13c95ba131
chore(deps): bump trufflesecurity/trufflehog from 3.81.10 to 3.82.1 ( #5025 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-13 08:59:06 -04:00
600a8c7804
chore(aws): add mixed regions test for s3_access_point_public_access_block ( #4877 )
...
Co-authored-by: Lefteris Gilmaz <lefterisgilmaz@Lefteriss-MacBook-Pro.local >
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-12 15:58:39 -04:00
64fb52fc5e
feat(cloudfront): add new check cloudfront_distributions_custom_ssl_certificate ( #4959 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-09-12 15:00:48 -04:00
92b6e7230d
feat(ec2): Amazon EC2 Instances Should Not Use Multiple ENIs ( #4935 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-09-12 14:29:36 -04:00
cc8bc781c1
feat(elasticache): Ensure Redis replication groups have automatic failover enabled ( #4853 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-12 12:23:15 -04:00
edbe463d73
feat(cloudfront): Add new check cloudfront_distributions_default_root_object ( #4938 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-12 10:58:24 -04:00
8ace8c01cf
chore(refactor): make Provider generation global ( #4961 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
2024-09-12 16:56:58 +02:00
8f37252676
feat(cloudfront): Ensure distributions use SNI to serve HTTPS requests ( #4888 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-12 09:28:26 -04:00
1cef6f0db7
feat(Tasks): PRWLR-4826 add task_args to serializer ( #41 )
2024-09-12 09:07:08 -04:00
c0c59968bf
feat(ec2): Ensure both VPN tunnels for an AWS Site-to-Site VPN connection are UP ( #4948 )
2024-09-12 08:26:35 -04:00
9f5a909be3
chore(deps): bump msgraph-sdk from 1.6.0 to 1.7.0 ( #5013 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 14:10:50 +02:00
90975bdadc
chore(deps): bump pytz from 2024.1 to 2024.2 ( #5012 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 11:32:58 +02:00
7d1fad9eb7
chore(deps): bump botocore from 1.35.16 to 1.35.17 ( #5011 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 10:50:07 +02:00
983c79ad3b
chore(deps): bump boto3 from 1.35.15 to 1.35.16 ( #5010 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-12 09:16:53 +02:00
96e73fcb63
feat(ec2): Amazon EC2 Paravirtual Instance Types Should Not Be Used ( #4922 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-11 15:56:20 -04:00
70a3736073
fix(awslamba): add audit config to lambda_client in tests ( #4999 )
2024-09-11 12:15:22 -04:00
f7645e8f25
feat(Resources): add the /resources endpoint ( #34 )
...
* fix(Resources): add basic Resource MVC
* fix(Resources): implement many-to-many tags via through table
* fix(Resources): tsvector & migration
migration needs work, need to create a custom
django migration field to build the GENERATED ALWAYS
column.
Without it, django will complain about the ts column
not exisiting when we try to create an index.
* test(Resources): add tests for /resources views
* fix(Resources): get basic test cases to pass
need to work on tsvector column
and filtering by provider columns like alias, name
* fix(Resources): provide way to get tags as dict
not a list of ResourceTag models
* fix(Resources): annotate with return type
* fix(Resources): rename search field to not conflict with filters
* fix(Resources): filter by provider.id
* fix(Resources): remove filter and sort by provider
must use provider_id first
* fix(Resources): test adding, clearing tags
* fix(Scans): filter by provider_id
* fix(Resources): remove FIXME comments
* fix(Resources): filter and search on tags
* fix(Resources): full text search
* fix(Resources): full text search to include both resources and tags
and get rid of the distinct() query
* fix(Resources): document text search a bit more
* fix(Resources): remove TODO comments
* fix(Resources): move Resource migrations into 0001_initital
* fix(Config): revert to match main
* fix(Resources): use Django's default query builder for full text search
* Apply suggestions from code review
Mostly formatting changes
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
* fix(Resources): just use text search
instead of guessing at allowed split characters for each provider
* fix(Resources): remove unused tests
these cases are covered in parameterized lists
* fix(Resources): set a read-only RLS policy
* fix(Resources): rename add_tags to be upsert_or_delete_tags
* fix(Resources): include primary key on through table
django query builder doesn't like tables without primary keys
* fix(Resources): default xx_at filters to date
instead of date time
* docs(Resources): describe what a Resource is
in API docs
* chore(Resources): rename file to match others
---------
Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com >
2024-09-11 18:04:34 +02:00
1e8e8ba65c
fix(iam-gcp): add getters in iam_service for gcp ( #4998 )
2024-09-11 11:01:58 -04:00
0adb8c142b
Merge pull request #56 from prowler-cloud/PRWLR-4776-Implementing-check-connection-real-CASE
...
