feat(codebuild): add new check codebuild_project_logging_enabled (#5365)

Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
This commit is contained in:
Rubén De la Torre VicoandSergio Garcia authored and GitHub committed 2024-10-15 07:42:45 -04:00
1 parent 0449d6372c
commit aac6038565
6 files changed
+379 -1

No files matched your search

@@ -5,6 +5,7 @@ import botocore
from prowler.providers.aws.services.codebuild.codebuild_service import (
Build,
CloudWatchLogs,
Codebuild,
Project,
s3Logs,
@@ -53,11 +54,16 @@ def mock_make_api_call(self, operation_name, kwarg):
}
],
"logsConfig": {
"cloudWatchLogs": {
"status": "ENABLED",
"groupName": project_name,
"streamName": project_name,
},
"s3Logs": {
"status": "ENABLED",
"location": "test-bucket",
"encryptionDisabled": False,
}
},
},
"tags": [{"key": "Name", "value": project_name}],
}
@@ -105,5 +111,15 @@ class Test_Codebuild_Service:
assert codebuild.projects[project_arn].s3_logs.enabled
assert codebuild.projects[project_arn].s3_logs.bucket_location == "test-bucket"
assert codebuild.projects[project_arn].s3_logs.encrypted
assert isinstance(
codebuild.projects[project_arn].cloudwatch_logs, CloudWatchLogs
)
assert codebuild.projects[project_arn].cloudwatch_logs.enabled
assert (
codebuild.projects[project_arn].cloudwatch_logs.group_name == project_name
)
assert (
codebuild.projects[project_arn].cloudwatch_logs.stream_name == project_name
)
assert codebuild.projects[project_arn].tags[0]["key"] == "Name"
assert codebuild.projects[project_arn].tags[0]["value"] == project_name