e3e038127f
license changes for checks
2018-04-09 15:09:30 -04:00
eaaf51813b
Merge pull request #198 from sidewinder12s/patch-2
...
Update all CIS document links to AWS version.
2018-04-05 00:43:34 -04:00
1da206cb90
Update all CIS document links to AWS version.
2018-04-04 21:39:57 -07:00
cd41766e22
added checkid to every check and group title
2018-03-29 10:36:46 -04:00
7cde6f15e7
removed some spaces from output
2018-03-28 14:24:37 -04:00
eaf0a6bf09
added command to save report in S3
2018-03-28 13:58:07 -04:00
058a8d5b33
changed extra742 to FAIL if not default value
2018-03-28 13:51:32 -04:00
fa474876e9
changed extra742 to FAIL if not default value
2018-03-28 12:51:13 -04:00
91b8a832ec
hide banner on csv output for group mode
2018-03-28 12:32:51 -04:00
9a035b1a94
updated check extra724 INFO instead of FAIL if enabled
2018-03-28 11:12:59 -04:00
07b166baa9
changed outputs to the new ones
2018-03-28 11:07:46 -04:00
1acc6e45d0
added check extra724 Certificate Transparency
2018-03-28 10:54:59 -04:00
db8b5a4d0b
added check extra724 Certificate Transparency
2018-03-28 10:50:56 -04:00
919c530155
added check extra724 Certificate Transparency
2018-03-28 10:49:39 -04:00
94e7faa1c1
added check extra724 Certificate Transparency
2018-03-28 10:49:00 -04:00
f130c899e5
added check extra724 Certificate Transparency
2018-03-28 10:44:36 -04:00
1c0229e1a3
added new CHECKLIST.md file
2018-03-27 18:43:58 -04:00
39b597ee47
updated README and usage
2018-03-27 18:11:13 -04:00
a535e66d06
updated README and usage
2018-03-27 18:09:02 -04:00
70483ba81b
updated README and usage
2018-03-27 18:07:03 -04:00
ef9b7cef1a
clean up extras
2018-03-26 23:01:52 -04:00
2648067ac6
fully functional beta 2.0
2018-03-26 22:54:21 -04:00
6647702d90
added support of -g groups
2018-03-26 21:32:15 -04:00
7866d42df9
changed output to PASS and FAIL
2018-03-26 15:40:40 -04:00
da0f266944
first semi functional v2
2018-03-23 19:26:10 -04:00
a2806ad86b
populated checks
2018-03-23 10:05:20 -04:00
a98fdf7679
create check files
2018-03-20 23:08:35 -04:00
a21bff31a5
create check files
2018-03-20 22:59:34 -04:00
0a9e50ce53
Merge pull request #194 from mbode/check33_bugfix
...
Fix check 3.3
2018-03-20 11:54:34 -04:00
2172f60a18
Reintroduce lost $-sign in check 3.3
2018-03-20 16:50:37 +01:00
2f761f62a6
new folder structure
2018-03-20 10:56:37 -04:00
6a4127dc40
tests v2
2018-03-19 14:55:25 -04:00
4901561fec
tests v2
2018-03-19 14:54:05 -04:00
68d12ae72f
fix issue #193
2018-03-19 12:24:59 -04:00
01a88e6c89
move prowler-policy to iam folder
2018-03-19 11:23:13 -04:00
0e43a05d16
fix issue #184
2018-03-19 11:11:45 -04:00
a670716625
preparing new structure
2018-03-19 11:10:10 -04:00
f411223fa8
added extra723 and clean up
2018-03-19 10:55:35 -04:00
c96e2be257
Merge pull request #192 from toniblyx/master
...
update devel branch
2018-03-19 10:45:40 -04:00
d806c86e90
Merge pull request #188 from ahhh/patch-1
...
Update prowler output text for extra717
2018-03-06 13:21:47 -05:00
5156376df6
Update prowler
2018-03-06 09:58:12 -08:00
e714a20ae3
Merge pull request #187 from rtkjbillo/update_cloudwatch_logs_permissions
...
Update IAM permissions needed for CloudWatch Logs
2018-03-05 16:33:38 -05:00
c20f8878da
Update IAM permissions needed for CloudWatch Logs
...
According to the AWS documentation for the CloudWatch Logs permissions reference [1], the IAM policy to permit or deny CloudWatch Logs actions uses the `logs:` prefix rather than `cloudwatchlogs:`. This commit updates the policy additions JSON file as well as the README to reflect this change.
I confirmed this having assumed an appropriate role in an AWS account, then executing the AWS CLI command `aws logs describe-log-groups`; with the `cloudwatchlogs:` prefix an AccessDeniedException was returned to the client.
[1] https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/permissions-reference-cwl.html
2018-03-05 16:01:42 -05:00
6ccd1020e3
Merge pull request #180 from subramani95/patch-4
...
Improving check41 and check42
2018-02-26 23:23:29 -05:00
fa03991edd
Merge pull request #181 from doshitan/improve-check28
...
Improve check28
2018-02-22 11:38:26 -08:00
5fdedd082b
Merge pull request #182 from doshitan/better-shebang
...
Use `#!/usr/bin/env bash` instead of hard coding `#!/bin/bash`
2018-02-22 11:26:27 -08:00
d7f4f99f15
Improve check28
...
The CIS benchmarks state that only customer managed CMKs should be checked, so
exclude all AWS managed CMKs, not just the one for ACM.
Also fix up some formatting and dead code.
2018-02-22 12:32:36 -06:00
1295c5ecff
Use #!/usr/bin/env bash instead of hard coding #!/bin/bash
...
Better cross-platform support.
2018-02-22 12:16:12 -06:00
65c417a357
Improving check41 and check42
...
Improved check41 and check42 to ensure no inbound rule exists that has:-
# port no 22 and source of 0.0.0.0/0
# port no in the range (i.e 0-1024) and source of 0.0.0.0/0
# port value of all and source of 0.0.0.0/0
2018-02-21 02:48:20 +05:30
111615bff4
Merge pull request #177 from toniblyx/master
...
New checks and improvements
2018-02-16 14:13:00 -05:00
Toni de la Fuente