ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 21:11:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added Shield actions GetSubscriptionState and DescribeProtection

Browse Source
This commit is contained in:
Toni de la Fuente
2021-12-29 12:29:39 +01:00
parent d1eca877dd
commit 4cd025538f
5 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
iam/prowler-additions-policy.json
+3 -1
View File
@@ -11,7 +11,9 @@
"lambda:GetFunction",
"glue:GetConnections",
"glue:SearchTables",
"s3:GetAccountPublicAccessBlock"
"s3:GetAccountPublicAccessBlock",
"shield:GetSubscriptionState",
"shield:DescribeProtection"
],
"Resource": "*",
"Effect": "Allow",
util/codebuild/codebuild-prowler-audit-account-cfn.yaml
+2
View File
@@ -193,6 +193,8 @@ Resources:
- support:Describe*
- tag:GetTagKeys
- lambda:GetFunction
- shield:GetSubscriptionState
- shield:DescribeProtection
Effect: Allow
Resource: !Sub 'arn:aws:glue:${AWS::Region}:${AWS::AccountId}:catalog'
- PolicyName: CodeBuild
util/org-multi-account/ProwlerRole.yaml
+2
View File
@@ -96,6 +96,8 @@ Resources:
- states:ListActivities
- support:Describe*
- tag:GetTagKeys
- shield:GetSubscriptionState
- shield:DescribeProtection
- PolicyName: Prowler-S3-Reports
PolicyDocument:
Version: 2012-10-17
util/org-multi-account/serverless_codebuild/templates/ProwlerRole.yaml
+2
View File
@@ -97,6 +97,8 @@ Resources:
- states:ListActivities
- support:Describe*
- tag:GetTagKeys
- shield:GetSubscriptionState
- shield:DescribeProtection
- PolicyName: Prowler-S3-Reports
PolicyDocument:
Version: 2012-10-17
util/terraform-kickstarter/main.tf
+2
View File
@@ -320,6 +320,8 @@ resource "aws_iam_policy" "prowler_kickstarter_iam_policy" {
"support:Describe*",
"tag:GetTagKeys",
"lambda:GetFunction"
"shield:GetSubscriptionState",
"shield:DescribeProtection"
]
Effect = "Allow"
Resource = "arn:aws:glue:${data.aws_region.current.name}:${data.aws_caller_identity.current.account_id}:catalog"