From efb26b0c128c145483d2f2343b1b65b7403ff38e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Rub=C3=A9n=20De=20la=20Torre=20Vico?= Date: Tue, 19 Aug 2025 16:43:00 +0200 Subject: [PATCH] chore(neptune): change RelatedUrl format to continue being a str --- .../neptune_cluster_backup_enabled.metadata.json | 7 +------ ...eptune_cluster_copy_tags_to_snapshots.metadata.json | 10 ++-------- .../neptune_cluster_deletion_protection.metadata.json | 4 +--- ...ne_cluster_iam_authentication_enabled.metadata.json | 7 +------ ...e_cluster_integration_cloudwatch_logs.metadata.json | 7 +------ .../neptune_cluster_multi_az.metadata.json | 5 +---- .../neptune_cluster_public_snapshot.metadata.json | 5 +---- .../neptune_cluster_snapshot_encrypted.metadata.json | 5 +---- .../neptune_cluster_storage_encrypted.metadata.json | 5 +---- .../neptune_cluster_uses_public_subnet.metadata.json | 5 +---- 10 files changed, 11 insertions(+), 49 deletions(-) diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json index 4629923139..dda023663d 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_backup_enabled/neptune_cluster_backup_enabled.metadata.json @@ -12,12 +12,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune DB cluster* automated backup is enabled and retention days are more than the required minimum retention period (default to 7 days).", "Risk": "**Insufficient backup retention** reduces the ability to recover from data corruption, accidental deletion, or ransomware, impacting **availability** and **integrity**.\n\n- Prevents point-in-time recovery to required dates\n- Increases downtime, irreversible data loss, and compliance violations", - "RelatedUrl": [ - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-5", - "https://trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/sufficient-backup-retention-period.html", - "https://support.icompaas.com/support/solutions/articles/62000233327-check-for-neptune-clusters-backup-retention-period", - "https://asecure.cloud/a/p_configrule_neptune_cluster_backup_retention_check/" - ], + "RelatedUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-5;https://trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/sufficient-backup-retention-period.html;https://support.icompaas.com/support/solutions/articles/62000233327-check-for-neptune-clusters-backup-retention-period;https://asecure.cloud/a/p_configrule_neptune_cluster_backup_retention_check/", "Remediation": { "Code": { "CLI": "aws neptune modify-db-cluster --db-cluster-identifier --backup-retention-period 7 --apply-immediately", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json index 6621fe50df..95ddc97aac 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_copy_tags_to_snapshots/neptune_cluster_copy_tags_to_snapshots.metadata.json @@ -12,12 +12,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune DB cluster* is configured to copy all tags to snapshots when snapshots are created.", "Risk": "**Missing snapshot tags** weakens governance across confidentiality, integrity, and availability.\n\n- **Access control**: tag-based IAM conditions may not apply to snapshots, enabling unauthorized restore or copy\n- **Operational**: recovery, retention, and cost tracking can fail due to unidentifiable or orphaned snapshots", - "RelatedUrl": [ - "https://docs.aws.amazon.com/neptune/latest/userguide/tagging.html#tagging-overview", - "https://www.cloudanix.com/docs/aws/audit/rdsmonitoring/rules/neptune_cluster_copy_tags_to_snapshot_enabled", - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-8", - "https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-60", - ], + "RelatedUrl": "https://docs.aws.amazon.com/neptune/latest/userguide/tagging.html#tagging-overview;https://www.cloudanix.com/docs/aws/audit/rdsmonitoring/rules/neptune_cluster_copy_tags_to_snapshot_enabled;https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-8;https://docs.prismacloud.io/en/enterprise-edition/policy-reference/aws-policies/aws-general-policies/bc-aws-2-60", "Remediation": { "Code": { "CLI": "aws neptune modify-db-cluster --db-cluster-identifier --copy-tags-to-snapshot --apply-immediately", @@ -30,8 +25,7 @@ "Url": "" } }, - "Categories": [ - ], + "Categories": [], "DependsOn": [], "RelatedTo": [], "Notes": "" diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json index f85baa7cd6..d0b03792cb 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_deletion_protection/neptune_cluster_deletion_protection.metadata.json @@ -14,9 +14,7 @@ "ResourceType": "Other", "Description": "*Neptune DB cluster* has **deletion protection** enabled.", "Risk": "Absence of **deletion protection** weakens *availability* and *integrity*: clusters can be removed by accidental admin actions, rogue automation, or compromised credentials.