ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 04:51:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,321 Commits 494 Branches 213 Tags
PRWLR-4669-Roles-Page-API-UI
Commit Graph

896 Commits

Author SHA1 Message Date
Daniel Barranquero e4890f9d9d feat(dynamodb): add new check dynamodb_table_protected_by_backup_plan (#5175) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-24 12:45:12 -04:00
Hugo Pereira Brito 980b9b4770 feat(networkfirewall): change network_firewalls from list to dict (#5169) 2024-09-24 12:43:19 -04:00
Sergio Garcia f4d89066d9 feat(aws): add new check organizations_opt_out_ai_services_policy (#5152) 2024-09-24 11:37:03 -04:00
Sergio Garcia 25327d618d chore(aws): handle NotAction cases in IAM policies (#5035) 2024-09-24 08:36:11 -04:00
Sergio Garcia 3951295c0c chore(organizations): improve AWS Organizations service (#5151) 2024-09-24 08:28:21 -04:00
Mario Rodriguez Lopez 1f43e6eff9 feat(inspector2): Add more tests to inspector2_is_enabled check (#5150) 2024-09-23 15:06:34 -04:00
Daniel Barranquero aa118c05c5 feat(rds): add new check rds_cluster_non_default_port (#5113) 2024-09-23 15:05:56 -04:00
Hugo Pereira Brito cca17b9378 feat(cloudfront): add new check cloudfront_distributions_s3_origin_non_existing_bucket (#4996) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-23 12:43:03 -04:00
Pedro Martín 14ed19e3a8 fix(iam): fill resource id with inline policy entity (#5120) 2024-09-23 10:54:38 -04:00
Sergio Garcia 4badcca4f8 fix(gcp): add default project for org level checks (#5003) 2024-09-20 20:39:35 +02:00
Hugo Pereira Brito c6daa60f26 feat(elasticache): add check elasticache_redis_cluster_auth_enabled (#4830) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-20 12:18:08 -04:00
Sergio Garcia 16a251254e fix(gcp): solve errors in GCP services (#5016) 2024-09-20 11:06:57 -04:00
Sergio Garcia 751958907c fix(vpc): check all routes tables in subnet (#5081) 2024-09-20 10:13:16 -04:00
Sergio Garcia 9456c6198a chore(ssm): add trusted accounts variable to ssm check (#5005) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-09-20 09:12:48 -04:00
Sergio Garcia 45ce1a0650 fix(asff): include status extended in ASFF output (#5097) 2024-09-20 09:08:13 -04:00
Mario Rodriguez Lopez 73c96f8346 feat(sagemaker): Ensure SageMaker Endpoint Production Variants have Initial Instance Count greater than one (#5045) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 15:16:56 -04:00
Amogh Bantwal 0974c5f333 feat(slack): add more information about critical findings (#5042) 2024-09-19 14:02:09 -04:00
Hugo Pereira Brito 7db0746416 feat(guardduty): add new check guardduty_rds_protection_enabled (#5100) 2024-09-19 13:52:17 -04:00
Pedro Martín 57abe1c839 fix(accessanalyzer): refactor accessanalyzer enabled fixer test (#5026) 2024-09-19 11:09:03 -04:00
Daniel Barranquero 43183962ad feat(aws): Add new check to ensure RDS instances are not using default database engine ports (#4973) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 10:14:46 -04:00
Daniel Barranquero 87948b458e feat(guardduty): add new check guardduty_s3_protection_enabled (#5087) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-19 10:10:39 -04:00
Rubén De la Torre Vico 320a2a2c77 feat(awslambda): add new check awslambda_function_vpc_multi_az (#4816) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 09:30:04 -04:00
Mario Rodriguez Lopez 8a8c2b5097 feat(ecs): add new check ecs_task_definitions_host_networking_mode_users (#5088) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 18:28:31 -04:00
Lefteris 34679c98d6 feat(dms): new check dms_endpoint_ssl_enabled (#4968) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-09-18 17:46:56 -04:00
Hugo Pereira Brito ae794c7c32 feat(cloudfront): Ensure Cloudfront distributions have origin failover configured (#4868) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 13:26:35 -04:00
Rubén De la Torre Vico 8d23e81b1c feat(elb): add new check elb_connection_draining_enabled (#5014) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 10:49:33 -04:00
Daniel Barranquero f0cd924016 feat(neptune): add new check neptune_cluster_copy_tags_to_snapshots (#5062) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 09:23:44 -04:00
