LOCATION: Access Denied Trying to Get Public Access Block for $bucket" "$BUCKET_LOCATION" "$bucket" + textInfo "$BUCKET_LOCATION: Access Denied Trying to Get Public Access Block for $bucket" "$BUCKET_LOCATION" "$bucket" continue fi if [[ $(echo "$BUCKET_PUBLIC_ACCESS_BLOCK" | grep NoSuchPublicAccessBlockConfiguration) ]]; then @@ -119,7 +119,7 @@ extra73(){ # BUCKET_ACL=$($AWSCLI s3api get-bucket-acl $PROFILE_OPT --region $BUCKET_LOCATION --bucket $bucket --output json 2>&1) if [[ $(echo "$BUCKET_ACL" | grep AccessDenied) ]]; then - textFail "$BUCKET_LOCATION: Access Denied Trying to Get Bucket Acl for $bucket" "$BUCKET_LOCATION" "$bucket" + textInfo "$BUCKET_LOCATION: Access Denied Trying to Get Bucket Acl for $bucket" "$BUCKET_LOCATION" "$bucket" continue fi @@ -140,7 +140,7 @@ extra73(){ # BUCKET_POLICY_STATUS=$($AWSCLI s3api get-bucket-policy-status $PROFILE_OPT --region $BUCKET_LOCATION --bucket $bucket --query PolicyStatus.IsPublic --output text 2>&1) if [[ $(echo "$BUCKET_POLICY_STATUS" | grep AccessDenied) ]]; then - textFail "$BUCKET_LOCATION: Access Denied Trying to Get Bucket Policy Status for $bucket" "$BUCKET_LOCATION" "$bucket" + textInfo "$BUCKET_LOCATION: Access Denied Trying to Get Bucket Policy Status for $bucket" "$BUCKET_LOCATION" "$bucket" continue fi if [[ $(echo "$BUCKET_POLICY_STATUS" | grep NoSuchBucketPolicy) ]]; then diff --git a/checks/check_extra731 b/checks/check_extra731 index 9b3adf23bc..fabb05ebb7 100644 --- a/checks/check_extra731 +++ b/checks/check_extra731 @@ -28,7 +28,7 @@ extra731(){ for regx in $REGIONS; do LIST_SNS=$($AWSCLI sns list-topics $PROFILE_OPT --region $regx --query Topics --output text 2>&1|grep -v ^None ) if [[ $(echo "$LIST_SNS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list topics" "$regx" + textInfo "$regx: Access Denied trying to list topics" "$regx" continue fi if [[ $LIST_SNS ]]; then diff --git a/checks/check_extra734 b/checks/check_extra734 index 08646604dc..d9cacfe561 100644 --- a/checks/check_extra734 +++ b/checks/check_extra734 @@ -30,7 +30,7 @@ extra734(){ for bucket in $LIST_OF_BUCKETS;do BUCKET_LOCATION=$($AWSCLI s3api get-bucket-location $PROFILE_OPT --region $REGION --bucket $bucket --output text 2>&1) if [[ $(echo "$BUCKET_LOCATION" | grep AccessDenied) ]]; then - textFail "$BUCKET_LOCATION Access Denied Trying to Get Bucket Location for $bucket" "$BUCKET_LOCATION" "$bucket" + textInfo "$BUCKET_LOCATION: Access Denied Trying to Get Bucket Location for $bucket" "$BUCKET_LOCATION" "$bucket" continue fi if [[ $BUCKET_LOCATION == "None" ]]; then @@ -46,7 +46,7 @@ extra734(){ # query to get if has encryption enabled or not RESULT=$($AWSCLI s3api get-bucket-encryption $PROFILE_OPT --region $BUCKET_LOCATION --bucket $bucket --query ServerSideEncryptionConfiguration.Rules[].ApplyServerSideEncryptionByDefault[].SSEAlgorithm --output text 2>&1) if [[ $(echo "$RESULT" | grep AccessDenied) ]]; then - textFail "$BUCKET_LOCATION: Access Denied Trying to Get Encryption for $bucket" "$BUCKET_LOCATION" "$bucket" + textInfo "$BUCKET_LOCATION: Access Denied Trying to Get Encryption for $bucket" "$BUCKET_LOCATION" "$bucket" continue fi @@ -61,7 +61,7 @@ extra734(){ # get bucket policy $AWSCLI s3api get-bucket-policy $PROFILE_OPT --bucket $bucket --region $BUCKET_LOCATION --output text --query Policy > $TEMP_SSE_POLICY_FILE 2>&1 if [[ $(grep AccessDenied $TEMP_SSE_POLICY_FILE) ]]; then - textFail "$BUCKET_LOCATION: Access Denied Trying to Get Bucket Policy for $bucket" "$BUCKET_LOCATION" "$bucket" + textInfo "$BUCKET_LOCATION: Access Denied Trying to Get Bucket Policy for $bucket" "$BUCKET_LOCATION" "$bucket" rm -f $TEMP_SSE_POLICY_FILE continue fi diff --git a/checks/check_extra735 b/checks/check_extra735 index e1717abb01..1ce59e60cf 100644 --- a/checks/check_extra735 +++ b/checks/check_extra735 @@ -28,7 +28,7 @@ extra735(){ for regx in $REGIONS; do LIST_OF_RDS_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query 'DBInstances[*].DBInstanceIdentifier' --output text 2>&1) if [[ $(echo "$LIST_OF_RDS_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe DB instances" "$regx" + textInfo "$regx: Access Denied trying to describe DB instances" "$regx" continue fi if [[ $LIST_OF_RDS_INSTANCES ]];then diff --git a/checks/check_extra739 b/checks/check_extra739 index 241205dced..06a6772349 100644 --- a/checks/check_extra739 +++ b/checks/check_extra739 @@ -27,7 +27,7 @@ extra739(){ for regx in $REGIONS; do LIST_OF_RDS_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query 'DBInstances[*].DBInstanceIdentifier' --output text 2>&1) if [[ $(echo "$LIST_OF_RDS_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe DB instances" "$regx" + textInfo "$regx: Access Denied trying to describe DB instances" "$regx" continue fi if [[ $LIST_OF_RDS_INSTANCES ]];then diff --git a/checks/check_extra74 b/checks/check_extra74 index c8bb58def6..50ed2aa835 100644 --- a/checks/check_extra74 +++ b/checks/check_extra74 @@ -31,7 +31,7 @@ extra74(){ for regx in $REGIONS; do LIST_OF_SECURITYGROUPS=$($AWSCLI ec2 describe-security-groups $PROFILE_OPT --region $regx --filters "Name=ip-permission.cidr,Values=0.0.0.0/0" --query "SecurityGroups[].