ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 13:01:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(metadata): update checks medatada services/subservices

Browse Source
This commit is contained in:
pedrooot
2024-05-16 11:18:56 +02:00
parent 8b5a089a32
commit b14cfe14e4
325 changed files with 562 additions and 562 deletions
Download Patch File Download Diff File Expand all files Collapse all files
prowler/providers/aws/services/accessanalyzer/accessanalyzer_enabled/accessanalyzer_enabled.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "accessanalyzer",
"ServiceName": "AccessAnalyzer",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:access-analyzer:region:account-id:analyzer/resource-id",
"Severity": "low",
prowler/providers/aws/services/accessanalyzer/accessanalyzer_enabled_without_findings/accessanalyzer_enabled_without_findings.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "accessanalyzer",
"ServiceName": "AccessAnalyzer",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:access-analyzer:region:account-id:analyzer/resource-id",
"Severity": "low",
prowler/providers/aws/services/account/account_maintain_current_contact_details/account_maintain_current_contact_details.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "account",
"ServiceName": "Account",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:access-recorder:region:account-id:recorder/resource-id",
"Severity": "medium",
prowler/providers/aws/services/account/account_maintain_different_contact_details_to_security_billing_and_operations/account_maintain_different_contact_details_to_security_billing_and_operations.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "account",
"ServiceName": "Account",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:access-recorder:region:account-id:recorder/resource-id",
"Severity": "medium",
prowler/providers/aws/services/account/account_security_contact_information_is_registered/account_security_contact_information_is_registered.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "account",
"ServiceName": "Account",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:access-recorder:region:account-id:recorder/resource-id",
"Severity": "medium",
prowler/providers/aws/services/account/account_security_questions_are_registered_in_the_aws_account/account_security_questions_are_registered_in_the_aws_account.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "account",
"ServiceName": "Account",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:access-recorder:region:account-id:recorder/resource-id",
"Severity": "medium",
prowler/providers/aws/services/acm/acm_certificates_expiration_check/acm_certificates_expiration_check.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"Data Protection"
],
"ServiceName": "acm",
"ServiceName": "ACM",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:acm:region:account-id:certificate/resource-id",
"Severity": "high",
prowler/providers/aws/services/acm/acm_certificates_transparency_logs_enabled/acm_certificates_transparency_logs_enabled.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"Logging and Monitoring"
],
"ServiceName": "acm",
"ServiceName": "ACM",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:acm:region:account-id:certificate/resource-id",
"Severity": "medium",
prowler/providers/aws/services/apigateway/apigateway_restapi_authorizers_enabled/apigateway_restapi_authorizers_enabled.metadata.json
+2 -2
View File
@@ -8,8 +8,8 @@
"CheckType": [
"IAM"
],
"ServiceName": "apigateway",
"SubServiceName": "rest_api",
"ServiceName": "APIGateway",
"SubServiceName": "RestApi",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsApiGatewayRestApi",
prowler/providers/aws/services/apigateway/apigateway_restapi_client_certificate_enabled/apigateway_restapi_client_certificate_enabled.metadata.json
+2 -2
View File
@@ -8,8 +8,8 @@
"CheckType": [
"Data Protection"
],
"ServiceName": "apigateway",
"SubServiceName": "rest_api",
"ServiceName": "APIGateway",
"SubServiceName": "RestApi",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsApiGatewayStage",
prowler/providers/aws/services/apigateway/apigateway_restapi_logging_enabled/apigateway_restapi_logging_enabled.metadata.json
+2 -2
View File
@@ -8,8 +8,8 @@
"CheckType": [
"Logging and Monitoring"
],
"ServiceName": "apigateway",
"SubServiceName": "rest_api",
"ServiceName": "APIGateway",
"SubServiceName": "RestApi",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsApiGatewayStage",
prowler/providers/aws/services/apigateway/apigateway_restapi_public/apigateway_restapi_public.metadata.json
