ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-22 11:24:17 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,995 Commits 581 Branches 225 Tags
11dc0aa5b2b9b04b6bbe2e206881201ac0170260
Commit Graph
722 Commits
Author SHA1 Message Date
Nacho Rivera 11dc0aa5b2 feat(extra7111): Exception handling (#1408) 2022-10-17 12:51:09 +02:00
Sergio Garcia 8bddb9b265 fix(extra740): Remove additional info and fix max_items (#1405) 2022-10-14 11:37:31 +02:00
Sergio Garcia 689e292585 fix(region_bugs): Remove duplicate outputs (#1390) 2022-10-13 13:18:37 +02:00
Kay Agahd 4b29293362 fix(check_extra77): Add missing check_resource_id to the report (#1402) 2022-10-13 09:53:31 +02:00
Nacho RiveraandPepe Fagoaga 11cc8e998b fix(checks): Handle checks not returning result (#1383) 
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-10-05 13:50:49 +02:00
Nacho RiveraandPepe Fagoaga 4a71739c56 Prwlr 879 fix prowler 2 x checks (#1380) 
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-10-03 10:19:02 +02:00
Ignacio Dominguezandsergargar 1f0c210926 feat(extra7195): Added check for dependency confusion in codeartifact (#1329) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-08-31 09:49:50 +02:00
JArmandoGandSergio Garcia dd64c7d226 fix(check120): correct AWS support policy name (#1328) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2022-08-23 11:34:25 +01:00
Pepe Fagoaga 1e422f20aa fix(security-groups): Include TCP as the IpProtocol (#1323) 2022-08-05 11:02:35 +02:00
Pepe Fagoaga 721cafa0cd fix(appstream): Handle timeout errors (#1296) 2022-08-02 12:30:53 +02:00
Kay AgahdandPepe Fagoaga c1d60054e9 feat(extra780): Check for Cognito or SAML authentication on OpenSearch (#1291) 
* extend check_extra780 to check for cognito or SAML authentication on opensearch

* chore(extra780): Error handling

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-08-02 09:51:38 +02:00
Jonathan JenkynandPepe Fagoaga 81b6e27eb8 feat(checks): Adding commands for checks 117 and 118 (#1289) 
* Adding commands for checks 117 and 118

* fix(check118): Minor fixes and error handling

* fix(check117): Minor fixes and error handling

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-08-02 09:18:46 +02:00
Williamandsergargar d69678424b fix(extra712): changed Macie service detection (#1286) 
* changed Macie service detection

* fix(regions): add region context and more.

Co-authored-by: sergargar <sergio@verica.io>
 2022-07-28 13:53:54 -04:00
Pepe Fagoaga a43c1aceec fix(check12): Improve remediation (#1281) 2022-07-26 14:37:35 -04:00
Mitch ddd34dc9cc fix(extra7173): Correct check and alternative name (#1270) 2022-07-20 08:36:34 +02:00
Phil Massynn4ch04Pepe Fagoaga
 		f0ce17182b feat(ecr_lifecycle): Check Lifecycle policy (#1260) 
* Create checks_7194

ECR Repositories contain docker containers.  When automated processes create containers, the old ones tend to take up space.  With a lot of containers on the system, the account owner will be paying additional fees for images that are no longer in use.  By defining a lifecycle policy, a best practice is followed by reducing the total volume of data being consumed.

* Minor changes

* fix: Include bash header

Co-authored-by: n4ch04 <nachor1992@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-07-11 13:03:31 +02:00
Sergio Garciaandsergargar 2a8a7d844b fix(apigatewayv2): handle BadRequestException (#1261) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-07-11 12:21:39 +02:00
Sergio Garciaandsergargar fd850790d5 fix(add-checks-regions): Missing regions in checks (#1247) 
* add regions to checks

* add root as resource

Co-authored-by: sergargar <sergio@verica.io>
 2022-07-04 09:46:08 +02:00
rajarshidasandsergargar e4f0f3ec87 feat(check): Ensure default internet access from Amazon AppStream fleet should be disabled. (#1233) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-29 12:51:58 +02:00
rajarshidasandsergargar cc6302f7b8 feat(checks): Amazon AppStream checks (#1216) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-29 12:31:42 +02:00
Bayron CarranzaandPepe Fagoaga c89fd82856 feat(check7164): 365 days or more in a Cloudwatch log retention should be consider PASS (#1240) 
* 365 DAYS or More Retention log group in cloudwatch

* fix(extra7162): Fix comparison errors

Also include minor changes to texts

* fix(extra7162): Set as Pass log groups that never expires

* fix(typo)

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-06-28 08:58:41 +02:00
Pepe Fagoaga 0e29a92d42 fix(extra7162): Query AWS log groups using LOG_GROUP_RETENTION_PERIOD_DAYS (#1232) 2022-06-27 09:18:39 +02:00
rajarshidasandSergio Garcia 89416f37af feat(check): Directory Service - Ensure Radius server is using the recommended security protocol (#1203) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2022-06-20 11:37:02 +02:00
zsecducnaandPepe Fagoaga d85d0f5877 fix(extra767): Remove false positive (#1198) 
* Remove fail positive