\n\nCluster deletion causes immediate service outage, potential permanent data loss, and extended recovery time if backups or restores are insufficient.", - "RelatedUrl": [ - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-4", - ], + "RelatedUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-4", "Remediation": { "Code": { "CLI": "aws neptune modify-db-cluster --db-cluster-identifier --deletion-protection --apply-immediately", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json index b5ed09a25a..051bd03cdf 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_iam_authentication_enabled/neptune_cluster_iam_authentication_enabled.metadata.json @@ -14,12 +14,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune DB clusters* are evaluated for **IAM database authentication**. \n\nIf this setting is enabled, the cluster supports IAM-based authentication.\nIf disabled, the cluster requires traditional database credentials instead.", "Risk": "**Disabled IAM database authentication** weakens confidentiality and integrity of the database.\n\n- Static or embedded DB credentials can be stolen or reused, enabling unauthorized queries and data exfiltration\n- Attackers may bypass centralized access controls, escalate privileges, and move laterally without IAM-based audit trails", - "RelatedUrl": [ - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-7", - "https://docs.aws.amazon.com/config/latest/developerguide/neptune-cluster-iam-database-authentication.html", - "https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/iam-db-authentication.html#", - "https://hub.steampipe.io/plugins/turbot/terraform/queries/neptune/neptune_cluster_iam_authentication_enabled" - ], + "RelatedUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-7;https://docs.aws.amazon.com/config/latest/developerguide/neptune-cluster-iam-database-authentication.html;https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/iam-db-authentication.html#;https://hub.steampipe.io/plugins/turbot/terraform/queries/neptune/neptune_cluster_iam_authentication_enabled", "Remediation": { "Code": { "CLI": "aws neptune modify-db-cluster --db-cluster-identifier --enable-iam-database-authentication --apply-immediately", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json index 39b23f9c93..676aa9cf08 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_integration_cloudwatch_logs/neptune_cluster_integration_cloudwatch_logs.metadata.json @@ -13,12 +13,7 @@ "ResourceType": "Other", "Description": "*Neptune DB cluster* is inspected for CloudWatch export of **audit** events. The finding indicates whether the cluster publishes `audit` logs to CloudWatch; a *FAIL* means the `audit` export is not enabled and audit records are not being forwarded to CloudWatch for centralized logging and review.", "Risk": "Missing **audit logs** reduces **detectability** and **accountability**: \n\n- investigators cannot reconstruct queries, client origins, or timeline\n- unauthorized queries, data exfiltration, or privilege misuse may go undetected\n\nThis degrades confidentiality and integrity and slows incident response.", - "RelatedUrl": [ - "https://docs.aws.amazon.com/neptune/latest/userguide/auditing.html", - "https://docs.aws.amazon.com/neptune/latest/userguide/cloudwatch-logs.html", - "https://cloudanix.com/docs/aws/audit/rdsmonitoring/rules/neptune_cluster_cloudwatch_log_export_enabled_remediation", - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-2", - ], + "RelatedUrl": "https://docs.aws.amazon.com/neptune/latest/userguide/auditing.html;https://docs.aws.amazon.com/neptune/latest/userguide/cloudwatch-logs.html;https://cloudanix.com/docs/aws/audit/rdsmonitoring/rules/neptune_cluster_cloudwatch_log_export_enabled_remediation;https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-2", "Remediation": { "Code": { "CLI": "aws neptune modify-db-cluster --db-cluster-identifier --cloudwatch-logs-export-configuration '{\"EnableLogTypes\":[\"audit\"]}'", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json index 571128828f..423787fad1 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_multi_az/neptune_cluster_multi_az.metadata.json @@ -14,10 +14,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Amazon Neptune DB clusters* are evaluated for `Multi-AZ` deployment by checking whether the cluster has read-replica instances distributed across multiple Availability Zones.\n\nA failing result indicates the cluster is deployed in a single AZ and lacks read-replicas that enable automatic promotion and cross‑AZ failover.", "Risk": "**Single‑AZ deployment** creates a clear availability single point of failure.\n\n- **Availability**: AZ outage or maintenance can cause prolonged downtime until the primary is rebuilt.