diff --git a/prowler/providers/aws/services/awslambda/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled.py b/prowler/providers/aws/services/awslambda/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled.py index 22ee6aaa31..f5806a6463 100644 --- a/prowler/providers/aws/services/awslambda/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled.py +++ b/prowler/providers/aws/services/awslambda/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled.py @@ -28,7 +28,8 @@ class awslambda_function_invoke_api_operations_cloudtrail_logging_enabled(Check) for resource in data_event.event_selector["DataResources"]: if resource["Type"] == "AWS::Lambda::Function" and ( function.arn in resource["Values"] - or "arn:aws:lambda" in resource["Values"] + or f"arn:{awslambda_client.audited_partition}:lambda" + in resource["Values"] ): lambda_recorded_cloudtrail = True break diff --git a/prowler/providers/aws/services/iam/iam_administrator_access_with_mfa/iam_administrator_access_with_mfa.py b/prowler/providers/aws/services/iam/iam_administrator_access_with_mfa/iam_administrator_access_with_mfa.py index 4ff08f32b2..1853de9531 100644 --- a/prowler/providers/aws/services/iam/iam_administrator_access_with_mfa/iam_administrator_access_with_mfa.py +++ b/prowler/providers/aws/services/iam/iam_administrator_access_with_mfa/iam_administrator_access_with_mfa.py @@ -22,7 +22,7 @@ class iam_administrator_access_with_mfa(Check): for group_policy in group.attached_policies: if ( group_policy["PolicyArn"] - == "arn:aws:iam::aws:policy/AdministratorAccess" + == f"arn:{iam_client.audited_partition}:iam::aws:policy/AdministratorAccess" ): # users in group are Administrators if group.users: diff --git a/prowler/providers/aws/services/iam/iam_securityaudit_role_created/iam_securityaudit_role_created.py b/prowler/providers/aws/services/iam/iam_securityaudit_role_created/iam_securityaudit_role_created.py index 8b6a2d55ed..863b363dfe 100644 --- a/prowler/providers/aws/services/iam/iam_securityaudit_role_created/iam_securityaudit_role_created.py +++ b/prowler/providers/aws/services/iam/iam_securityaudit_role_created/iam_securityaudit_role_created.py @@ -9,7 +9,9 @@ class iam_securityaudit_role_created(Check): report = Check_Report_AWS(self.metadata()) report.region = iam_client.region report.resource_id = "SecurityAudit" - report.resource_arn = "arn:aws:iam::aws:policy/SecurityAudit" + report.resource_arn = ( + f"arn:{iam_client.audited_partition}:iam::aws:policy/SecurityAudit" + ) if iam_client.entities_role_attached_to_securityaudit_policy: report.status = "PASS" report.status_extended = f"SecurityAudit policy attached to role {iam_client.entities_role_attached_to_securityaudit_policy[0]['RoleName']}." diff --git a/prowler/providers/aws/services/iam/iam_service.py b/prowler/providers/aws/services/iam/iam_service.py index c97fc07513..bc04cf1cd1 100644 --- a/prowler/providers/aws/services/iam/iam_service.py +++ b/prowler/providers/aws/services/iam/iam_service.py @@ -69,13 +69,13 @@ class IAM(AWSService): self.__list_attached_role_policies__() self.__list_mfa_devices__() self.password_policy = self.__get_password_policy__() - support_policy_arn = ( - "arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy" - ) + support_policy_arn = f"arn:{self.audited_partition}:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy" self.entities_role_attached_to_support_policy = ( self.__list_entities_role_for_policy__(support_policy_arn) ) - securityaudit_policy_arn = "arn:aws:iam::aws:policy/SecurityAudit" + securityaudit_policy_arn = ( + f"arn:{self.audited_partition}:iam::aws:policy/SecurityAudit" + ) self.entities_role_attached_to_securityaudit_policy = ( self.__list_entities_role_for_policy__(securityaudit_policy_arn) ) diff --git a/prowler/providers/aws/services/iam/iam_support_role_created/iam_support_role_created.py b/prowler/providers/aws/services/iam/iam_support_role_created/iam_support_role_created.py index c17bb03543..6763f6d354 100644 --- a/prowler/providers/aws/services/iam/iam_support_role_created/iam_support_role_created.py +++ b/prowler/providers/aws/services/iam/iam_support_role_created/iam_support_role_created.py @@ -9,9 +9,7 @@ class iam_support_role_created(Check): report = Check_Report_AWS(self.metadata()) report.region = iam_client.region report.resource_id = "AWSSupportServiceRolePolicy" - report.resource_arn = ( - "arn:aws:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy" - ) + report.resource_arn = f"arn:{iam_client.audited_partition}:iam::aws:policy/aws-service-role/AWSSupportServiceRolePolicy" if iam_client.entities_role_attached_to_support_policy: report.status = "PASS" report.status_extended = f"Support policy attached to role {iam_client.entities_role_attached_to_support_policy[0]['RoleName']}."