Mario Rodriguez Lopez c425e8249b fix(inspector2): Ensure Inspector2 is enabled for ECR, EC2, Lambda and Lambda Code (#5061) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 14:01:19 -04:00
Daniel Barranquero 1ece8bbcd6 feat(neptune): add new check neptune_cluster_snapshot_encrypted (#5058) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 13:16:43 -04:00
Daniel Barranquero 5fb2d7c3ce feat(neptune): add new check neptune_cluster_integration_cloudwatch_logs (#5048) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 12:20:25 -04:00
Mario Rodriguez Lopez 91bf99ca45 feat(ec2): Ensure EC2 launch templates do not assign public IPs (#4852) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-16 12:52:40 -04:00
Mario Rodriguez Lopez 3373822240 feat(ec2): EBS Volumes Should Be Covered by a Backup Plan (#5028) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 11:23:23 -04:00
Hugo Pereira Brito 7e16702b2f feat(cloudfront): add cloudfront_distributions_origin_traffic_encrypted check to ensure traffic encryption to custom origins (#4958) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 09:12:37 -04:00
Daniel Barranquero f54b64f1f8 feat(rds): add new check rds_instance_inside_vpc (#5029) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 08:56:39 -04:00
Hugo Pereira Brito 48c31a1616 feat(cloudfront): Add new cloudfront_distributions_s3_origin_access_control check to ensure OAC is configured in distributions (#4939) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-13 10:51:49 -04:00
LefterisXefteris 600a8c7804 chore(aws): add mixed regions test for s3_access_point_public_access_block (#4877) 
Co-authored-by: Lefteris Gilmaz <lefterisgilmaz@Lefteriss-MacBook-Pro.local>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 15:58:39 -04:00
Hugo Pereira Brito 64fb52fc5e feat(cloudfront): add new check cloudfront_distributions_custom_ssl_certificate (#4959) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-12 15:00:48 -04:00
Mario Rodriguez Lopez 92b6e7230d feat(ec2): Amazon EC2 Instances Should Not Use Multiple ENIs (#4935) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-12 14:29:36 -04:00
Hugo Pereira Brito cc8bc781c1 feat(elasticache): Ensure Redis replication groups have automatic failover enabled (#4853) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 12:23:15 -04:00
Hugo Pereira Brito edbe463d73 feat(cloudfront): Add new check cloudfront_distributions_default_root_object (#4938) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 10:58:24 -04:00
Sergio Garcia 8ace8c01cf chore(refactor): make Provider generation global (#4961) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-09-12 16:56:58 +02:00
Hugo Pereira Brito 8f37252676 feat(cloudfront): Ensure distributions use SNI to serve HTTPS requests (#4888) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 09:28:26 -04:00
Mario Rodriguez Lopez c0c59968bf feat(ec2): Ensure both VPN tunnels for an AWS Site-to-Site VPN connection are UP (#4948) 2024-09-12 08:26:35 -04:00
Mario Rodriguez Lopez 96e73fcb63 feat(ec2): Amazon EC2 Paravirtual Instance Types Should Not Be Used (#4922) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 15:56:20 -04:00
Pedro Martín 70a3736073 fix(awslamba): add audit config to lambda_client in tests (#4999) 2024-09-11 12:15:22 -04:00
dependabot[bot] 359a1f2c8e chore(deps): bump botocore from 1.35.15 to 1.35.16 (#4989) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 10:53:18 -04:00
Mario Rodriguez Lopez 2e4f8cbfc7 feat(ec2): Ensure not default Network Access Control Lists are used (#4917) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-11 09:55:18 -04:00
Daniel Barranquero 0ae3374e81 feat(aws): Add new check to ensure Aurora MySQL DB Clusters publish audit logs to CloudWatch logs (#4916) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 09:10:49 -04:00
Mario Rodriguez Lopez ddc088859e feat(vpc): Ensure Amazon EC2 Is Configured to Use VPC Endpoints Created for the Amazon EC2 Service (#4872) 2024-09-11 09:08:25 -04:00
Pedro Martín 1af7f658a8 refactor(azure): remove validate_arguments for CLI (#4985) 2024-09-11 13:13:06 +02:00