\n- **Integrity/Recovery**: Manual recovery increases risk of configuration errors and longer RTOs, impacting operations and compliance.", - "RelatedUrl": [ - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-9", - "https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/multi-az.html#", - ], + "RelatedUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-9;https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/Neptune/multi-az.html#", "Remediation": { "Code": { "CLI": "", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json index 39a06ff5b9..6d783a8743 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_public_snapshot/neptune_cluster_public_snapshot.metadata.json @@ -14,10 +14,7 @@ "ResourceType": "AwsRdsDbClusterSnapshot", "Description": "*Neptune DB manual cluster snapshot* is evaluated to determine if its restore attributes allow access to *all AWS accounts* (public).\n\nA **FAIL** means the snapshot is publicly shared and can be copied or restored by any AWS account; **PASS** means it is not shared publicly.", "Risk": "**Public snapshots** compromise confidentiality of stored data and metadata.\n\nAttackers or third parties can:\n- Copy or restore snapshots to external accounts.\n- Access sensitive data contained in the snapshot.", - "RelatedUrl": [ - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-3", - "https://docs.aws.amazon.com/config/latest/developerguide/neptune-cluster-snapshot-public-prohibited.html", - ], + "RelatedUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-3;https://docs.aws.amazon.com/config/latest/developerguide/neptune-cluster-snapshot-public-prohibited.html", "Remediation": { "Code": { "CLI": "aws neptune modify-db-cluster-snapshot-attribute --db-cluster-snapshot-identifier --attribute-name restore --values-to-remove all", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json index e042422d22..4c4afe3796 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_snapshot_encrypted/neptune_cluster_snapshot_encrypted.metadata.json @@ -14,10 +14,7 @@ "ResourceType": "AwsRdsDbClusterSnapshot", "Description": "*Neptune DB cluster snapshot* is encryoted at rest. The evaluation looks at whether each snapshot’s encrypted attribute is enabled, confirming that the data is protected while stored.", "Risk": "**Unencrypted Neptune snapshots** undermine data confidentiality. If accessed or shared due to compromised credentials or misconfiguration, attackers can restore or download snapshot contents, enabling **data exfiltration**, and exposure of sensitive records. This weakens overall data protection posture.", - "RelatedUrl": [ - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-6", -"https://docs.aws.amazon.com/neptune/latest/userguide/backup-restore-share-snapshot.html", - ], + "RelatedUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-6;https://docs.aws.amazon.com/neptune/latest/userguide/backup-restore-share-snapshot.html", "Remediation": { "Code": { "CLI": "aws rds copy-db-cluster-snapshot --source-db-cluster-snapshot-identifier --target-db-cluster-snapshot-identifier --kms-key-id ", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json index e628094ce0..65f358eb3b 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_storage_encrypted/neptune_cluster_storage_encrypted.metadata.json @@ -13,10 +13,7 @@ "ResourceType": "Other", "Description": "*Neptune DB cluster* is evaluated for **encryption at rest**. Indicating the cluster's underlying storage is not encrypted.", "Risk": "**Unencrypted Neptune storage** reduces confidentiality of stored data and metadata and increases attack surface.\n\nPossible impacts:\n- Unauthorized access or data exfiltration from underlying volumes or snapshots\n- Greater blast radius from leaked or shared snapshots", - "RelatedUrl": [ - "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-1", - "https://docs.aws.amazon.com/neptune/latest/userguide/encrypt.html", - ], + "RelatedUrl": "https://docs.aws.amazon.com/securityhub/latest/userguide/neptune-controls.html#neptune-1;https://docs.aws.amazon.com/neptune/latest/userguide/encrypt.html", "Remediation": { "Code": { "CLI": "", diff --git a/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json b/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json index def33f5d2d..2f079f9b63 100644 --- a/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json +++ b/prowler/providers/aws/services/neptune/neptune_cluster_uses_public_subnet/neptune_cluster_uses_public_subnet.metadata.json @@ -13,10 +13,7 @@ "ResourceType": "AwsRdsDbCluster", "Description": "*Neptune cluster* is associated with one or more **public subnets**.", "Risk": "A *Neptune cluster* in a **public subnet** increases exposure across the CIA triad:\n\n- **Confidentiality**: direct access enables credential attacks and data exfiltration\n- **Integrity**: attackers may modify or inject graph data\n- **Availability**: public reachability allows DDoS or remote exploitation, causing downtime", - "RelatedUrl": [ - "https://docs.aws.amazon.com/neptune/latest/userguide/get-started-vpc.html", - "https://docs.aws.amazon.com/neptune/latest/userguide/feature-overview-endpoints.html", - ], + "RelatedUrl": "https://docs.aws.amazon.com/neptune/latest/userguide/get-started-vpc.html;https://docs.aws.amazon.com/neptune/latest/userguide/feature-overview-endpoints.html", "Remediation": { "Code": { "CLI": "",