Commit Graph
1859 Commits
Author SHA1 Message Date
Toni de la Fuente 13db49ba64 Merge branch '2.7' into patch-1 2021-12-13 14:36:10 +01:00
RT 70669eb5b5 Fix Broken Link 2021-12-13 14:56:53 +05:30
Toni de la Fuente 142f42d406 Added invalid check or group id to the error message #962 2021-12-09 15:54:43 +01:00
Toni de la Fuente d48e9f34a5 Added new checks 7164 and 7165 to group extras 2021-12-09 12:23:22 +01:00
Toni de la Fuente 49ea3d8589 Fix #940 handling error when can not list functions 2021-12-09 12:19:45 +01:00
Toni de la Fuente 78faa8f365 Fix #962 check 7147 ALTERNATE NAME 2021-12-09 11:48:20 +01:00
Toni de la Fuente c241f0008a Fix #957 check 763 had us-east-1 region hardcoded 2021-12-09 10:01:34 +01:00
Toni de la Fuente f98f1f8a1d Merge branch '2.7' of https://github.com/toniblyx/prowler into 2.7 2021-12-09 09:54:14 +01:00
Toni de la Fuente 65c95a8354 Fix #963 check 792 to force json in ELB queries 2021-12-09 09:54:05 +01:00
Toni de la Fuente bfdc88123c New check 7165 DynamoDB: DAX encrypted at rest @Daniel-Peladeau @7thseraph @maisenhe
New check 7165 DynamoDB: DAX encrypted at rest @Daniel-Peladeau @7thseraph @maisenhe
2021-12-07 15:55:10 +01:00
Daniel Peladeau ad902746f4 Fix ASFF Resource Type 2021-12-07 08:48:41 -05:00
Daniel Peladeau 15c5409b0b New check 7165 DynamoDB: DAX encrypted at rest @Daniel-Peladeau 2021-12-07 08:42:31 -05:00
Daniel Peladeau f9d792d677 New check 7165 DynamoDB: DAX encrypted at rest @Daniel-Peladeau 2021-12-03 17:05:04 -05:00
Toni de la Fuente 022a4487f3 Merge branch '2.7' of https://github.com/toniblyx/prowler into 2.7 2021-12-03 16:09:36 +01:00
Toni de la Fuente 0ac1b00044 Added issue templates 2021-12-03 15:40:26 +01:00
Toni de la Fuente 2c6895f31e Added checks extra7160,extra7161,extra7162,extra7163 to group Extras 2021-12-03 15:19:01 +01:00
Toni de la Fuente fdcc4fb54a Added checks extra7160,extra7161,extra7162,extra7163 to group Extras 2021-12-03 15:15:58 +01:00
Toni de la Fuente 3c3a3f7c54 Fix issue with Security Hub integration when resolving closed findings are either a lot of new findings, or a lot of resolved findings @Kirizan
Fix issue with Security Hub integration when resolving closed findings are either a lot of new findings, or a lot of resolved findings @Kirizan
2021-12-03 14:53:53 +01:00
Toni de la Fuente 334a8c2b13 New check 7164 Cloudwatch log groups are protected by KMS @maisenhe
New check 7164 Cloudwatch log groups are protected by KMS @maisenhe
2021-12-02 18:36:25 +01:00
Joel Maisenhelder 6ff94b2b60 updated CHECK_RISK 2021-12-02 09:01:54 -06:00
Joel Maisenhelder e1e57db93e New check 7164 Check if Cloudwatch log groups are protected by AWS KMS@maisenhe 2021-12-01 19:44:34 -06:00
nikirby 4ea4debedd Added line to delete the temp folder after everything is done. 2021-12-01 15:06:09 -05:00
nikirby 43b3ad6447 Adjusted the batch to only do 50 at a time. 100 caused capacity issues. Also added a check for an edge case where if the updated findings was a multiple of the batch size, it would throw an error for attempting to import 0 findings. 2021-12-01 13:29:12 -05:00
nikirby 5ecf1e2a85 Fixed error that appeared if the number of findings was very high. 2021-12-01 13:25:48 -05:00
Toni de la Fuente 2bed303474 Label 2.7.0-1December2021 for tests 2021-12-01 14:14:36 +01:00
Toni de la Fuente fa46709860 Fix and clean assume-role to better handle AWS STS CLI errors @jfagoagas