Exclude distributions that does not support `POST` requests

* fix(extra767): Overall changes

- Quoted and braced variables
- Fix DefaultCacheBehavior twice in a AWS CLI query
- Use regex =~ to match values

* fix(check767): Change textInfo for textPass

* fix(extra767): Include AWS CLI error handling

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-06-15 09:38:56 +02:00
Pepe Fagoaga 5becaca2c4 fix(extra7187): Remove commas from the metadata (#1187) 2022-06-08 09:02:38 +02:00
Sergio Garcia 48f405a696 fix(check119_remediation): Update check remediation text. (#1185) 2022-06-07 14:48:13 +02:00
Sergio Garciaandsergargar 7930b449b3 fix(apigateway_iam): Error handling and permissions for extra745. (#1176) 
* fix(apigateway_iam): Error handling and permissions for extra745.

* Update check_extra745

Co-authored-by: sergargar <sergio@verica.io>
 2022-06-02 15:16:43 +02:00
Sergio Garciaandsergargar 2a54bbf901 fix(SQS_encryption_type): Add SQS encryption types to extra728. (#1175) 
* fix(SQS_encryption_type): Add SQS encryption types to extra728.

* Update check_extra728

* Update check_extra728

Co-authored-by: sergargar <sergio@verica.io>
 2022-06-02 15:01:02 +02:00
Sergio Garciaandsergargar ba727391db fix(runtimes_extra762): Detect nodejs versions correctly. (#1177) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-02 13:14:22 +02:00
Sergio Garcia d4346149fa fix(severity): High severity for check extra7185 (#1178) 2022-06-01 14:04:36 +02:00
Pepe Fagoaga 2637fc5132 feat(checks): New IAM privilege escalation check (#1168) 2022-06-01 13:58:31 +02:00
Sergio Garcia ac5135470b fix(update_deprecate_runtimes): Deprecated runtimes for lambda were updated (#1170) 2022-05-31 17:03:11 +02:00
rajarshidas 613966aecf feat(check): Amazon WorkSpaces storage volumes are encrypted 
If the value listed in the Volume Encryption column is Disabled, the selected AWS WorkSpaces instance volumes (root and user volumes) are not encrypted
 2022-05-31 17:01:20 +02:00
Pepe Fagoaga 83ddcb9c39 feat(check): PublicAccessBlockConfiguration (#1167) 2022-05-31 16:54:05 +02:00
Lucas L Lopes 957c2433cf feat(checks): New checks for Directory Service (#1164) 2022-05-30 14:24:44 +02:00
Pepe Fagoaga 432416d09e fix(checks): Severity for Lambda URL checks (#1162) 2022-05-25 12:22:42 +02:00
Pepe Fagoaga 24c60a0ef6 fix(checks): Handle AWS Gov Cloud regions (#1160) 2022-05-25 12:01:58 +02:00
Andrea Di Fabio f616c17bd2 feat(new): New custom check extra9999 to build a custom check on the fly (#1103) 2022-05-25 09:16:36 +02:00
Pepe Fagoaga 5628200bd4 fix(remediation): Fix remediation fields for checks (#1157) 2022-05-23 15:48:26 +02:00
Pepe Fagoaga ae93527a6f fix(BucketLocation): Recover bucket policy using the right region endpoint (#1156) 2022-05-23 15:45:30 +02:00
Pepe Fagoaga 2939d5cadd feat(lambda-function): Checks for misconfigured function's URLs (#1148) 2022-05-23 10:46:19 +02:00
Pepe Fagoaga e2c7bc2d6d fix(IllegalLocationConstraintException): Recover bucket policy using the right region endpoint (#1155) 2022-05-23 09:37:46 +02:00
Jens BreyandJens Brey 59abd2bd5b check_extra7113: Fix wrong listing of RDS instances in regions without databases (#1124) 
Co-authored-by: Jens Brey <jens.brey@allcloud.io>
 2022-05-03 11:31:23 +02:00
Pepe Fagoaga 8bfd9c0e62 feat(emr): Check BlockPublicAccessConfiguration for EMR (#1120) 2022-04-29 14:23:54 +02:00
Divyanshu 95df9bc316 feat(checks): New group and checks for Codebuild and EMR (#1112) 2022-04-29 14:19:04 +02:00
Pepe Fagoaga d6ade7694e chore(allowlist): Rename references (#1108) 
* chore(allowlist): rename file

* chore(allowlist): remove old references
 2022-04-13 11:31:50 +02:00
n4ch04 c9e282f236 IAM check116 and check122 modified to log also PASS results (#1107) 
* fix(check116): Fixed logic to include resource_id of passed users

* fix(check122): Changed logic check to include explicit pass records
 2022-04-12 19:54:51 +02:00
carterjones 5b902a1329 fix typo: publiccly -> publicly (#1106) 2022-04-12 18:12:26 +02:00
Pepe Fagoaga fc7c932169 fix(extra7147): Handle unsupported AWS regions for Glacier (#1101) 2022-04-11 16:10:23 +02:00
n4ch04 07b2b0de5a fix(extra764): Deleted temp file refs (#1089) 2022-04-07 17:03:32 +02:00