ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-23 20:42:02 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(iam): extract IAM resource metadata automated (#6552)

Browse Source
This commit is contained in:
Rubén De la Torre Vico
2025-01-16 15:05:23 +01:00
committed by GitHub
parent dd63c16a74
commit 74d6b614b3
3 changed files with 6 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prowler/providers/azure/services/iam/iam_custom_role_has_permissions_to_administer_resource_locks/iam_custom_role_has_permissions_to_administer_resource_locks.py
+3 -3
View File
@@ -13,10 +13,10 @@ class iam_custom_role_has_permissions_to_administer_resource_locks(Check):
for custom_role in roles:
if exits_role_with_permission_over_locks:
break
report = Check_Report_Azure(self.metadata())
report = Check_Report_Azure(
metadata=self.metadata(), resource_metadata=custom_role
)
report.subscription = subscription
report.resource_id = custom_role.id
report.resource_name = custom_role.name
report.status = "FAIL"
report.status_extended = f"Role {custom_role.name} from subscription {subscription} has no permission to administer resource locks."
prowler/providers/azure/services/iam/iam_service.py
-1
View File
@@ -8,7 +8,6 @@ from prowler.providers.azure.azure_provider import AzureProvider
from prowler.providers.azure.lib.service.service import AzureService
########################## IAM
class IAM(AzureService):
def __init__(self, provider: AzureProvider):
super().__init__(AuthorizationManagementClient, provider)
prowler/providers/azure/services/iam/iam_subscription_roles_owner_custom_not_created/iam_subscription_roles_owner_custom_not_created.py
+3 -3
View File
@@ -9,10 +9,10 @@ class iam_subscription_roles_owner_custom_not_created(Check):
findings = []
for subscription, roles in iam_client.custom_roles.items():
for custom_role in roles:
report = Check_Report_Azure(self.metadata())
report = Check_Report_Azure(
metadata=self.metadata(), resource_metadata=custom_role
)
report.subscription = subscription
report.resource_id = custom_role.id
report.resource_name = custom_role.name
report.status = "PASS"
report.status_extended = f"Role {custom_role.name} from subscription {subscription} is not a custom owner role."
for scope in custom_role.assignable_scopes: