diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json index 10dc6541d8..b19fbf356b 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json @@ -12,7 +12,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune DB cluster* automated backup is enabled and retention days are more than the required minimum retention period (default to 7 days).", "Risk": "**Insufficient backup retention** reduces the ability to recover from data corruption, accidental deletion, or ransomware, impacting **availability** and **integrity**.\n\n- Prevents point-in-time recovery to required dates\n- Increases downtime, irreversible data loss, and compliance violations", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_backup_enabled", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-5", "https://trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/sufficient-backup-retention-period.html", @@ -28,7 +28,7 @@ }, "Recommendation": { "Text": "Ensure automated backups are enabled and retention aligns with your **RPO/RTO** and regulatory requirements (at least `7` days).\n\n- Define backup lifecycle and storage retention policies\n- Regularly test restore procedures and monitor backup health\n- Incorporate backups into Disaster Recovery and retention governance", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_backup_enabled" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json index 1e3fb81158..190a549358 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json @@ -12,7 +12,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune DB cluster* is configured to copy all tags to snapshots when snapshots are created.", "Risk": "**Missing snapshot tags** weakens governance across confidentiality, integrity, and availability.\n\n- **Access control**: tag-based IAM conditions may not apply to snapshots, enabling unauthorized restore or copy\n- **Operational**: recovery, retention, and cost tracking can fail due to unidentifiable or orphaned snapshots", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_copy_tags_to_snapshots", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/neptune/latest/userguide/tagging.html#tagging-overview", "https://www.cloudanix.com/docs/aws/audit/rdsmonitoring/rules/neptune_cluster_copy_tags_to_snapshot_enabled", @@ -28,7 +28,7 @@ }, "Recommendation": { "Text": "Preserve metadata by enabling tag inheritance for snapshots and enforcing a consistent tagging strategy.\n\n- Adopt a standardized tag taxonomy\n- Use tag-based access controls and apply least privilege\n- Automate tagging and policy checks in provisioning to prevent untagged snapshots", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_copy_tags_to_snapshots" } }, "Categories": [], diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json index 4820b3e059..301ed99031 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json @@ -14,7 +14,7 @@ "ResourceType": "Other", "Description": "*Neptune DB cluster* has **deletion protection** enabled.", "Risk": "Absence of **deletion protection** weakens *availability* and *integrity*: clusters can be removed by accidental admin actions, rogue automation, or compromised credentials.\n\nCluster deletion causes immediate service outage, potential permanent data loss, and extended recovery time if backups or restores are insufficient.", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_deletion_protection", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-4" ], @@ -27,7 +27,7 @@ }, "Recommendation": { "Text": "Enable **deletion protection** for production *Neptune* clusters and apply the principles of **least privilege** and *separation of duties* for delete operations.\n\nEnforce change-control approvals, restrict delete permissions to audited roles, and limit automated workflows that can perform destructive actions to prevent accidental or malicious deletions.", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_deletion_protection" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json index 9856bad9ae..25a91cdfe8 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json @@ -14,7 +14,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune DB clusters* are evaluated for **IAM database authentication**. \n\nIf this setting is enabled, the cluster supports IAM-based authentication.\nIf disabled, the cluster requires traditional database credentials instead.", "Risk": "**Disabled IAM database authentication** weakens confidentiality and integrity of the database.\n\n- Static or embedded DB credentials can be stolen or reused, enabling unauthorized queries and data exfiltration\n- Attackers may bypass centralized access controls, escalate privileges, and move laterally without IAM-based audit trails", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_iam_authentication_enabled", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-7", "https://docs.aws.amazon.com/config/latest/developerguide/neptune-cluster-iam-database-authentication.html", @@ -30,7 +30,7 @@ }, "Recommendation": { "Text": "Adopt **IAM database authentication** and centralized identity management to remove static DB credentials and improve auditability.\n\n- Enforce **least privilege** for database roles\n- Use short-lived credentials, centralized rotation and logging\n- Apply defense-in-depth and integrate DB access with IAM for accountability", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_iam_authentication_enabled" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json index 6fac027cb5..c2140f7db0 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json @@ -13,7 +13,7 @@ "ResourceType": "Other", "Description": "*Neptune DB cluster* is inspected for CloudWatch export of **audit** events. The finding indicates whether the cluster publishes `audit` logs to CloudWatch; a *FAIL* means the `audit` export is not enabled and audit records are not being forwarded to CloudWatch for centralized logging and review.", "Risk": "Missing **audit logs** reduces **detectability** and **accountability**: \n\n- investigators cannot reconstruct queries, client origins, or timeline\n- unauthorized queries, data exfiltration, or privilege misuse may go undetected\n\nThis degrades confidentiality and integrity and slows incident response.", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_integration_cloudwatch_logs", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/neptune/latest/userguide/auditing.html", "https://docs.aws.amazon.com/neptune/latest/userguide/cloudwatch-logs.html", @@ -29,7 +29,7 @@ }, "Recommendation": { "Text": "Enable and centralize **audit logging** for *Neptune* by exporting `audit` events to *CloudWatch Logs* and integrating with monitoring or SIEM.