+2 -2
View File
@@ -8,8 +8,8 @@
"CheckType": [
"Infrastructure Security"
],
"ServiceName": "apigateway",
"SubServiceName": "rest_api",
"ServiceName": "APIGateway",
"SubServiceName": "RestApi",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsApiGatewayRestApi",
prowler/providers/aws/services/apigateway/apigateway_restapi_public_with_authorizer/apigateway_restapi_public_with_authorizer.metadata.json
+2 -2
View File
@@ -8,8 +8,8 @@
"CheckType": [
"Infrastructure Security"
],
"ServiceName": "apigateway",
"SubServiceName": "rest_api",
"ServiceName": "APIGateway",
"SubServiceName": "RestApi",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsApiGatewayRestApi",
prowler/providers/aws/services/apigateway/apigateway_restapi_waf_acl_attached/apigateway_restapi_waf_acl_attached.metadata.json
+2 -2
View File
@@ -8,8 +8,8 @@
"CheckType": [
"Infrastructure Security"
],
"ServiceName": "apigateway",
"SubServiceName": "rest_api",
"ServiceName": "APIGateway",
"SubServiceName": "RestApi",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsApiGatewayStage",
prowler/providers/aws/services/apigatewayv2/apigatewayv2_api_access_logging_enabled/apigatewayv2_api_access_logging_enabled.metadata.json
+1 -1
View File
@@ -8,7 +8,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "apigateway",
"ServiceName": "APIGatewayV2",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
prowler/providers/aws/services/apigatewayv2/apigatewayv2_api_authorizers_enabled/apigatewayv2_api_authorizers_enabled.metadata.json
+1 -1
View File
@@ -8,7 +8,7 @@
"CheckType": [
"Logging and Monitoring"
],
"ServiceName": "apigateway",
"ServiceName": "APIGatewayV2",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
prowler/providers/aws/services/appstream/appstream_fleet_default_internet_access_disabled/appstream_fleet_default_internet_access_disabled.metadata.json
+1 -1
View File
@@ -7,7 +7,7 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "appstream",
"ServiceName": "AppStream",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:appstream:region:account-id:fleet/resource-id",
"Severity": "medium",
prowler/providers/aws/services/appstream/appstream_fleet_maximum_session_duration/appstream_fleet_maximum_session_duration.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"Infrastructure Security"
],
"ServiceName": "appstream",
"ServiceName": "AppStream",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:appstream:region:account-id:fleet/resource-id",
"Severity": "medium",
prowler/providers/aws/services/appstream/appstream_fleet_session_disconnect_timeout/appstream_fleet_session_disconnect_timeout.metadata.json
+1 -1
View File
@@ -7,7 +7,7 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "appstream",
"ServiceName": "AppStream",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:appstream:region:account-id:fleet/resource-id",
"Severity": "medium",
prowler/providers/aws/services/appstream/appstream_fleet_session_idle_disconnect_timeout/appstream_fleet_session_idle_disconnect_timeout.metadata.json
+1 -1
View File
@@ -7,7 +7,7 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "appstream",
"ServiceName": "AppStream",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:appstream:region:account-id:fleet/resource-id",
"Severity": "medium",
prowler/providers/aws/services/athena/athena_workgroup_encryption/athena_workgroup_encryption.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"Software and Configuration Checks"
],
"ServiceName": "athena",
"ServiceName": "Athena",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:athena:region:account-id:workgroup/resource-id",
"Severity": "medium",
prowler/providers/aws/services/athena/athena_workgroup_enforce_configuration/athena_workgroup_enforce_configuration.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"Software and Configuration Checks"
],
"ServiceName": "athena",
"ServiceName": "Athena",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:athena:region:account-id:workgroup/resource-id",
"Severity": "medium",
prowler/providers/aws/services/autoscaling/autoscaling_find_secrets_ec2_launch_configuration/autoscaling_find_secrets_ec2_launch_configuration.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"IAM"
],
"ServiceName": "autoscaling",
"ServiceName": "AutoScaling",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:autoscaling:region:account-id:autoScalingGroupName/resource-name",
"Severity": "critical",
prowler/providers/aws/services/autoscaling/autoscaling_group_multiple_az/autoscaling_group_multiple_az.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "autoscaling_group_multiple_az",
