Use credentials file instead of assume role and stuff

run.sh

@@ -1,20 +1,19 @@
 #!/bin/bash
 
-echo "Assuming role for ${ACCOUNT_ID}"
-creds=$(aws sts assume-role --role-arn ${ROLE_ARN} --external-id ${EXTERNAL_ID} --role-session-name prowler --duration-seconds 10800 | jq '.Credentials')
-export AWS_ACCESS_KEY_ID=$(echo $creds | jq ".AccessKeyId" | sed 's/\"//g')
-export AWS_SECRET_ACCESS_KEY=$(echo $creds | jq ".SecretAccessKey" | sed 's/\"//g')
-export AWS_SESSION_TOKEN=$(echo $creds | jq ".SessionToken" | sed 's/\"//g')
+mkdir ~/.aws
+cat << AWS_CREDS > ~/.aws/credentials
+[default]
+credential_source = EcsContainer
+role_arn = ${ROLE_ARN}
+external_id = ${EXTERNAL_ID}
+
+AWS_CREDS
 
 echo "Running prowler on ${ACCOUNT_ID}"
-./prowler ${CHECKS} -M json > output.json
+./prowler -p default "${CHECKS}" -M json > output.json
 
 echo "Results:"
 cat output.json
 
-unset AWS_ACCESS_KEY_ID
-unset AWS_SECRET_ACCESS_KEY
-unset AWS_SESSION_TOKEN
-
 echo "Uploading result to s3://${BUCKET}/prowler/${ACCOUNT_ID}/output.json"
-aws s3api put-object --bucket ${BUCKET} --key prowler/$ACCOUNT_ID/output.json --body output.json
+aws s3api put-object --bucket "${BUCKET}" --key prowler/"${ACCOUNT_ID}"/output.json --body output.json