 Jonathan Nguyen
|
821fe43efd
|
feat(iam): scope AgentCore PassRole and workload token grants, and flag unbound service trust (#12664)
|
2026-09-01 17:02:05 +02:00 |
|
|
Daniel Barranquero
|
a19fd70001
|
feat(aws): add pathfinding.cloud privilege-escalation coverage (#12237)
|
2026-08-04 08:59:52 +02:00 |
|
|
Hugo Pereira Brito
|
c6dae3a711
|
chore: remove __init__.py from test directories (#10582)
|
2026-07-13 15:09:42 +01:00 |
|
|
Sergio Garcia
|
1e1c1c018b
|
feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726)
|
2026-07-01 12:49:34 +02:00 |
|
|
Hugo Pereira Brito
|
739be07077
|
chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150)
|
2026-05-14 08:10:20 +01:00 |
|
|
Hugo Pereira BritoandHugo P.Brito
|
0b26c1a39c
|
feat(aws): add iam_user_access_not_stale_to_sagemaker security check (#11000)
Co-authored-by: Hugo P.Brito <hugopbrito@Mac.home>
|
2026-05-11 16:34:18 +02:00 |
|
|
Daniel BarranqueroandHugo P.Brito
|
d1ab8b8ae5
|
feat(aws): add iam_policy_no_wildcard_marketplace_subscribe and iam_inline_policy_no_wildcard_marketplace_subscribe checks (#10525)
Co-authored-by: Hugo P.Brito <hugopbrit@gmail.com>
|
2026-04-14 12:08:40 +02:00 |
|
|
Daniel Barranquero
|
65e9593b41
|
feat(aws): add bedrock_access_not_stale security check (#10536)
|
2026-04-14 11:20:40 +02:00 |
|
|
Kay AgahdandClaude Opus 4.6
|
89fe867944
|
fix(aws): recognize service-specific condition keys as restrictive in is_policy_public (#10600)
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
|
2026-04-08 10:55:55 +02:00 |
|
|
Eran CohenandDaniel Barranquero
|
0b461233c1
|
feat(iam): Add trusted IP configurable option to reduce false positives in 'opensearch' check (#8631)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-03-10 12:12:54 +01:00 |
|
|
mohd4adilandDaniel Barranquero
|
e97e31c7ca
|
chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
|
2026-01-29 09:13:34 +01:00 |
|
|
|
e246c0cfd7
|
fix(aws): false negative in iam_role_cross_service_confused_deputy_prevention (#9213)
Co-authored-by: shaun <shaun@snotra.cloud>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-11-11 17:39:16 -05:00 |
|
|
|
2a4b62527a
|
fix(tests_iam): AWS managed policies are isolated (#8609)
Co-authored-by: MustafaAamir <mustafa@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-09-30 13:44:03 +05:45 |
|
|
Andoni Alonso
|
2f5fce41dc
|
feat(iam): remove standalone iam:PassRole from privesc detection and add missing patterns (#8530)
|
2025-08-18 11:35:14 +02:00 |
|
|
Andoni Alonso
|
39e4d20b24
|
feat(iam): add Bedrock AgentCore privilege escalation combo (#8526)
|
2025-08-15 13:25:15 +02:00 |
|
|
Andoni AlonsoandMrCloudSec
|
04749c1da1
|
fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-07-24 18:03:30 +08:00 |
|
|
Sergio Garcia
|
ca86aeb1d7
|
feat(aws): new check bedrock_api_key_no_administrative_privileges (#8321)
|
2025-07-22 22:06:17 +08:00 |
|
|
Kay AgahdandMrCloudSec
|
bf0013dae3
|
fix(aws): make is_service_role more restrictive to avoid false positives (#8274)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-07-15 22:02:09 +08:00 |
|
|
Kay AgahdandSergio Garcia
|
f5ecae6da1
|
fix(iam): detect wildcarded ARNs in sts:AssumeRole policy resources (#8164)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-07-03 23:09:48 +08:00 |
|
|
Andoni AlonsoandSergio Garcia
|
dfd5c9aee7
|
feat(aws): add check to ensure Codebuild Github projects are only use allowed Github orgs (#7595)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-06-18 00:17:18 +08:00 |
|
|
Andoni Alonso
|
bfafa518b1
|
feat(aws): avoid bypassing IAM check using wildcards (#7708)
|
2025-06-16 07:42:01 +02:00 |
|
|
Andoni Alonso
|
f5f1fce779
|
fix(iam): check always if root credentials are present (#7967)
|
2025-06-12 17:48:09 +02:00 |
|
|
Ogonna IwunzeandMrCloudSec
|
f5a2695c3b
|
fix(check): Add support for condition with restriction on SNS endpoint (#7750)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-05-15 16:00:00 +02:00 |