"CheckTitle": "EC2 Auto Scaling Group should use multiple Availability Zones",
"CheckType": [],
"ServiceName": "autoscaling",
"ServiceName": "AutoScaling",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:autoscaling:region:account-id:autoScalingGroupName/resource-name",
"Severity": "medium",
prowler/providers/aws/services/awslambda/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled/awslambda_function_invoke_api_operations_cloudtrail_logging_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "awslambda_function_invoke_api_operations_cloudtrail_logging_enabled",
"CheckTitle": "Check if Lambda functions invoke API operations are being recorded by CloudTrail.",
"CheckType": [],
"ServiceName": "lambda",
"SubServiceName": "",
"ServiceName": "Lambda",
"SubServiceName": "Functions",
"ResourceIdTemplate": "arn:partition:lambda:region:account-id:function/function-name",
"Severity": "low",
"ResourceType": "AwsLambdaFunction",
prowler/providers/aws/services/awslambda/awslambda_function_no_secrets_in_code/awslambda_function_no_secrets_in_code.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "awslambda_function_no_secrets_in_code",
"CheckTitle": "Find secrets in Lambda functions code.",
"CheckType": [],
"ServiceName": "lambda",
"SubServiceName": "",
"ServiceName": "Lambda",
"SubServiceName": "Functions",
"ResourceIdTemplate": "arn:partition:lambda:region:account-id:function/function-name",
"Severity": "critical",
"ResourceType": "AwsLambdaFunction",
prowler/providers/aws/services/awslambda/awslambda_function_no_secrets_in_variables/awslambda_function_no_secrets_in_variables.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "awslambda_function_no_secrets_in_variables",
"CheckTitle": "Find secrets in Lambda functions variables.",
"CheckType": [],
"ServiceName": "lambda",
"SubServiceName": "",
"ServiceName": "Lambda",
"SubServiceName": "Functions",
"ResourceIdTemplate": "arn:partition:lambda:region:account-id:function/function-name",
"Severity": "critical",
"ResourceType": "AwsLambdaFunction",
prowler/providers/aws/services/awslambda/awslambda_function_not_publicly_accessible/awslambda_function_not_publicly_accessible.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "awslambda_function_not_publicly_accessible",
"CheckTitle": "Check if Lambda functions have resource-based policy set as Public.",
"CheckType": [],
"ServiceName": "lambda",
"SubServiceName": "",
"ServiceName": "Lambda",
"SubServiceName": "Functions",
"ResourceIdTemplate": "arn:partition:lambda:region:account-id:function/function-name",
"Severity": "critical",
"ResourceType": "AwsLambdaFunction",
prowler/providers/aws/services/awslambda/awslambda_function_url_cors_policy/awslambda_function_url_cors_policy.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "awslambda_function_url_cors_policy",
"CheckTitle": "Check Lambda Function URL CORS configuration.",
"CheckType": [],
"ServiceName": "lambda",
"SubServiceName": "",
"ServiceName": "Lambda",
"SubServiceName": "Functions",
"ResourceIdTemplate": "arn:partition:lambda:region:account-id:function/function-name",
"Severity": "medium",
"ResourceType": "AwsLambdaFunction",
prowler/providers/aws/services/awslambda/awslambda_function_url_public/awslambda_function_url_public.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "awslambda_function_url_public",
"CheckTitle": "Check Public Lambda Function URL.",
"CheckType": [],
"ServiceName": "lambda",
"SubServiceName": "",
"ServiceName": "Lambda",
"SubServiceName": "Functions",
"ResourceIdTemplate": "arn:partition:lambda:region:account-id:function/function-name",
"Severity": "high",
"ResourceType": "AwsLambdaFunction",
prowler/providers/aws/services/awslambda/awslambda_function_using_supported_runtimes/awslambda_function_using_supported_runtimes.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "awslambda_function_using_supported_runtimes",
"CheckTitle": "Find obsolete Lambda runtimes.",
"CheckType": [],
"ServiceName": "lambda",
"SubServiceName": "",
"ServiceName": "Lambda",
"SubServiceName": "Functions",
"ResourceIdTemplate": "arn:partition:lambda:region:account-id:function/function-name",
"Severity": "medium",
"ResourceType": "AwsLambdaFunction",
prowler/providers/aws/services/backup/backup_plans_exist/backup_plans_exist.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Resilience",
"Backup"
],
"ServiceName": "backup",
"SubServiceName": "",
"ServiceName": "Backup",
"SubServiceName": "Plans",
"ResourceIdTemplate": "arn:partition:service:region:account-id:backup-plan:backup-plan-id",
