ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-19 18:41:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,212 Commits 486 Branches 213 Tags
13e40eb03e2cfb9ad2197a73fecf69db33dbd9b1
Commit Graph

668 Commits

Author SHA1 Message Date
Rubén De la Torre Vico 13e40eb03e feat(aws): add tags to Global Accelerator (#5233) 2024-09-27 12:37:19 -04:00
Amogh Bantwal 853b833cfb feat(aws): Add new check opensearch_service_domains_access_control_enabled (#5203) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-27 10:13:43 -04:00
Rubén De la Torre Vico c047b29140 feat(rds): add missing tags to RDS checks (#5230) 2024-09-27 09:34:25 -04:00
Mario Rodriguez Lopez 9d4fa55c13 feat(ecs): Ensure ECS task definitions host's process namespace is not shared (#5146) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-26 18:24:21 -04:00
Mario Rodriguez Lopez ff05ce4da1 feat(ecs): Ensure ECS containers have read-only access to root filesystems (#5168) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-26 14:37:24 -04:00
Mario Rodriguez Lopez 0474c7995c feat(ecs): Ensure ECS containers run as non-privileged (#5214) 2024-09-26 14:05:11 -04:00
Mario Rodriguez Lopez 1a679f371f feat(ecr): Ensure ECR repositories have tag immutability configured (#5144) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-26 13:51:57 -04:00
Rubén De la Torre Vico 05f7170add feat(dms): add tags to DMS checks (#5209) 2024-09-26 13:33:28 -04:00
Rubén De la Torre Vico 19acb873af feat(glue): add tags to Glue checks (#5213) 2024-09-26 13:11:44 -04:00
Daniel Barranquero 0b566f9666 feat(dynamodb): add new check dynamodb_table_deletion_protection_enabled (#5148) 2024-09-26 11:19:57 -04:00
Rubén De la Torre Vico 67bf89537a chore(ec2): add tags to report of EC2 launch templates (#5210) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-26 10:50:02 -04:00
Daniel Barranquero d0681a9e20 fix(aws): change protected_by_backup_plan checks (#5204) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-26 10:33:12 -04:00
Rubén De la Torre Vico 31bff99b3d feat(codebuild): add tags support to projects (#5207) 2024-09-26 10:14:02 -04:00
Mario Rodriguez Lopez 114a3088a4 feat(ecs): Ensure public IP addresses are not assigned automatically (#5128) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-25 16:24:39 -04:00
Rubén De la Torre Vico bc8f3eba4d feat(backup): add tags to backup vaults and backup plans (#5194) 2024-09-25 11:02:53 -04:00
Hugo Pereira Brito 8e087196c9 feat(s3): Add new check s3_bucket_cross_account_access (#5082) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-25 10:01:52 -04:00
Amogh Bantwal 744e7ff5ac feat(threat-detection): Use IAM Identity for Cloudtrail Threat Detection instead of IP (#5166) 2024-09-25 09:15:47 -04:00
Sergio Garcia 0a2b7cf152 chore(aws): improve IAM Resource Policy public logic (#5067) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-09-25 08:33:41 -04:00
Pedro Martín ebbccd04f1 refactor(execute_check): refactor execute method (#4975) 2024-09-25 14:19:42 +02:00
Pedro Martín 47a6e28d71 refactor(output_options): remove output options from provider (#5149) 2024-09-25 09:38:21 +02:00
Jude Bae(Bae cheongho) de5742433b feat(compliance): add KISA ISMS-P compliance framework (#5086) 
Co-authored-by: MZC01-JUDE <mzc01-jude@MZC01-JUDE-2.local>
 2024-09-25 09:06:05 +02:00
Daniel Barranquero 9fb26643ba feat(dynamodb): add new check dynamodb_accelerator_cluster_in_transit_encryption_enabled (#5173) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-24 16:32:37 -04:00
Daniel Barranquero e4890f9d9d feat(dynamodb): add new check dynamodb_table_protected_by_backup_plan (#5175) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-24 12:45:12 -04:00
Hugo Pereira Brito 980b9b4770 feat(networkfirewall): change network_firewalls from list to dict (#5169) 2024-09-24 12:43:19 -04:00