[GroupId]" --output text --max-items $MAXITEMS 2>&1) if [[ $(echo "$LIST_OF_SECURITYGROUPS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi for SG_ID in $LIST_OF_SECURITYGROUPS; do diff --git a/checks/check_extra740 b/checks/check_extra740 index 250e81ef25..9b388512e3 100644 --- a/checks/check_extra740 +++ b/checks/check_extra740 @@ -34,7 +34,7 @@ extra740(){ --query 'Snapshots[?Encrypted==`false`]|[*].{Id:SnapshotId}' 2>&1 \ | grep -v None ) if [[ $(echo "$UNENCRYPTED_SNAPSHOTS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe snapshots" "$regx" + textInfo "$regx: Access Denied trying to describe snapshots" "$regx" continue fi @@ -43,7 +43,7 @@ extra740(){ --query 'Snapshots[?Encrypted==`true`]|[*].{Id:SnapshotId}' 2>&1 \ | grep -v None ) if [[ $(echo "$ENCRYPTED_SNAPSHOTS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe snapshots" "$regx" + textInfo "$regx: Access Denied trying to describe snapshots" "$regx" continue fi typeset -i unencrypted diff --git a/checks/check_extra741 b/checks/check_extra741 index 4681afea84..5f34a87103 100644 --- a/checks/check_extra741 +++ b/checks/check_extra741 @@ -33,7 +33,7 @@ extra741(){ for regx in $REGIONS; do LIST_OF_EC2_INSTANCES=$($AWSCLI ec2 describe-instances $PROFILE_OPT --region $regx --query Reservations[*].Instances[*].InstanceId --output text --max-items $MAXITEMS 2>&1| grep -v None) if [[ $(echo "$LIST_OF_EC2_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe instances" "$regx" + textInfo "$regx: Access Denied trying to describe instances" "$regx" continue fi if [[ $LIST_OF_EC2_INSTANCES ]];then diff --git a/checks/check_extra742 b/checks/check_extra742 index c95b402e74..edeaaa9c50 100644 --- a/checks/check_extra742 +++ b/checks/check_extra742 @@ -33,7 +33,7 @@ extra742(){ for regx in $REGIONS; do CFN_STACKS=$($AWSCLI cloudformation describe-stacks $PROFILE_OPT --region $regx --output json 2>&1) if [[ $(echo "$CFN_STACKS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe stacks" "$regx" + textInfo "$regx: Access Denied trying to describe stacks" "$regx" continue fi LIST_OF_CFN_STACKS=$(echo $CFN_STACKS | jq -r '.Stacks[].StackName') diff --git a/checks/check_extra743 b/checks/check_extra743 index 74d480cf5a..abc15f09b9 100644 --- a/checks/check_extra743 +++ b/checks/check_extra743 @@ -27,7 +27,7 @@ extra743(){ for regx in $REGIONS; do LIST_OF_REST_APIS=$($AWSCLI $PROFILE_OPT --region $regx apigateway get-rest-apis --query 'items[*].id' --output text 2>&1) if [[ $(echo "$LIST_OF_REST_APIS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get rest APIs" "$regx" + textInfo "$regx: Access Denied trying to get rest APIs" "$regx" continue fi if [[ $LIST_OF_REST_APIS ]];then diff --git a/checks/check_extra744 b/checks/check_extra744 index d19c9acccf..e7dcd10e47 100644 --- a/checks/check_extra744 +++ b/checks/check_extra744 @@ -28,7 +28,7 @@ extra744(){ for regx in $REGIONS; do LIST_OF_REST_APIS=$($AWSCLI $PROFILE_OPT --region $regx apigateway get-rest-apis --query 'items[*].id' --output text 2>&1) if [[ $(echo "$LIST_OF_REST_APIS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get rest APIs" "$regx" + textInfo "$regx: Access Denied trying to get rest APIs" "$regx" continue fi if [[ $LIST_OF_REST_APIS ]];then diff --git a/checks/check_extra745 b/checks/check_extra745 index d26303a325..f6e6fe8bdf 100644 --- a/checks/check_extra745 +++ b/checks/check_extra745 @@ -27,7 +27,7 @@ extra745(){ for regx in $REGIONS; do LIST_OF_REST_APIS=$($AWSCLI $PROFILE_OPT --region $regx apigateway get-rest-apis --query 'items[*].id' --output text 2>&1) if [[ $(echo "$LIST_OF_REST_APIS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get rest APIs" "$regx" + textInfo "$regx: Access Denied trying to get rest APIs" "$regx" continue fi if [[ $LIST_OF_REST_APIS ]];then diff --git a/checks/check_extra746 b/checks/check_extra746 index c21eb70523..d5b6512ba2 100644 --- a/checks/check_extra746 +++ b/checks/check_extra746 @@ -27,7 +27,7 @@ extra746(){ for regx in $REGIONS; do LIST_OF_REST_APIS=$($AWSCLI $PROFILE_OPT --region $regx apigateway get-rest-apis --query 'items[*].id' --output text 2>&1) if [[ $(echo "$LIST_OF_REST_APIS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get rest APIs" "$regx" + textInfo "$regx: Access Denied trying to get rest APIs" "$regx" continue fi if [[ $LIST_OF_REST_APIS ]];then diff --git a/checks/check_extra747 b/checks/check_extra747 index 936ba41c00..ade2b32f16 100644 --- a/checks/check_extra747 +++ b/checks/check_extra747 @@ -27,7 +27,7 @@ extra747(){ for regx in $REGIONS; do LIST_OF_RDS_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query 'DBInstances[*].DBInstanceIdentifier' --output text 2>&1) if [[ $(echo "$LIST_OF_RDS_INSTANCES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to get rest APIs" "$regx" + textInfo "$regx: Access Denied trying to get rest APIs" "$regx" continue fi if [[ $LIST_OF_RDS_INSTANCES ]];then diff --git a/checks/check_extra748 b/checks/check_extra748 index 0ee78a5761..f9a62174ca 100644 --- a/checks/check_extra748 +++ b/checks/check_extra748 @@ -27,7 +27,7 @@ extra748(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort==`0` && ToPort==`65535`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra749 b/checks/check_extra749 index 86e85d47a0..4f2ee184ca 100644 --- a/checks/check_extra749 +++ b/checks/check_extra749 @@ -28,7 +28,7 @@ extra749(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || ((FromPort<=`1521` && ToPort>=`1521`)||(FromPort<=`2483` && ToPort>=`2483`))) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra75 b/checks/check_extra75 index 36b646fcb1..d4abe391b4 100644 --- a/checks/check_extra75 +++ b/checks/check_extra75 @@ -31,7 +31,7 @@ extra75(){ for regx in $REGIONS; do SECURITYGROUPS=$($AWSCLI ec2 describe-security-groups $PROFILE_OPT --region $regx --max-items $MAXITEMS --output json 2>&1 ) if [[ $(echo "$SECURITYGROUPS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SECURITYGROUPS == "null" ]]; then diff --git a/checks/check_extra750 b/checks/check_extra750 index b8597d1311..14e1f00344 100644 --- a/checks/check_extra750 +++ b/checks/check_extra750 @@ -28,7 +28,7 @@ extra750(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=`3306` && ToPort>=`3306`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra751 b/checks/check_extra751 index c08a3adb58..4eec1a0219 100644 --- a/checks/check_extra751 +++ b/checks/check_extra751 @@ -28,7 +28,7 @@ extra751(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=`5432` && ToPort>=`5432`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra752 b/checks/check_extra752 index 1857c3f248..4b74116a88 100644 --- a/checks/check_extra752 +++ b/checks/check_extra752 @@ -28,7 +28,7 @@ extra752(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=`6379` && ToPort>=`6379`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra753 b/checks/check_extra753 index 93ccc177ea..8ee93c6b85 100644 --- a/checks/check_extra753 +++ b/checks/check_extra753 @@ -28,7 +28,7 @@ extra753(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || ((FromPort<=`27017` && ToPort>=`27017`) || (FromPort<=`27018` && ToPort>=`27018`))) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra754 b/checks/check_extra754 index 48f56b88f6..ef89bcf876 100644 --- a/checks/check_extra754 +++ b/checks/check_extra754 @@ -28,7 +28,7 @@ extra754(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || ((FromPort<=`7199` && ToPort>=`7199`) || (FromPort<=`9160` && ToPort>=`9160`)|| (FromPort<=`8888` && ToPort>=`8888`))) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra755 b/checks/check_extra755 index 3a1ea01ceb..a766b0332a 100644 --- a/checks/check_extra755 +++ b/checks/check_extra755 @@ -28,7 +28,7 @@ extra755(){ for regx in $REGIONS; do SG_LIST=$($AWSCLI ec2 describe-security-groups --query 'SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=`11211` && ToPort>=`11211`)) && (contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`))]) > `0`].{GroupId:GroupId}' $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi if [[ $SG_LIST ]];then diff --git a/checks/check_extra757 b/checks/check_extra757 index 61a7317ff8..55dc81b540 100644 --- a/checks/check_extra757 +++ b/checks/check_extra757 @@ -28,7 +28,7 @@ extra757(){ for regx in $REGIONS; do EC2_RUNNING=$($AWSCLI ec2 describe-instances --query "Reservations[*].Instances[*].