"Severity": "low",
"ResourceType": "AwsBackupBackupPlan",
prowler/providers/aws/services/backup/backup_reportplans_exist/backup_reportplans_exist.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Resilience",
"Backup"
],
"ServiceName": "backup",
"SubServiceName": "",
"ServiceName": "Backup",
"SubServiceName": "ReportPlan",
"ResourceIdTemplate": "arn:partition:service:region:account-id:backup-report-plan:backup-report-plan-id",
"Severity": "low",
"ResourceType": "Other",
prowler/providers/aws/services/backup/backup_vaults_encrypted/backup_vaults_encrypted.metadata.json
+2 -2
View File
@@ -8,8 +8,8 @@
"Backup",
"Data Protection"
],
"ServiceName": "backup",
"SubServiceName": "",
"ServiceName": "Backup",
"SubServiceName": "Vaults",
"ResourceIdTemplate": "arn:partition:service:region:account-id:backup-vault:backup-vault-id",
"Severity": "medium",
"ResourceType": "AwsBackupBackupVault",
prowler/providers/aws/services/backup/backup_vaults_exist/backup_vaults_exist.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Resilience",
"Backup"
],
"ServiceName": "backup",
"SubServiceName": "",
"ServiceName": "Backup",
"SubServiceName": "Vaults",
"ResourceIdTemplate": "arn:partition:service:region:account-id:backup-vault:backup-vault-id",
"Severity": "low",
"ResourceType": "AwsBackupBackupVault",
prowler/providers/aws/services/cloudformation/cloudformation_stack_outputs_find_secrets/cloudformation_stack_outputs_find_secrets.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudformation_stack_outputs_find_secrets",
"CheckTitle": "Find secrets in CloudFormation outputs",
"CheckType": [],
"ServiceName": "cloudformation",
"SubServiceName": "",
"ServiceName": "CloudFormation",
"SubServiceName": "Stacks",
"ResourceIdTemplate": "arn:partition:cloudformation:region:account-id:stack/resource-id",
"Severity": "critical",
"ResourceType": "AwsCloudFormationStack",
prowler/providers/aws/services/cloudformation/cloudformation_stacks_termination_protection_enabled/cloudformation_stacks_termination_protection_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudformation_stacks_termination_protection_enabled",
"CheckTitle": "Enable termination protection for Cloudformation Stacks",
"CheckType": [],
"ServiceName": "cloudformation",
"SubServiceName": "",
"ServiceName": "CloudFormation",
"SubServiceName": "Stacks",
"ResourceIdTemplate": "arn:partition:cloudformation:region:account-id:stack/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudFormationStack",
prowler/providers/aws/services/cloudfront/cloudfront_distributions_field_level_encryption_enabled/cloudfront_distributions_field_level_encryption_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudfront_distributions_field_level_encryption_enabled",
"CheckTitle": "Check if CloudFront distributions have Field Level Encryption enabled.",
"CheckType": [],
"ServiceName": "cloudfront",
"SubServiceName": "",
"ServiceName": "CloudFront",
"SubServiceName": "Distributions",
"ResourceIdTemplate": "arn:partition:cloudfront:region:account-id:distribution/resource-id",
"Severity": "low",
"ResourceType": "AwsCloudFrontDistribution",
prowler/providers/aws/services/cloudfront/cloudfront_distributions_geo_restrictions_enabled/cloudfront_distributions_geo_restrictions_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudfront_distributions_geo_restrictions_enabled",
"CheckTitle": "Check if Geo restrictions are enabled in CloudFront distributions.",
"CheckType": [],
"ServiceName": "cloudfront",
"SubServiceName": "",
"ServiceName": "CloudFront",
"SubServiceName": "Distributions",
"ResourceIdTemplate": "arn:partition:cloudfront:region:account-id:distribution/resource-id",
"Severity": "low",
"ResourceType": "AwsCloudFrontDistribution",
prowler/providers/aws/services/cloudfront/cloudfront_distributions_https_enabled/cloudfront_distributions_https_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudfront_distributions_https_enabled",
"CheckTitle": "Check if CloudFront distributions are set to HTTPS.",
"CheckType": [],
"ServiceName": "cloudfront",
"SubServiceName": "",
"ServiceName": "CloudFront",
"SubServiceName": "Distributions",
"ResourceIdTemplate": "arn:partition:cloudfront:region:account-id:distribution/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudFrontDistribution",
prowler/providers/aws/services/cloudfront/cloudfront_distributions_logging_enabled/cloudfront_distributions_logging_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudfront_distributions_logging_enabled",
"CheckTitle": "Check if CloudFront distributions have logging enabled.",