Starting implementing check connection and style tweaks for the Provider's table
2024-09-11 16:54:24 +02:00
359a1f2c8e
chore(deps): bump botocore from 1.35.15 to 1.35.16 ( #4989 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-11 10:53:18 -04:00
e7eb57375e
feat: the search debounce is working now as expected
2024-09-11 16:49:43 +02:00
2e4f8cbfc7
feat(ec2): Ensure not default Network Access Control Lists are used ( #4917 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-09-11 09:55:18 -04:00
482aee0d9d
chore(regions_update): Changes in regions for AWS services ( #4995 )
...
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com >
2024-09-11 09:52:28 -04:00
0ae3374e81
feat(aws): Add new check to ensure Aurora MySQL DB Clusters publish audit logs to CloudWatch logs ( #4916 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-11 09:10:49 -04:00
ddc088859e
feat(vpc): Ensure Amazon EC2 Is Configured to Use VPC Endpoints Created for the Amazon EC2 Service ( #4872 )
2024-09-11 09:08:25 -04:00
d264a16065
Merge branch 'main' into PRWLR-4776-Implementing-check-connection-real-CASE
2024-09-11 15:04:23 +02:00
67f572285b
refactor: tweaks styles for providers table
2024-09-11 15:03:51 +02:00
5e3da2d687
chore(deps): bump google-api-python-client from 2.144.0 to 2.145.0 ( #4990 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-11 13:28:13 +02:00
1af7f658a8
refactor(azure): remove validate_arguments for CLI ( #4985 )
2024-09-11 13:13:06 +02:00
d5d76e248f
Merge pull request #55 from prowler-cloud/update/env-varNames
...
update: update env var names
2024-09-11 09:06:42 +02:00
67fcc8ac67
update: update env var names
2024-09-11 09:05:37 +02:00
ceca5dd0c4
update: update env var names
2024-09-11 09:03:12 +02:00
1298620da8
chore(deps-dev): bump pytest from 8.3.2 to 8.3.3 ( #4991 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-11 08:59:46 +02:00
75c48cfaa3
refactor(cloudfront): replace origins dictionary with custom Origin class ( #4981 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-10 16:04:57 -04:00
3406a07ae5
fix(audit): solve resources audit ( #4983 )
2024-09-10 15:41:59 -04:00
cc9e1c5af8
chore(dependencies): update boto3 and botocore packages ( #4976 )
2024-09-10 15:36:23 -04:00
0343f01cca
chore(README): update summary table ( #4984 )
2024-09-10 21:17:33 +02:00
cad7985c28
chore(deps-dev): bump moto from 5.0.13 to 5.0.14 ( #4965 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-10 14:36:21 -04:00
71030f6f42
fix(main): logic for resource_tag and resource_arn usage ( #4979 )
...
Co-authored-by: Sergio <sergio@prowler.com >
2024-09-10 14:07:07 -04:00
6883467d2f
feat(aws): Add new check to ensure RDS DB clusters are encrypted at rest ( #4931 )
2024-09-10 13:40:08 -04:00
2c6944176f
fix(rds): handle new rds arn template function syntax ( #4980 )
2024-09-10 13:24:19 -04:00
2420aedde9
chore(deps): bump cryptography from 43.0.0 to 43.0.1 ( #40 )
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 43.0.0 to 43.0.1.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/43.0.0...43.0.1 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-10 18:19:21 +02:00
1ef15f0b24
feat(aws): Add new check to ensure RDS event notification subscriptions are configured for critical database parameter group events ( #4907 )
2024-09-10 11:10:57 -04:00
f5b0583df5
chore(deps-dev): bump pytest-env from 1.1.3 to 1.1.4 ( #4966 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-10 10:17:36 -04:00
db225e9d2a
feat(aws): Add new RDS check to ensure db instances are protected by a backup plan ( #4879 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2024-09-10 10:14:40 -04:00
c9ae9df87f
feat(aws): Add new check to ensure RDS event notification subscriptions are configured for critical database instance events ( #4891 )
2024-09-10 09:26:15 -04:00
159a090c02
feat(aws): Add new check to ensure RDS event notification subscriptions are configured for critical cluster events ( #4887 )
2024-09-10 09:25:42 -04:00
605c6770e5
fix(rds): Modify RDS Event Notification Subscriptions for Security Groups Events check ( #4969 )
2024-09-10 09:13:46 -04:00
5163bcb72c
chore: add new component for provider ID
2024-09-10 14:13:08 +02:00
ae950484ed
fix(aws): make intersection to retrieve checks to execute ( #4970 )
2024-09-10 13:24:35 +02:00
dependabot[bot]