[InstanceId]" $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$EC2_RUNNING" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe instances" "$regx" + textInfo "$regx: Access Denied trying to describe instances" "$regx" continue fi if [[ $EC2_RUNNING ]]; then diff --git a/checks/check_extra758 b/checks/check_extra758 index 0b92f95b8f..dd07a60a48 100644 --- a/checks/check_extra758 +++ b/checks/check_extra758 @@ -28,7 +28,7 @@ extra758(){ for regx in $REGIONS; do EC2_RUNNING=$($AWSCLI ec2 describe-instances --query "Reservations[*].Instances[*].[InstanceId]" $PROFILE_OPT --region $regx --output text 2>&1) if [[ $(echo "$EC2_RUNNING" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe instances" "$regx" + textInfo "$regx: Access Denied trying to describe instances" "$regx" continue fi if [[ $EC2_RUNNING ]]; then diff --git a/checks/check_extra759 b/checks/check_extra759 index a3a55cd6fd..d804095b7e 100644 --- a/checks/check_extra759 +++ b/checks/check_extra759 @@ -33,7 +33,7 @@ extra759(){ for regx in $REGIONS; do LIST_OF_FUNCTIONS=$($AWSCLI lambda list-functions $PROFILE_OPT --region $regx --query Functions[*].FunctionName --output text 2>&1) if [[ $(echo "$LIST_OF_FUNCTIONS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list functions" "$regx" + textInfo "$regx: Access Denied trying to list functions" "$regx" continue fi if [[ $LIST_OF_FUNCTIONS ]]; then diff --git a/checks/check_extra76 b/checks/check_extra76 index b7001ddf02..e606b32220 100644 --- a/checks/check_extra76 +++ b/checks/check_extra76 @@ -29,7 +29,7 @@ extra76(){ for regx in $REGIONS; do LIST_OF_PUBLIC_AMIS=$($AWSCLI ec2 describe-images --owners self $PROFILE_OPT --region $regx --filters "Name=is-public,Values=true" --query 'Images[*].{ID:ImageId}' --output text 2>&1) if [[ $(echo "$LIST_OF_PUBLIC_AMIS" | grep -E 'AccessDenied|UnauthorizedOperation') ]]; then - textFail "$regx: Access Denied trying to describe images" "$regx" + textInfo "$regx: Access Denied trying to describe images" "$regx" continue fi if [[ $LIST_OF_PUBLIC_AMIS ]];then diff --git a/checks/check_extra760 b/checks/check_extra760 index 4e8cd9f0d0..1d03160389 100644 --- a/checks/check_extra760 +++ b/checks/check_extra760 @@ -33,7 +33,7 @@ extra760(){ for regx in $REGIONS; do LIST_OF_FUNCTIONS=$($AWSCLI lambda list-functions $PROFILE_OPT --region $regx --query Functions[*].FunctionName --output text 2>&1) if [[ $(echo "$LIST_OF_FUNCTIONS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied trying to list Lambda functions" "$regx" "$lambdafunction" + textInfo "$regx: Access Denied trying to list Lambda functions" "$regx" "$lambdafunction" continue fi if [[ $LIST_OF_FUNCTIONS ]]; then diff --git a/checks/check_extra762 b/checks/check_extra762 index 4000cbc40f..dfa414383d 100644 --- a/checks/check_extra762 +++ b/checks/check_extra762 @@ -32,7 +32,7 @@ extra762(){ for regx in $REGIONS; do LIST_OF_FUNCTIONS=$($AWSCLI lambda list-functions $PROFILE_OPT --region $regx --output text --query 'Functions[*].{R:Runtime,N:FunctionName}' 2>&1| tr "\t" "%" ) if [[ $(echo "$LIST_OF_FUNCTIONS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list functions" "$regx" + textInfo "$regx: Access Denied trying to list functions" "$regx" continue fi if [[ $LIST_OF_FUNCTIONS ]]; then diff --git a/checks/check_extra763 b/checks/check_extra763 index a080e64d38..1c44c7402c 100644 --- a/checks/check_extra763 +++ b/checks/check_extra763 @@ -30,7 +30,7 @@ extra763(){ for bucket in $LIST_OF_BUCKETS;do BUCKET_VERSIONING_ENABLED=$($AWSCLI s3api get-bucket-versioning --bucket $bucket $PROFILE_OPT --query Status --output text 2>&1) if [[ $(echo "$BUCKET_VERSIONING_ENABLED" | grep AccessDenied) ]]; then - textFail "Access Denied Trying to Get Bucket Versioning for $bucket" + textInfo "Access Denied Trying to Get Bucket Versioning for $bucket" continue fi if [[ $(echo "$BUCKET_VERSIONING_ENABLED" | grep "^Enabled$") ]]; then diff --git a/checks/check_extra764 b/checks/check_extra764 index ab84e55385..e3b3a46a38 100644 --- a/checks/check_extra764 +++ b/checks/check_extra764 @@ -32,7 +32,7 @@ extra764(){ TEMP_STP_POLICY_FILE=$(mktemp -t prowler-${ACCOUNT_NUM}-${bucket}.policy.XXXXXXXXXX) BUCKET_LOCATION=$($AWSCLI s3api get-bucket-location $PROFILE_OPT --region $REGION --bucket $bucket --output text 2>&1) if [[ $(echo "$BUCKET_LOCATION" | grep AccessDenied) ]]; then - textFail "Access Denied Trying to Get Bucket Location for $bucket" + textInfo "Access Denied Trying to Get Bucket Location for $bucket" continue fi if [[ $BUCKET_LOCATION == "None" ]]; then @@ -44,7 +44,7 @@ extra764(){ # get bucket policy $AWSCLI s3api get-bucket-policy $PROFILE_OPT --bucket $bucket --output text --query Policy --region $BUCKET_LOCATION > $TEMP_STP_POLICY_FILE 2>&1 if [[ $(grep AccessDenied $TEMP_STP_POLICY_FILE) ]]; then - textFail "Access Denied Trying to Get Bucket Policy for $bucket" + textInfo "Access Denied Trying to Get Bucket Policy for $bucket" rm -f $TEMP_STP_POLICY_FILE continue fi diff --git a/checks/check_extra765 b/checks/check_extra765 index cb83105f46..91ac788362 100644 --- a/checks/check_extra765 +++ b/checks/check_extra765 @@ -36,7 +36,7 @@ extra765(){ for region in $REGIONS; do LIST_ECR_REPOS=$($AWSCLI ecr describe-repositories $PROFILE_OPT --region $region --query "repositories[*].