"CheckType": [],
"ServiceName": "cloudfront",
"SubServiceName": "",
"ServiceName": "CloudFront",
"SubServiceName": "Distributions",
"ResourceIdTemplate": "arn:partition:cloudfront:region:account-id:distribution/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudFrontDistribution",
prowler/providers/aws/services/cloudfront/cloudfront_distributions_using_deprecated_ssl_protocols/cloudfront_distributions_using_deprecated_ssl_protocols.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudfront_distributions_using_deprecated_ssl_protocols",
"CheckTitle": "Check if CloudFront distributions are using deprecated SSL protocols.",
"CheckType": [],
"ServiceName": "cloudfront",
"SubServiceName": "",
"ServiceName": "CloudFront",
"SubServiceName": "Distributions",
"ResourceIdTemplate": "arn:partition:cloudfront:region:account-id:distribution/resource-id",
"Severity": "low",
"ResourceType": "AwsCloudFrontDistribution",
prowler/providers/aws/services/cloudfront/cloudfront_distributions_using_waf/cloudfront_distributions_using_waf.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"IAM"
],
"ServiceName": "cloudfront",
"SubServiceName": "",
"ServiceName": "CloudFront",
"SubServiceName": "Distributions",
"ResourceIdTemplate": "arn:partition:cloudfront:region:account-id:distribution/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudFrontDistribution",
prowler/providers/aws/services/cloudtrail/cloudtrail_bucket_requires_mfa_delete/cloudtrail_bucket_requires_mfa_delete.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_cloudwatch_logging_enabled/cloudtrail_cloudwatch_logging_enabled.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "low",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_insights_exist/cloudtrail_insights_exist.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Insights",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "low",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_kms_encryption_enabled/cloudtrail_kms_encryption_enabled.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_log_file_validation_enabled/cloudtrail_log_file_validation_enabled.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_logs_s3_bucket_access_logging_enabled/cloudtrail_logs_s3_bucket_access_logging_enabled.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_logs_s3_bucket_is_not_publicly_accessible/cloudtrail_logs_s3_bucket_is_not_publicly_accessible.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "critical",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_multi_region_enabled/cloudtrail_multi_region_enabled.metadata.json
+2 -2
View File
@@ -7,8 +7,8 @@
"Industry and Regulatory Standards",
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_multi_region_enabled_logging_management_events/cloudtrail_multi_region_enabled_logging_management_events.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "low",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_s3_dataevents_read_enabled/cloudtrail_s3_dataevents_read_enabled.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Logging and Monitoring"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "low",
"ResourceType": "AwsS3Bucket",
prowler/providers/aws/services/cloudtrail/cloudtrail_s3_dataevents_write_enabled/cloudtrail_s3_dataevents_write_enabled.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Logging and Monitoring"
],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "low",
"ResourceType": "AwsS3Bucket",
prowler/providers/aws/services/cloudtrail/cloudtrail_threat_detection_enumeration/cloudtrail_threat_detection_enumeration.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudtrail_threat_detection_enumeration",
"CheckTitle": "Ensure there are no potential enumeration threats in CloudTrail",
"CheckType": [],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "critical",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudtrail/cloudtrail_threat_detection_privilege_escalation/cloudtrail_threat_detection_privilege_escalation.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cloudtrail_threat_detection_privilege_escalation",
"CheckTitle": "Ensure there are no potential privilege escalation threats in CloudTrail",
"CheckType": [],
"ServiceName": "cloudtrail",
"SubServiceName": "",
"ServiceName": "CloudTrail",