Fix and clean assume-role to better handle AWS STS CLI errors @jfagoagas
2021-12-01 13:35:05 +01:00
Pepe Fagoaga 61bab1d85e Merge branch '2.7' into fix-aws-sts-handle-errors 2021-12-01 13:29:59 +01:00
Toni de la Fuente 84a6843dda Fix issue #938 assume_role multiple times @halfluke
Fix issue #938 assume_role multiple times @halfluke
2021-12-01 12:52:16 +01:00
Toni de la Fuente 0b92aeca4c Merge branch '2.7' into fix_#938_assume_role 2021-12-01 12:47:08 +01:00
root e5eb066c61 #938 issue assume_role multiple times should be fixed 2021-11-30 15:29:10 -05:00
Toni de la Fuente 593c3b88e8 Docs Readme: fix link for group25 FTR @lopmoris
Docs Readme: fix link for group25 FTR @lopmoris
2021-11-29 19:27:01 +01:00
Israel f8ea974142 Update README.md
broken link for capital letters in group file (group25_FTR)
2021-11-29 19:11:10 +01:00
Toni de la Fuente 3c32c995bf Fix group25 FTR @lopmoris
Fix group25 FTR @lopmoris
2021-11-29 18:00:05 +01:00
Israel dd4c3a3b3d Update group25_FTR
When trying to run the group 25 (Amazon FTR related security checks) nothing happens, after looking at the code there is a misconfiguration in 2 params: GROUP_RUN_BY_DEFAULT[9] and GROUP_CHECKS[9]. Updating values to 25 fixed the issue.
2021-11-29 17:56:04 +01:00
Pepe Fagoaga 0b9526da1d Merge branch '2.7' into fix-aws-sts-handle-errors 2021-11-29 12:19:48 +01:00
Toni de la Fuente 315b4cc7c9 Fix assume-role: check if -T and -A options are set together @jfagoagas
Fix assume-role: check if `-T` and `-A` options are set together @jfagoagas
2021-11-29 10:56:27 +01:00
Toni de la Fuente 37de1a1330 Docs Readme: -T option is not mandatory @jfagoagas
Docs Readme: `-T` option is not mandatory @jfagoagas
2021-11-29 10:54:57 +01:00
Pepe Fagoaga 63eb184f39 fix(assume-role): Handle AWS STS CLI errors 2021-11-28 18:44:28 +01:00
Pepe Fagoaga e74658557e fix(assume-role): Handle AWS STS CLI errors 2021-11-28 14:01:26 +01:00
Pepe Fagoaga 43af01e805 docs(Readme): -T option is not mandatory 2021-11-28 13:31:07 +01:00
Pepe Fagoaga af4b5539e6 fix(assumed-role): Check if -T and -A options are set 2021-11-28 13:14:10 +01:00
Toni de la Fuente 1f27f08489 New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
2021-11-25 15:22:35 +01:00
Daniel Peladeau a101352219 Updating check_extra7163 with requested changes 2021-11-23 22:29:12 -05:00
Toni de la Fuente 34f67f71e4 Smaller fixes in README and multiaccount serverless deployment templates @dlorch
Smaller fixes in README and multiaccount serverless deployment templates @dlorch
2021-11-23 20:59:44 +01:00
Daniel Lorch bbf6a0f5d9 Install detect-secrets (e.g. for check_extra742) 2021-11-23 20:08:07 +01:00
Daniel Lorch 10f2234e3d Fix link to quicksight dashboard 2021-11-23 17:26:26 +01:00
Daniel Lorch cebd5cce3e Update ProwlerRole.yaml to have same permissions as util/org-multi-account/ProwlerRole.yaml 2021-11-23 17:26:14 +01:00
Toni de la Fuente d45cab2b0a New check 7162 CloudWatch log groups have 365 days retention @Obiakara
New check 7162 CloudWatch log groups have 365 days retention @Obiakara
2021-11-23 11:12:43 +01:00
Toni de la Fuente 8e793c9060 New check 7161 EFS encryption at rest enabled @rustic
New check 7161 EFS encryption at rest enabled @rustic
2021-11-23 11:03:23 +01:00
Toni de la Fuente 5ae04717fa New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
2021-11-23 11:02:40 +01:00