[repositoryName]" --output text 2>&1) if [[ $(echo "$LIST_ECR_REPOS" | grep AccessDenied) ]]; then - textFail "Access Denied Trying to describe ECR repositories" + textInfo "$region: Access Denied Trying to describe ECR repositories" continue fi if [[ ! -z "$LIST_ECR_REPOS" ]]; then diff --git a/checks/check_extra768 b/checks/check_extra768 index 7b68075274..713530f503 100644 --- a/checks/check_extra768 +++ b/checks/check_extra768 @@ -32,7 +32,7 @@ extra768(){ # Get a list of all task definition families first: FAMILIES=$($AWSCLI ecs list-task-definition-families $PROFILE_OPT --region $regx --status ACTIVE 2>&1 ) if [[ $(echo "$FAMILIES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list task definition families" "$regx" + textInfo "$regx: Access Denied trying to list task definition families" "$regx" continue fi if [[ $(echo $FAMILIES | jq -r .families[]) ]]; then diff --git a/checks/check_extra769 b/checks/check_extra769 index fe6600dcc5..48c37e5369 100644 --- a/checks/check_extra769 +++ b/checks/check_extra769 @@ -31,7 +31,7 @@ extra769(){ continue fi if [[ $(echo "$LIST_OF_ACCESS_ANALYZERS" | grep -i "AccessDeniedException") ]]; then - textFail "$regx: Access Denied trying to list-analyzers" "$regx" + textInfo "$regx: Access Denied trying to list-analyzers" "$regx" continue fi if [[ $LIST_OF_ACCESS_ANALYZERS ]]; then diff --git a/checks/check_extra77 b/checks/check_extra77 index fcbbd97793..4971d243b4 100644 --- a/checks/check_extra77 +++ b/checks/check_extra77 @@ -30,11 +30,11 @@ extra77(){ for regx in $REGIONS; do LIST_ECR_REPOS=$($AWSCLI ecr describe-repositories $PROFILE_OPT --region $regx --query "repositories[*].[repositoryName]" --output text 2>&1) if [[ $(echo "$LIST_ECR_REPOS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied Trying to describe ECR repositories" "$regx" "$repo" + textInfo "$regx: Access Denied Trying to describe ECR repositories" "$regx" "$repo" continue fi if [[ $(echo "$LIST_ECR_REPOS" | grep SubscriptionRequiredException) ]]; then - textFail "$regx: Subscription Required Exception trying to describe ECR repositories" "$regx" "$repo" + textInfo "$regx: Subscription Required Exception trying to describe ECR repositories" "$regx" "$repo" continue fi if [[ ! -z "$LIST_ECR_REPOS" ]]; then @@ -42,7 +42,7 @@ extra77(){ TEMP_POLICY_FILE=$(mktemp -t prowler-${ACCOUNT_NUM}-ecr-repo.policy.XXXXXXXXXX) $AWSCLI ecr get-repository-policy $PROFILE_OPT --region $regx --repository-name $repo --query "policyText" --output text > $TEMP_POLICY_FILE 2>&1 if [[ $(grep AccessDenied $TEMP_POLICY_FILE) ]]; then - textFail "$regx: $repo Access Denied for get-repository-policy" "$regx" "$repo" + textInfo "$regx: Access Denied to get repository policy for repo $repo" "$regx" "$repo" rm -f $TEMP_POLICY_FILE continue fi diff --git a/checks/check_extra770 b/checks/check_extra770 index aaff5220cc..6975c22f59 100644 --- a/checks/check_extra770 +++ b/checks/check_extra770 @@ -28,7 +28,7 @@ extra770(){ for regx in $REGIONS; do LIST_OF_PUBLIC_INSTANCES_WITH_INSTANCE_PROFILES=$($AWSCLI ec2 describe-instances $PROFILE_OPT --region $regx --query 'Reservations[*].Instances[?((IamInstanceProfile!=`null` && PublicIpAddress!=`null`))].[InstanceId,PublicIpAddress,IamInstanceProfile.Arn]' --output text 2>&1) if [[ $(echo "$LIST_OF_PUBLIC_INSTANCES_WITH_INSTANCE_PROFILES" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe instances" "$regx" + textInfo "$regx: Access Denied trying to describe instances" "$regx" continue fi if [[ $LIST_OF_PUBLIC_INSTANCES_WITH_INSTANCE_PROFILES ]];then diff --git a/checks/check_extra772 b/checks/check_extra772 index 9073fecc4a..560cc1ad14 100644 --- a/checks/check_extra772 +++ b/checks/check_extra772 @@ -27,7 +27,7 @@ extra772(){ for region in $REGIONS; do EIP_DUMP=$($AWSCLI ec2 describe-addresses ${PROFILE_OPT} --region $region --output json 2>&1) if [[ $(echo "$EIP_DUMP" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe addresses" "$regx" + textInfo "$regx: Access Denied trying to describe addresses" "$regx" continue fi EIP_LIST=$(echo $EIP_DUMP | jq -r '.Addresses[].AllocationId') diff --git a/checks/check_extra775 b/checks/check_extra775 index 56d14143be..7b6f5f531a 100644 --- a/checks/check_extra775 +++ b/checks/check_extra775 @@ -32,7 +32,7 @@ extra775(){ for regx in $REGIONS; do LIST_OF_EC2_AUTOSCALING=$($AWSCLI autoscaling describe-launch-configurations $PROFILE_OPT --region $regx --query LaunchConfigurations[*].LaunchConfigurationName --output text --max-items $MAXITEMS 2>&1 | grep -v None ) if [[ $(echo "$LIST_OF_EC2_AUTOSCALING" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe launch configurations" "$regx" + textInfo "$regx: Access Denied trying to describe launch configurations" "$regx" continue fi if [[ $LIST_OF_EC2_AUTOSCALING ]];then diff --git a/checks/check_extra776 b/checks/check_extra776 index 9212d084fa..36fc793d68 100644 --- a/checks/check_extra776 +++ b/checks/check_extra776 @@ -42,7 +42,7 @@ extra776(){ for region in $REGIONS; do LIST_ECR_REPOS=$($AWSCLI ecr describe-repositories $PROFILE_OPT --region $region --query "repositories[*].[repositoryName]" --output text 2>&1) if [[ $(echo "$LIST_ECR_REPOS" | grep AccessDenied) ]]; then - textFail "Access Denied Trying to describe ECR repositories" + textInfo "$region: Access Denied trying to describe ECR repositories" continue fi if [[ ! -z "$LIST_ECR_REPOS" ]]; then diff --git a/checks/check_extra777 b/checks/check_extra777 index 184bda0e5f..b7d459df9c 100644 --- a/checks/check_extra777 +++ b/checks/check_extra777 @@ -37,7 +37,7 @@ extra777(){ --query 'SecurityGroups[*].GroupId' \ --output text 2>&1| xargs ) if [[ $(echo "$SECURITY_GROUP_IDS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi diff --git a/checks/check_extra778 b/checks/check_extra778 index fe2e53b730..c1771752d6 100644 --- a/checks/check_extra778 +++ b/checks/check_extra778 @@ -50,7 +50,7 @@ extra778(){ --region ${REGION} \ --output text 2>&1| xargs ) if [[ $(echo "$CIDR_IP_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi @@ -75,7 +75,7 @@ extra778(){ --query 'SecurityGroups[*].GroupId' \ --output text 2>&1| xargs ) if [[ $(echo "$SECURITY_GROUP_IDS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi for SECURITY_GROUP in ${SECURITY_GROUP_IDS}; do diff --git a/checks/check_extra779 b/checks/check_extra779 index ddf530998f..c835eb4c6d 100644 --- a/checks/check_extra779 +++ b/checks/check_extra779 @@ -33,7 +33,7 @@ extra779(){ SG_LIST=$($AWSCLI ec2 describe-security-groups $PROFILE_OPT --region $regx --output text \ --query "SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=\`$ES_API_PORT\` && ToPort>=\`$ES_API_PORT\`) || (FromPort<=\`$ES_DATA_PORT\` && ToPort>=\`$ES_DATA_PORT\`) || (FromPort<=\`$ES_KIBANA_PORT\` && ToPort>=\`$ES_KIBANA_PORT\`)) && (contains(IpRanges[].CidrIp, \`0.0.0.0/0\`) || contains(Ipv6Ranges[].CidrIpv6, \`::/0\`))]) > \`0\`].{GroupId:GroupId}" 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi # in case of open security groups goes through each one diff --git a/checks/check_extra78 b/checks/check_extra78 index 015903b4e7..ad8ec1bbde 100644 --- a/checks/check_extra78 +++ b/checks/check_extra78 @@ -30,7 +30,7 @@ extra78(){ for regx in $REGIONS; do LIST_OF_RDS_PUBLIC_INSTANCES=$($AWSCLI rds describe-db-instances $PROFILE_OPT --region $regx --query 'DBInstances[?PubliclyAccessible==`true` && DBInstanceStatus==`"available"`].[DBInstanceIdentifier,Endpoint.Address]' --output text 2>&1) if [[ $(echo "$LIST_OF_RDS_PUBLIC_INSTANCES" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied Trying to describe DB instances" "$regx" + textInfo "$regx: Access Denied Trying to describe DB instances" "$regx" continue fi if [[ $LIST_OF_RDS_PUBLIC_INSTANCES ]];then diff --git a/checks/check_extra780 b/checks/check_extra780 index 15dd91f16f..7cd183b33d 100644 --- a/checks/check_extra780 +++ b/checks/check_extra780 @@ -27,7 +27,7 @@ extra780(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra781 b/checks/check_extra781 index f1ead9009b..55bb47481c 100644 --- a/checks/check_extra781 +++ b/checks/check_extra781 @@ -28,7 +28,7 @@ extra781(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra782 b/checks/check_extra782 index 46748f56d9..78afc60ec5 100644 --- a/checks/check_extra782 +++ b/checks/check_extra782 @@ -27,7 +27,7 @@ extra782(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra783 b/checks/check_extra783 index d7053dacb8..56d942c20e 100644 --- a/checks/check_extra783 +++ b/checks/check_extra783 @@ -27,7 +27,7 @@ extra783(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra784 b/checks/check_extra784 index 750d780110..dea6e510f1 100644 --- a/checks/check_extra784 +++ b/checks/check_extra784 @@ -27,7 +27,7 @@ extra784(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra785 b/checks/check_extra785 index 1cb896d956..6a8a2495e4 100644 --- a/checks/check_extra785 +++ b/checks/check_extra785 @@ -32,7 +32,7 @@ extra785(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra786 b/checks/check_extra786 index 7517707625..7643077854 100644 --- a/checks/check_extra786 +++ b/checks/check_extra786 @@ -30,7 +30,7 @@ extra786(){ --query 'Reservations[*].Instances[*].