"SubServiceName": "Trails",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "critical",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Alarms",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_gateways_alarm_configured/cloudwatch_changes_to_network_gateways_alarm_configured.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Alarms",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_network_route_tables_alarm_configured/cloudwatch_changes_to_network_route_tables_alarm_configured.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Alarms",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_changes_to_vpcs_alarm_configured/cloudwatch_changes_to_vpcs_alarm_configured.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Alarms",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_cross_account_sharing_disabled/cloudwatch_cross_account_sharing_disabled.metadata.json
+1 -1
View File
@@ -5,7 +5,7 @@
"CheckType": [
"Logging and Monitoring"
],
"ServiceName": "cloudwatch",
"ServiceName": "CloudWatch",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_kms_encryption_enabled/cloudwatch_log_group_kms_encryption_enabled.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Data Protection"
],
"ServiceName": "cloudwatch",
"SubServiceName": "logs",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsLogsLogGroup",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_no_secrets_in_logs/cloudwatch_log_group_no_secrets_in_logs.metadata.json
+2 -2
View File
@@ -6,8 +6,8 @@
"Protect",
"Secure development"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:log-group/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailLogGroup",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_group_retention_policy_specific_days_enabled/cloudwatch_log_group_retention_policy_specific_days_enabled.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Data Retention"
],
"ServiceName": "cloudwatch",
"SubServiceName": "logs",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsLogsLogGroup",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_aws_config_configuration_changes_enabled.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled/cloudwatch_log_metric_filter_and_alarm_for_cloudtrail_configuration_changes_enabled.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_authentication_failures/cloudwatch_log_metric_filter_authentication_failures.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_aws_organizations_changes/cloudwatch_log_metric_filter_aws_organizations_changes.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk/cloudwatch_log_metric_filter_disable_or_scheduled_deletion_of_kms_cmk.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes/cloudwatch_log_metric_filter_for_s3_bucket_policy_changes.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_policy_changes/cloudwatch_log_metric_filter_policy_changes.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_security_group_changes/cloudwatch_log_metric_filter_security_group_changes.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_sign_in_without_mfa/cloudwatch_log_metric_filter_sign_in_without_mfa.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_unauthorized_api_calls/cloudwatch_log_metric_filter_unauthorized_api_calls.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Software and Configuration Checks/Industry and Regulatory Standards/CIS AWS Foundations Benchmark"
],
"ServiceName": "cloudwatch",
"SubServiceName": "",
"ServiceName": "CloudWatch",
"SubServiceName": "Logs",
"ResourceIdTemplate": "arn:partition:cloudwatch:region:account-id:certificate/resource-id",
"Severity": "medium",
"ResourceType": "AwsCloudTrailTrail",
prowler/providers/aws/services/codeartifact/codeartifact_packages_external_public_publishing_disabled/codeartifact_packages_external_public_publishing_disabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "codeartifact_packages_external_public_publishing_disabled",
"CheckTitle": "Ensure CodeArtifact internal packages do not allow external public source publishing.",
"CheckType": [],
"ServiceName": "codeartifact",
"SubServiceName": "",
"ServiceName": "CodeArtifact",
"SubServiceName": "Repositories",
"ResourceIdTemplate": "arn:partition:codeartifact:region:account-id:repository/repository-name",
"Severity": "critical",
"ResourceType": "Other",
prowler/providers/aws/services/codebuild/codebuild_project_older_90_days/codebuild_project_older_90_days.metadata.json
+2 -2
View File
@@ -6,8 +6,8 @@
"Software and Configuration Checks",
"Industry and Regulatory Standards"
],
"ServiceName": "codebuild",
"SubServiceName": "",
"ServiceName": "CodeBuild",
"SubServiceName": "Projects",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsCodeBuildProject",
prowler/providers/aws/services/codebuild/codebuild_project_user_controlled_buildspec/codebuild_project_user_controlled_buildspec.metadata.json
+2 -2
View File
