From cebd5cce3e920015e30b198ecf731631580666e7 Mon Sep 17 00:00:00 2001
From: Daniel Lorch <dlorch@gmail.com>
Date: Tue, 23 Nov 2021 17:26:14 +0100
Subject: [PATCH 1/3] Update ProwlerRole.yaml to have same permissions as
 util/org-multi-account/ProwlerRole.yaml

---
 .../serverless_codebuild/templates/ProwlerRole.yaml              | 1 +
 1 file changed, 1 insertion(+)

diff --git a/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml b/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
index 138d880976..e5efcd4596 100644
--- a/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
+++ b/util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
@@ -83,6 +83,7 @@ Resources:
                   - dax:ListTables
                   - ds:ListAuthorizedApplications
                   - ds:DescribeRoles
+                  - ec2:GetEbsEncryptionByDefault
                   - ecr:Describe*
                   - lambda:GetAccountSettings
                   - lambda:GetFunctionConfiguration

From 10f2234e3d1df3d138d362521f1ff4d0ddffeb4d Mon Sep 17 00:00:00 2001
From: Daniel Lorch <dlorch@gmail.com>
Date: Tue, 23 Nov 2021 17:26:26 +0100
Subject: [PATCH 2/3] Fix link to quicksight dashboard

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 5cb8afde56..2c58e1746e 100644
--- a/README.md
+++ b/README.md
@@ -216,7 +216,7 @@ Prowler has two parameters related to regions: `-r` that is used query AWS servi
 
     <img width="900" alt="Prowler html" src="https://user-images.githubusercontent.com/3985464/141443976-41d32cc2-533d-405a-92cb-affc3995d6ec.png">
 
-- Sample screenshot of the Quicksight dashboard, see [https://quicksight-security-dashboard.workshop.aws](quicksight-security-dashboard.workshop.aws/):
+- Sample screenshot of the Quicksight dashboard, see [https://quicksight-security-dashboard.workshop.aws](https://quicksight-security-dashboard.workshop.aws/):
 
     <img width="900" alt="Prowler with Quicksight" src="https://user-images.githubusercontent.com/3985464/128932819-0156e838-286d-483c-b953-fda68a325a3d.png">
 

From bbf6a0f5d91be8bb050ad720d43ce16274ac7bd9 Mon Sep 17 00:00:00 2001
From: Daniel Lorch <dlorch@gmail.com>
Date: Tue, 23 Nov 2021 20:08:07 +0100
Subject: [PATCH 3/3] Install detect-secrets (e.g. for check_extra742)

---
 .../templates/ProwlerCodeBuildStack.yaml                    | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/util/org-multi-account/serverless_codebuild/templates/ProwlerCodeBuildStack.yaml b/util/org-multi-account/serverless_codebuild/templates/ProwlerCodeBuildStack.yaml
index d89c5452e2..bc7c0a2b82 100644
--- a/util/org-multi-account/serverless_codebuild/templates/ProwlerCodeBuildStack.yaml
+++ b/util/org-multi-account/serverless_codebuild/templates/ProwlerCodeBuildStack.yaml
@@ -123,8 +123,12 @@ Resources:
               runtime-versions:
                 python: 3.8
               commands:
-                - echo "Updating yum..."
+                - echo "Updating yum ..."
                 - yum -y update
+                - echo "Updating pip ..."
+                - python -m pip install --upgrade pip
+                - echo "Installing requirements ..."
+                - pip install "git+https://github.com/ibm/detect-secrets.git@master#egg=detect-secrets"
             build:
               commands:
                 - echo "Running Prowler with script"