Sergio Garcia f4d89066d9 feat(aws): add new check organizations_opt_out_ai_services_policy (#5152) 2024-09-24 11:37:03 -04:00
Sergio Garcia 25327d618d chore(aws): handle NotAction cases in IAM policies (#5035) 2024-09-24 08:36:11 -04:00
Sergio Garcia 3951295c0c chore(organizations): improve AWS Organizations service (#5151) 2024-09-24 08:28:21 -04:00
Mario Rodriguez Lopez 1f43e6eff9 feat(inspector2): Add more tests to inspector2_is_enabled check (#5150) 2024-09-23 15:06:34 -04:00
Daniel Barranquero aa118c05c5 feat(rds): add new check rds_cluster_non_default_port (#5113) 2024-09-23 15:05:56 -04:00
Hugo Pereira Brito cca17b9378 feat(cloudfront): add new check cloudfront_distributions_s3_origin_non_existing_bucket (#4996) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-23 12:43:03 -04:00
Pedro Martín 14ed19e3a8 fix(iam): fill resource id with inline policy entity (#5120) 2024-09-23 10:54:38 -04:00
Sergio Garcia 4badcca4f8 fix(gcp): add default project for org level checks (#5003) 2024-09-20 20:39:35 +02:00
Hugo Pereira Brito c6daa60f26 feat(elasticache): add check elasticache_redis_cluster_auth_enabled (#4830) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-20 12:18:08 -04:00
Sergio Garcia 16a251254e fix(gcp): solve errors in GCP services (#5016) 2024-09-20 11:06:57 -04:00
Sergio Garcia 751958907c fix(vpc): check all routes tables in subnet (#5081) 2024-09-20 10:13:16 -04:00
Sergio Garcia 9456c6198a chore(ssm): add trusted accounts variable to ssm check (#5005) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-09-20 09:12:48 -04:00
Sergio Garcia 45ce1a0650 fix(asff): include status extended in ASFF output (#5097) 2024-09-20 09:08:13 -04:00
Mario Rodriguez Lopez 73c96f8346 feat(sagemaker): Ensure SageMaker Endpoint Production Variants have Initial Instance Count greater than one (#5045) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 15:16:56 -04:00
Amogh Bantwal 0974c5f333 feat(slack): add more information about critical findings (#5042) 2024-09-19 14:02:09 -04:00
Hugo Pereira Brito 7db0746416 feat(guardduty): add new check guardduty_rds_protection_enabled (#5100) 2024-09-19 13:52:17 -04:00
Pedro Martín 57abe1c839 fix(accessanalyzer): refactor accessanalyzer enabled fixer test (#5026) 2024-09-19 11:09:03 -04:00
Daniel Barranquero 43183962ad feat(aws): Add new check to ensure RDS instances are not using default database engine ports (#4973) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 10:14:46 -04:00
Daniel Barranquero 87948b458e feat(guardduty): add new check guardduty_s3_protection_enabled (#5087) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-19 10:10:39 -04:00
Rubén De la Torre Vico 320a2a2c77 feat(awslambda): add new check awslambda_function_vpc_multi_az (#4816) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-19 09:30:04 -04:00
Mario Rodriguez Lopez 8a8c2b5097 feat(ecs): add new check ecs_task_definitions_host_networking_mode_users (#5088) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 18:28:31 -04:00
Lefteris 34679c98d6 feat(dms): new check dms_endpoint_ssl_enabled (#4968) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-09-18 17:46:56 -04:00
Hugo Pereira Brito ae794c7c32 feat(cloudfront): Ensure Cloudfront distributions have origin failover configured (#4868) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 13:26:35 -04:00
Rubén De la Torre Vico 8d23e81b1c feat(elb): add new check elb_connection_draining_enabled (#5014) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-18 10:49:33 -04:00
Daniel Barranquero f0cd924016 feat(neptune): add new check neptune_cluster_copy_tags_to_snapshots (#5062) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-18 09:23:44 -04:00
Mario Rodriguez Lopez c425e8249b fix(inspector2): Ensure Inspector2 is enabled for ECR, EC2, Lambda and Lambda Code (#5061) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 14:01:19 -04:00