@@ -6,8 +6,8 @@
"Software and Configuration Checks",
"Industry and Regulatory Standards"
],
"ServiceName": "codebuild",
"SubServiceName": "",
"ServiceName": "CodeBuild",
"SubServiceName": "Projects",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium",
"ResourceType": "AwsCodeBuildProject",
prowler/providers/aws/services/cognito/cognito_identity_pool_guest_access_disabled/cognito_identity_pool_guest_access_disabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_identity_pool_guest_access_disabled",
"CheckTitle": "Ensure Cognito Identity Pool has guest access disabled",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "IdentityPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:identitypool/identitypool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoIdentityPool",
prowler/providers/aws/services/cognito/cognito_user_pool_advanced_security_enabled/cognito_user_pool_advanced_security_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_advanced_security_enabled",
"CheckTitle": "Ensure cognito user pools has advanced security enabled with full-function",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_blocks_compromised_credentials_sign_in_attempts/cognito_user_pool_blocks_compromised_credentials_sign_in_attempts.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_blocks_compromised_credentials_sign_in_attempts",
"CheckTitle": "Ensure that advanced security features are enabled for Amazon Cognito User Pools to block sign-in by users with suspected compromised credentials",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_blocks_potential_malicious_sign_in_attempts/cognito_user_pool_blocks_potential_malicious_sign_in_attempts.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_blocks_potential_malicious_sign_in_attempts",
"CheckTitle": "Ensure that your Amazon Cognito user pool blocks potential malicious sign-in attempts",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_client_prevent_user_existence_errors/cognito_user_pool_client_prevent_user_existence_errors.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_client_prevent_user_existence_errors",
"CheckTitle": "Amazon Cognito User Pool should prevent user existence errors",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPoolClient",
prowler/providers/aws/services/cognito/cognito_user_pool_client_token_revocation_enabled/cognito_user_pool_client_token_revocation_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_client_token_revocation_enabled",
"CheckTitle": "Ensure that token revocation is enabled for Amazon Cognito User Pools",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPoolClient",
prowler/providers/aws/services/cognito/cognito_user_pool_deletion_protection_enabled/cognito_user_pool_deletion_protection_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_deletion_protection_enabled",
"CheckTitle": "Ensure cognito user pools deletion protection enabled to prevent accidental deletion",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_mfa_enabled/cognito_user_pool_mfa_enabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_mfa_enabled",
"CheckTitle": "Ensure Multi-Factor Authentication (MFA) is enabled for Amazon Cognito User Pools",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_password_policy_lowercase/cognito_user_pool_password_policy_lowercase.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_password_policy_lowercase",
"CheckTitle": "Ensure Cognito User Pool has password policy to require at least one lowercase letter",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_password_policy_minimum_length_14/cognito_user_pool_password_policy_minimum_length_14.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_password_policy_minimum_length_14",
"CheckTitle": "Ensure that the password policy for your user pools require a minimum length of 14 or greater",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_password_policy_number/cognito_user_pool_password_policy_number.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_password_policy_number",
"CheckTitle": "Ensure that the password policy for your user pool requires a number",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_password_policy_symbol/cognito_user_pool_password_policy_symbol.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_password_policy_symbol",
"CheckTitle": "Ensure that the password policy for your Amazon Cognito user pool requires at least one symbol.",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_password_policy_uppercase/cognito_user_pool_password_policy_uppercase.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_password_policy_uppercase",