{HttpTokens:MetadataOptions.HttpTokens,HttpEndpoint:MetadataOptions.HttpEndpoint,InstanceId:InstanceId}' \ --output text --max-items $MAXITEMS > $TEMP_EXTRA786_FILE 2>&1 if [[ $(cat $TEMP_EXTRA786_FILE | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe instances" "$regx" + textInfo "$regx: Access Denied trying to describe instances" "$regx" continue fi # if the file contains data, there are instances in that region diff --git a/checks/check_extra787 b/checks/check_extra787 index 4f026ee026..30b8a5ee6a 100644 --- a/checks/check_extra787 +++ b/checks/check_extra787 @@ -36,7 +36,7 @@ extra787(){ SG_LIST=$($AWSCLI ec2 describe-security-groups $PROFILE_OPT --region $regx --output text \ --query "SecurityGroups[?length(IpPermissions[?((FromPort==null && ToPort==null) || (FromPort<=\`$ES_API_PORT\` && ToPort>=\`$ES_API_PORT\`) || (FromPort<=\`$ES_DATA_PORT\` && ToPort>=\`$ES_DATA_PORT\`) || (FromPort<=\`$ES_KIBANA_PORT\` && ToPort>=\`$ES_KIBANA_PORT\`)) && (contains(IpRanges[].CidrIp, \`0.0.0.0/0\`) || contains(Ipv6Ranges[].CidrIpv6, \`::/0\`))]) > \`0\`].{GroupId:GroupId}" 2>&1) if [[ $(echo "$SG_LIST" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe security groups" "$regx" + textInfo "$regx: Access Denied trying to describe security groups" "$regx" continue fi # in case of open security groups goes through each one diff --git a/checks/check_extra788 b/checks/check_extra788 index 792929a6e8..50a9fdf37a 100644 --- a/checks/check_extra788 +++ b/checks/check_extra788 @@ -31,7 +31,7 @@ extra788(){ for regx in $REGIONS; do LIST_OF_DOMAINS=$($AWSCLI es list-domain-names $PROFILE_OPT --region $regx --query DomainNames --output text 2>&1) if [[ $(echo "$LIST_OF_DOMAINS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list domain names" "$regx" + textInfo "$regx: Access Denied trying to list domain names" "$regx" continue fi if [[ $LIST_OF_DOMAINS ]]; then diff --git a/checks/check_extra789 b/checks/check_extra789 index d54eb02c32..b4d90f239a 100644 --- a/checks/check_extra789 +++ b/checks/check_extra789 @@ -34,7 +34,7 @@ extra789(){ --region ${regx} \ --output text | xargs 2>&1) if [[ $(echo "$ENDPOINT_SERVICES_IDS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe VPC endpoint services" "$regx" + textInfo "$regx: Access Denied trying to describe VPC endpoint services" "$regx" continue fi diff --git a/checks/check_extra79 b/checks/check_extra79 index 7db62f3128..918db5d136 100644 --- a/checks/check_extra79 +++ b/checks/check_extra79 @@ -30,12 +30,12 @@ extra79(){ for regx in $REGIONS; do LIST_OF_PUBLIC_ELBS=$($AWSCLI elb describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancerDescriptions[?Scheme == `internet-facing`].[LoadBalancerName,DNSName]' --output text 2>&1) if [[ $(echo "$LIST_OF_PUBLIC_ELBS" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied Trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied Trying to describe load balancers" "$regx" continue fi LIST_OF_PUBLIC_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[?Scheme == `internet-facing`].[LoadBalancerName,DNSName]' --output text 2>&1) if [[ $(echo "$LIST_OF_PUBLIC_ELBSV2" | grep AccessDenied) ]]; then - textFail "$regx: Access Denied Trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied Trying to describe load balancers" "$regx" continue fi LIST_OF_ALL_ELBS=$( echo $LIST_OF_PUBLIC_ELBS; echo $LIST_OF_PUBLIC_ELBSV2) diff --git a/checks/check_extra790 b/checks/check_extra790 index 600d0d4089..d562a40c47 100644 --- a/checks/check_extra790 +++ b/checks/check_extra790 @@ -34,7 +34,7 @@ extra790(){ --region ${regx} \ --output text | xargs 2>&1) if [[ $(echo "$ENDPOINT_SERVICES_IDS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe VPC endpoint services" "$regx" + textInfo "$regx: Access Denied trying to describe VPC endpoint services" "$regx" continue fi diff --git a/checks/check_extra792 b/checks/check_extra792 index f4c6f45a81..ae22adc43a 100644 --- a/checks/check_extra792 +++ b/checks/check_extra792 @@ -29,12 +29,12 @@ extra792(){ for regx in $REGIONS; do LIST_OF_ELBS=$($AWSCLI elb describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancerDescriptions[*].LoadBalancerName' --output text 2>&1|xargs -n1 ) if [[ $(echo "$LIST_OF_ELBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[*].LoadBalancerArn' --output text 2>&1|xargs -n1 ) if [[ $(echo "$LIST_OF_ELBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi if [[ $LIST_OF_ELBS || $LIST_OF_ELBSV2 ]]; then diff --git a/checks/check_extra793 b/checks/check_extra793 index a8c5e6f768..505c65111f 100644 --- a/checks/check_extra793 +++ b/checks/check_extra793 @@ -29,12 +29,12 @@ extra793(){ for regx in $REGIONS; do LIST_OF_ELBS=$($AWSCLI elb describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancerDescriptions[*].LoadBalancerName' --output text 2>&1|xargs -n1) if [[ $(echo "$LIST_OF_ELBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi LIST_OF_ELBSV2=$($AWSCLI elbv2 describe-load-balancers $PROFILE_OPT --region $regx --query 'LoadBalancers[*].LoadBalancerArn' --output text 2>&1|xargs -n1) if [[ $(echo "$LIST_OF_ELBS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to describe load balancers" "$regx" + textInfo "$regx: Access Denied trying to describe load balancers" "$regx" continue fi if [[ $LIST_OF_ELBS || $LIST_OF_ELBSV2 ]]; then diff --git a/checks/check_extra794 b/checks/check_extra794 index 080d711146..ef2b5c500f 100644 --- a/checks/check_extra794 +++ b/checks/check_extra794 @@ -27,7 +27,7 @@ extra794(){ for regx in $REGIONS; do CLUSTERS=$($AWSCLI eks list-clusters $PROFILE_OPT --region $regx --query 'clusters[]' --output text 2>&1) if [[ $(echo "$CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list EKS clusters" "$regx" + textInfo "$regx: Access Denied trying to list EKS clusters" "$regx" continue fi if [[ $CLUSTERS ]]; then diff --git a/checks/check_extra795 b/checks/check_extra795 index aa9f663923..fa2398a397 100644 --- a/checks/check_extra795 +++ b/checks/check_extra795 @@ -27,7 +27,7 @@ extra795(){ for regx in $REGIONS; do CLUSTERS=$($AWSCLI eks list-clusters $PROFILE_OPT --region $regx --query 'clusters[]' --output text 2>&1) if [[ $(echo "$CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list EKS clusters" "$regx" + textInfo "$regx: Access Denied trying to list EKS clusters" "$regx" continue fi if [[ $CLUSTERS ]]; then diff --git a/checks/check_extra796 b/checks/check_extra796 index 78304fb5fc..70611d9eba 100644 --- a/checks/check_extra796 +++ b/checks/check_extra796 @@ -27,7 +27,7 @@ extra796(){ for regx in $REGIONS; do CLUSTERS=$($AWSCLI eks list-clusters $PROFILE_OPT --region $regx --query 'clusters[]' --output text 2>&1) if [[ $(echo "$CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list EKS clusters" "$regx" + textInfo "$regx: Access Denied trying to list EKS clusters" "$regx" continue fi if [[ $CLUSTERS ]]; then diff --git a/checks/check_extra797 b/checks/check_extra797 index 4dde6decf5..beb28f760d 100644 --- a/checks/check_extra797 +++ b/checks/check_extra797 @@ -27,7 +27,7 @@ extra797(){ for regx in $REGIONS; do CLUSTERS=$($AWSCLI eks list-clusters $PROFILE_OPT --region $regx --query 'clusters[]' --output text 2>&1) if [[ $(echo "$CLUSTERS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list EKS clusters" "$regx" + textInfo "$regx: Access Denied trying to list EKS clusters" "$regx" continue fi if [[ $CLUSTERS ]]; then diff --git a/checks/check_extra798 b/checks/check_extra798 index 661b7ca6a9..21604e16da 100644 --- a/checks/check_extra798 +++ b/checks/check_extra798 @@ -28,7 +28,7 @@ extra798(){ for regx in $REGIONS; do LIST_OF_FUNCTIONS=$($AWSCLI lambda list-functions $PROFILE_OPT --region $regx --output text --query 'Functions[*].FunctionName' 2>&1) if [[ $(echo "$LIST_OF_FUNCTIONS" | grep -E 'AccessDenied|UnauthorizedOperation|AuthorizationError') ]]; then - textFail "$regx: Access Denied trying to list functions" "$regx" + textInfo "$regx: Access Denied trying to list functions" "$regx" continue fi if [[ $LIST_OF_FUNCTIONS ]]; then diff --git a/include/check3x b/include/check3x index ea29047eb3..29de748e4c 100644 --- a/include/check3x +++ b/include/check3x @@ -18,7 +18,7 @@ check3x(){ # be based only on CloudTrail tail with CloudWatchLog configuration. DESCRIBE_TRAILS_CACHE=$($AWSCLI cloudtrail describe-trails $PROFILE_OPT --region "$REGION" --query 'trailList[?CloudWatchLogsLogGroupArn != `null`]' 2>&1) if [[ $(echo "$DESCRIBE_TRAILS_CACHE" | grep AccessDenied) ]]; then - textFail "$REGION: Access Denied trying to describe trails in $REGION" "$REGION" + textInfo "$REGION: Access Denied trying to describe trails in $REGION" "$REGION" return fi