chore(fixer): add more fixers (#3772)

Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
This commit is contained in:
Sergio Garcia
2024-04-18 08:09:03 +02:00
committed by GitHub
parent 465b0f6a16
commit ab714f0fc7
16 changed files with 444 additions and 14 deletions
+27 -2
View File
@@ -101,10 +101,10 @@ For some fixers, you can have configurable parameters depending on your use case
# Fixer configuration file
aws:
# ec2_ebs_default_encryption
# No configuration needed for this check
# No configuration needed for this check
# s3_account_level_public_access_blocks
# No configuration needed for this check
# No configuration needed for this check
# iam_password_policy_* checks:
iam_password_policy:
@@ -117,4 +117,29 @@ aws:
MaxPasswordAge: 90
PasswordReusePrevention: 24
HardExpiry: False
# accessanalyzer_enabled
accessanalyzer_enabled:
AnalyzerName: "DefaultAnalyzer"
AnalyzerType: "ACCOUNT_UNUSED_ACCESS"
# guardduty_is_enabled
# No configuration needed for this check
# securityhub_enabled
securityhub_enabled:
EnableDefaultStandards: True
# cloudtrail_multi_region_enabled
cloudtrail_multi_region_enabled:
TrailName: "DefaultTrail"
S3BucketName: "my-cloudtrail-bucket"
IsMultiRegionTrail: True
EnableLogFileValidation: True
# CloudWatchLogsLogGroupArn: "arn:aws:logs:us-east-1:123456789012:log-group:my-cloudtrail-log-group"
# CloudWatchLogsRoleArn: "arn:aws:iam::123456789012:role/my-cloudtrail-role"
# KmsKeyId: "arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab"
# kms_cmk_rotation_enabled
# No configuration needed for this check
```