diff --git a/run.sh b/run.sh index f655b5895e..8f93055280 100755 --- a/run.sh +++ b/run.sh @@ -1,20 +1,19 @@ #!/bin/bash -echo "Assuming role for ${ACCOUNT_ID}" -creds=$(aws sts assume-role --role-arn ${ROLE_ARN} --external-id ${EXTERNAL_ID} --role-session-name prowler --duration-seconds 10800 | jq '.Credentials') -export AWS_ACCESS_KEY_ID=$(echo $creds | jq ".AccessKeyId" | sed 's/\"//g') -export AWS_SECRET_ACCESS_KEY=$(echo $creds | jq ".SecretAccessKey" | sed 's/\"//g') -export AWS_SESSION_TOKEN=$(echo $creds | jq ".SessionToken" | sed 's/\"//g') +mkdir ~/.aws +cat << AWS_CREDS > ~/.aws/credentials +[default] +credential_source = EcsContainer +role_arn = ${ROLE_ARN} +external_id = ${EXTERNAL_ID} + +AWS_CREDS echo "Running prowler on ${ACCOUNT_ID}" -./prowler ${CHECKS} -M json > output.json +./prowler -p default "${CHECKS}" -M json > output.json echo "Results:" cat output.json -unset AWS_ACCESS_KEY_ID -unset AWS_SECRET_ACCESS_KEY -unset AWS_SESSION_TOKEN - echo "Uploading result to s3://${BUCKET}/prowler/${ACCOUNT_ID}/output.json" -aws s3api put-object --bucket ${BUCKET} --key prowler/$ACCOUNT_ID/output.json --body output.json \ No newline at end of file +aws s3api put-object --bucket "${BUCKET}" --key prowler/"${ACCOUNT_ID}"/output.json --body output.json \ No newline at end of file