"CheckTitle": "Ensure that the password policy for your user pool requires at least one uppercase letter",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_self_registration_disabled/cognito_user_pool_self_registration_disabled.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_self_registration_disabled",
"CheckTitle": "Ensure self registration is disabled for Amazon Cognito User Pools",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_temporary_password_expiration/cognito_user_pool_temporary_password_expiration.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_temporary_password_expiration",
"CheckTitle": "Ensure that the user pool has a temporary password expiration period of 7 days or less",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/cognito/cognito_user_pool_waf_acl_attached/cognito_user_pool_waf_acl_attached.metadata.json
+2 -2
View File
@@ -3,8 +3,8 @@
"CheckID": "cognito_user_pool_waf_acl_attached",
"CheckTitle": "Ensure that Amazon Cognito User Pool is associated with a WAF Web ACL",
"CheckType": [],
"ServiceName": "cognito",
"SubServiceName": "",
"ServiceName": "Cognito",
"SubServiceName": "UserPool",
"ResourceIdTemplate": "arn:aws:cognito-idp:region:account:userpool/userpool-id",
"Severity": "medium",
"ResourceType": "AwsCognitoUserPool",
prowler/providers/aws/services/config/config_recorder_all_regions_enabled/config_recorder_all_regions_enabled.metadata.json
+2 -2
View File
@@ -5,8 +5,8 @@
"CheckType": [
"Logging and Monitoring"
],
"ServiceName": "config",
"SubServiceName": "",
"ServiceName": "Config",
"SubServiceName": "Recorder",
"ResourceIdTemplate": "arn:partition:access-recorder:region:account-id:recorder/resource-id",
"Severity": "medium",
"ResourceType": "Other",
prowler/providers/aws/services/directoryservice/directoryservice_directory_log_forwarding_enabled/directoryservice_directory_log_forwarding_enabled.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "directoryservice_directory_log_forwarding_enabled",
"CheckTitle": "Directory Service monitoring with CloudWatch logs.",
"CheckType": [],
"ServiceName": "directoryservice",
"ServiceName": "DirectoryService",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:codeartifact:region:account-id:directory/directory-id",
"Severity": "medium",
prowler/providers/aws/services/directoryservice/directoryservice_directory_monitor_notifications/directoryservice_directory_monitor_notifications.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "directoryservice_directory_monitor_notifications",
"CheckTitle": "Directory Service has SNS Notifications enabled.",
"CheckType": [],
"ServiceName": "directoryservice",
"ServiceName": "DirectoryService",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:codeartifact:region:account-id:directory/directory-id",
"Severity": "medium",
prowler/providers/aws/services/directoryservice/directoryservice_directory_snapshots_limit/directoryservice_directory_snapshots_limit.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "directoryservice_directory_snapshots_limit",
"CheckTitle": "Directory Service Manual Snapshots limit reached.",
"CheckType": [],
"ServiceName": "directoryservice",
"ServiceName": "DirectoryService",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:codeartifact:region:account-id:directory/directory-id",
"Severity": "low",
prowler/providers/aws/services/directoryservice/directoryservice_ldap_certificate_expiration/directoryservice_ldap_certificate_expiration.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "directoryservice_ldap_certificate_expiration",
"CheckTitle": "Directory Service LDAP Certificates expiration.",
"CheckType": [],
"ServiceName": "directoryservice",
"ServiceName": "DirectoryService",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:codeartifact:region:account-id:directory/directory-id",
"Severity": "medium",
prowler/providers/aws/services/directoryservice/directoryservice_radius_server_security_protocol/directoryservice_radius_server_security_protocol.metadata.json
+1 -1
View File
@@ -3,7 +3,7 @@
"CheckID": "directoryservice_radius_server_security_protocol",
"CheckTitle": "Ensure Radius server in DS is using the recommended security protocol.",
"CheckType": [],
"ServiceName": "directoryservice",
"ServiceName": "DirectoryService",
"SubServiceName": "",
"ResourceIdTemplate": "arn:partition:codeartifact:region:account-id:directory/directory-id",
"Severity": "medium",

Some files were not shown because too many files have changed in this diff Show More