\n\n- enforce **least privilege** on log access\n- configure retention, encryption, and alerting for anomalous queries\n\nThis supports proactive detection and forensic readiness.", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_integration_cloudwatch_logs" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json index 751d7bb138..6655717492 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json @@ -14,7 +14,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Amazon Neptune DB clusters* are evaluated for `Multi-AZ` deployment by checking whether the cluster has read-replica instances distributed across multiple Availability Zones.\n\nA failing result indicates the cluster is deployed in a single AZ and lacks read-replicas that enable automatic promotion and cross‑AZ failover.", "Risk": "**Single-AZ deployment** creates a clear availability single point of failure.\n\n- **Availability**: AZ outage or maintenance can cause prolonged downtime until the primary is rebuilt.\n- **Integrity/Recovery**: Manual recovery increases risk of configuration errors and longer RTOs, impacting operations and compliance.", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_multi_az", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-9", "https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/multi-az.html#" @@ -28,7 +28,7 @@ }, "Recommendation": { "Text": "Adopt a **high availability** deployment model for production *Neptune* clusters by placing read‑replicas in separate Availability Zones to avoid single points of failure.\n\nRegularly test automated failover and combine HA with robust backup and recovery practices as part of a defense‑in‑depth strategy.", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_multi_az" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json index 3d623b8725..e88ccb98cf 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json @@ -14,7 +14,7 @@ "ResourceType": "AwsRdsDbClusterSnapshot", "Description": "*Neptune DB manual cluster snapshot* is evaluated to determine if its restore attributes allow access to *all AWS accounts* (public).\n\nA **FAIL** means the snapshot is publicly shared and can be copied or restored by any AWS account; **PASS** means it is not shared publicly.", "Risk": "**Public snapshots** compromise confidentiality of stored data and metadata.\n\nAttackers or third parties can:\n- Copy or restore snapshots to external accounts.\n- Access sensitive data contained in the snapshot.", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_public_snapshot", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-3", "https://docs.aws.amazon.com/config/latest/developerguide/neptune-cluster-snapshot-public-prohibited.html" @@ -28,7 +28,7 @@ }, "Recommendation": { "Text": "Avoid public sharing and apply **least privilege** when granting snapshot access: share only with specific AWS accounts or roles.\n\nUse **encryption**, enforce automated policies and regular audits, and apply **separation of duties** and tagging to control and track snapshot access.", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_public_snapshot" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json index 804116ebfa..bdf1f3322b 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json @@ -14,7 +14,7 @@ "ResourceType": "AwsRdsDbClusterSnapshot", "Description": "*Neptune DB cluster snapshot* is encryoted at rest. The evaluation looks at whether each snapshot's encrypted attribute is enabled, confirming that the data is protected while stored.", "Risk": "**Unencrypted Neptune snapshots** undermine data confidentiality. If accessed or shared due to compromised credentials or misconfiguration, attackers can restore or download snapshot contents, enabling **data exfiltration**, and exposure of sensitive records. This weakens overall data protection posture.", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_snapshot_encrypted", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-6", "https://docs.aws.amazon.com/neptune/latest/userguide/backup-restore-share-snapshot.html" @@ -28,7 +28,7 @@ }, "Recommendation": { "Text": "Protect snapshot data by enforcing **encryption at rest** and strong key governance.\n\n- Use **customer-managed keys** with controlled lifecycle and rotation\n- Apply **least privilege** to snapshot access and sharing\n- Prevent creation of unencrypted snapshots via organizational configuration and policy controls", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_snapshot_encrypted" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json index ccb5da2807..c704602eec 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json @@ -13,7 +13,7 @@ "ResourceType": "Other", "Description": "*Neptune DB cluster* is evaluated for **encryption at rest**. Indicating the cluster's underlying storage is not encrypted.", "Risk": "**Unencrypted Neptune storage** reduces confidentiality of stored data and metadata and increases attack surface.\n\nPossible impacts:\n- Unauthorized access or data exfiltration from underlying volumes or snapshots\n- Greater blast radius from leaked or shared snapshots", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_storage_encrypted", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-1", "https://docs.aws.amazon.com/neptune/latest/userguide/encrypt.html" @@ -27,7 +27,7 @@ }, "Recommendation": { "Text": "Provision all new *Neptune DB clusters* with **encryption at rest** and prefer **Customer‑Managed Keys (CMK)** for key ownership and auditability.\n\nEnforce **least privilege** on KMS keys, implement key lifecycle practices (rotation, revocation) and ensure backups/snapshots remain encrypted to prevent exposure.", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_storage_encrypted" } }, "Categories": [ diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json index aefdd970f1..dfa8d2b55c 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json @@ -13,7 +13,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune cluster* is associated with one or more **public subnets**.", "Risk": "A *Neptune cluster* in a **public subnet** increases exposure across the CIA triad:\n\n- **Confidentiality**: direct access enables credential attacks and data exfiltration\n- **Integrity**: attackers may modify or inject graph data\n- **Availability**: public reachability allows DDoS or remote exploitation, causing downtime", - "RelatedUrl": "https://hub.prowler.com/check/neptune_cluster_uses_public_subnet", + "RelatedUrl": "", "AdditionalURLs": [ "https://docs.aws.amazon.com/neptune/latest/userguide/get-started-vpc.html", "https://docs.aws.amazon.com/neptune/latest/userguide/feature-overview-endpoints.html" @@ -27,7 +27,7 @@ }, "Recommendation": { "Text": "Place *Neptune clusters* in **private subnets** and remove public routability to reduce attack surface.\n\n- Apply **least privilege** and network segmentation\n- Restrict inbound access with scoped network controls and minimal trusted paths\n- Enforce logging, monitoring, and private connectivity for administrative and application access", - "Url": "" + "Url": "https://hub.prowler.com/check/neptune_cluster_uses_public_subnet" } }, "Categories": [