|
|
Sergio Garcia
|
e68aa62f94
|
fix(iam): handle none SAML Providers (#7359)
|
2025-03-25 09:24:32 +01:00 |
|
|
Pepe Fagoaga
|
137365a670
|
chore(poetry): Upgrade to v2 (#7112)
|
2025-03-12 17:28:34 +05:45 |
|
|
Sergio Garcia
|
b861d97ad4
|
fix(report): remove invalid resources in report (#6852)
|
2025-02-19 21:27:52 +05:45 |
|
|
dependabot[bot]andMrCloudSec
|
374078683b
|
chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-01-21 13:56:06 -05:00 |
|
|
Sergio Garcia
|
989ccf4ae3
|
fix(iam): set unique resource id for each user access key (#6128)
|
2024-12-11 09:13:49 +01:00 |
|
|
Pedro MartínandSergio Garcia
|
b06e549d81
|
refactor(arn): refactor arn for unknown resources (#5712)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-19 16:21:43 -04:00 |
|
|
Rubén De la Torre Vico
|
e33b081dc6
|
chore(iam): add exception for public policy in EKS service (#4759)
|
2024-11-19 09:42:56 -04:00 |
|
|
Sergio Garcia
|
c69571abcd
|
feat(aws): add new check iam_root_credentials_management_enabled (#5801)
|
2024-11-18 16:59:35 +01:00 |
|
|
Sergio Garcia
|
be523c11c8
|
fix(aws): do not flag cross-service confused deputy as public (#5593)
|
2024-11-04 15:51:52 +01:00 |
|
|
Kay Agahd
|
ec69d8073a
|
fix(aws): findings in IAM policies were not reported (#5560)
|
2024-10-29 14:29:29 -05:00 |
|
|
Mario Rodriguez LopezandSergio
|
415c319208
|
feat(iam): add new check iam_policy_cloudshell_admin_not_attached (#5437)
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-10-21 07:41:58 -07:00 |
|
|
Sergio Garcia
|
6e3c008a89
|
chore(aws): improve logic for determining if resources are publicly accessible (#5195)
|
2024-10-16 12:10:38 -04:00 |
|
|
Sergio Garcia
|
54280ee2dc
|
fix(iam): update AWS Support policy (#5399)
|
2024-10-14 13:58:42 -04:00 |
|
|
Sergio Garcia
|
3ace44979a
|
chore(aws): add more cases to public IAM resource policies (#5336)
|
2024-10-11 10:27:23 -04:00 |
|
|
Rubén De la Torre VicoandSergio
|
8bb3bd0dcb
|
chore(iam): add tags to missing checks report (#5280)
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-10-03 13:47:10 -04:00 |
|
|
Sergio GarciaandRubén De la Torre Vico
|
0a2b7cf152
|
chore(aws): improve IAM Resource Policy public logic (#5067)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2024-09-25 08:33:41 -04:00 |
|
|
Sergio Garcia
|
25327d618d
|
chore(aws): handle NotAction cases in IAM policies (#5035)
|
2024-09-24 08:36:11 -04:00 |
|
|
Pedro Martín
|
14ed19e3a8
|
fix(iam): fill resource id with inline policy entity (#5120)
|
2024-09-23 10:54:38 -04:00 |
|
|
Rubén De la Torre Vico
|
9797c11152
|
chore(prowler): change all methods from services from format double underscore to single underscore (#4910)
|
2024-09-02 10:07:21 +02:00 |
|
|
Rubén De la Torre VicoandSergio Garcia
|
dec3e652c5
|
feat(IAM): add new check iam_group_administrator_access_policy (#4831)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
|
2024-08-22 10:14:45 -04:00 |
|
|
Sergio Garcia
|
903f9c576f
|
chore(test): improve iam_root_hardware_mfa_enabled tests (#4833)
|
2024-08-22 08:08:25 -04:00 |
|
|
Rubén De la Torre Vico
|
78042063cb
|
feat(iam): add new check to ensure user does not have policies with admin access (#4802)
|
2024-08-20 11:08:51 -04:00 |
|
|
Sergio Garcia
|
e6581255c2
|
fix(iam): update logic of Root Hardware MFA check (#4726)
|
2024-08-16 11:49:30 -04:00 |
|
|
Pedro MartínandPepe Fagoaga
|
8f2b39b3ce
|
fix(iam): handle no arn serial numbers for MFA devices (#4697)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2024-08-09 12:57:34 -04:00 |
|
|
Pedro Martín
|
96a49e97d2
|
fix(iam_avoid_root_usage): change timestamp format (#4446)
|
2024-07-15 17:10:49 +02:00 |
|
|
Sergio Garcia
|
bf83f38c89
|
chore(html): add HTML class (#4360)
|
2024-07-04 13:28:09 -04:00 |
|
|
Rubén De la Torre Vico
|
47a37c7d0d
|
chore(iam): Improve status extended adding the resource type (#4378)
|
2024-07-04 09:32:35 -04:00 |
|