Toni de la Fuente
2bed303474
Label 2.7.0-1December2021 for tests
2021-12-01 14:14:36 +01:00
Toni de la Fuente
fa46709860
Fix and clean assume-role to better handle AWS STS CLI errors @jfagoagas
...
Fix and clean assume-role to better handle AWS STS CLI errors @jfagoagas
2021-12-01 13:35:05 +01:00
Pepe Fagoaga
61bab1d85e
Merge branch '2.7' into fix-aws-sts-handle-errors
2021-12-01 13:29:59 +01:00
Toni de la Fuente
84a6843dda
Fix issue #938 assume_role multiple times @halfluke
...
Fix issue #938 assume_role multiple times @halfluke
2021-12-01 12:52:16 +01:00
Toni de la Fuente
0b92aeca4c
Merge branch '2.7' into fix_#938_assume_role
2021-12-01 12:47:08 +01:00
root
e5eb066c61
#938 issue assume_role multiple times should be fixed
2021-11-30 15:29:10 -05:00
Toni de la Fuente
593c3b88e8
Docs Readme: fix link for group25 FTR @lopmoris
...
Docs Readme: fix link for group25 FTR @lopmoris
2021-11-29 19:27:01 +01:00
Israel
f8ea974142
Update README.md
...
broken link for capital letters in group file (group25_FTR)
2021-11-29 19:11:10 +01:00
Toni de la Fuente
3c32c995bf
Fix group25 FTR @lopmoris
...
Fix group25 FTR @lopmoris
2021-11-29 18:00:05 +01:00
Israel
dd4c3a3b3d
Update group25_FTR
...
When trying to run the group 25 (Amazon FTR related security checks) nothing happens, after looking at the code there is a misconfiguration in 2 params: GROUP_RUN_BY_DEFAULT[9] and GROUP_CHECKS[9]. Updating values to 25 fixed the issue.
2021-11-29 17:56:04 +01:00
Pepe Fagoaga
0b9526da1d
Merge branch '2.7' into fix-aws-sts-handle-errors
2021-11-29 12:19:48 +01:00
Toni de la Fuente
315b4cc7c9
Fix assume-role: check if -T and -A options are set together @jfagoagas
...
Fix assume-role: check if `-T` and `-A` options are set together @jfagoagas
2021-11-29 10:56:27 +01:00
Toni de la Fuente
37de1a1330
Docs Readme: -T option is not mandatory @jfagoagas
...
Docs Readme: `-T` option is not mandatory @jfagoagas
2021-11-29 10:54:57 +01:00
Pepe Fagoaga
63eb184f39
fix(assume-role): Handle AWS STS CLI errors
2021-11-28 18:44:28 +01:00
Pepe Fagoaga
e74658557e
fix(assume-role): Handle AWS STS CLI errors
2021-11-28 14:01:26 +01:00
Pepe Fagoaga
43af01e805
docs(Readme): -T option is not mandatory
2021-11-28 13:31:07 +01:00
Pepe Fagoaga
af4b5539e6
fix(assumed-role): Check if -T and -A options are set
2021-11-28 13:14:10 +01:00
Toni de la Fuente
1f27f08489
New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
...
New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
2021-11-25 15:22:35 +01:00
Daniel Peladeau
a101352219
Updating check_extra7163 with requested changes
2021-11-23 22:29:12 -05:00
Toni de la Fuente
34f67f71e4
Smaller fixes in README and multiaccount serverless deployment templates @dlorch
...
Smaller fixes in README and multiaccount serverless deployment templates @dlorch
2021-11-23 20:59:44 +01:00
Daniel Lorch
bbf6a0f5d9
Install detect-secrets (e.g. for check_extra742)
2021-11-23 20:08:07 +01:00
Daniel Lorch
10f2234e3d
Fix link to quicksight dashboard
2021-11-23 17:26:26 +01:00
Daniel Lorch
cebd5cce3e
Update ProwlerRole.yaml to have same permissions as util/org-multi-account/ProwlerRole.yaml
2021-11-23 17:26:14 +01:00
Toni de la Fuente
d45cab2b0a
New check 7162 CloudWatch log groups have 365 days retention @Obiakara
...
New check 7162 CloudWatch log groups have 365 days retention @Obiakara
2021-11-23 11:12:43 +01:00
Toni de la Fuente
8e793c9060
New check 7161 EFS encryption at rest enabled @rustic
...
New check 7161 EFS encryption at rest enabled @rustic
2021-11-23 11:03:23 +01:00
Toni de la Fuente
5ae04717fa
New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
...
New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
2021-11-23 11:02:40 +01:00
Jonathan Lozano
49f1060922
New check7160 Enabled AutomaticVersionUpgrade on RedShift Cluster
2021-11-22 16:06:10 -05:00
Daniel Peladeau
65cf527d5a
New check_extra7163 Secrets Manager key rotation enabled
2021-11-21 16:36:49 -05:00
Lee Myers
e7a5d7266c
Extra7161 EFS encryption at rest check
2021-11-19 17:28:12 -05:00
Chinedu Obiakara
2af565ead1
changed check title, resource type and service name as well as making the code more dynamic
2021-11-19 13:31:14 -06:00
Chinedu Obiakara
1fd2e36049
fixed code to handle all regions and formatted output
2021-11-19 12:00:15 -06:00
Chinedu Obiakara
68b26700c1
Added check_extra7162 which checks if Log groups have 365 days retention
2021-11-19 09:28:16 -06:00
Lee Myers
c6858f1d0e
Extra7161 EFS encryption at rest check
2021-11-18 20:25:25 -05:00
Toni de la Fuente
42e54c42cf
Label new version 2.6.1-15November2021
2021-11-15 19:12:06 +01:00
Toni de la Fuente
f0c12bbf93
Merge pull request #928 from toniblyx/2.6.1
...
2.6.1
2021-11-15 18:56:16 +01:00
Toni de la Fuente
d272fad4c2
Enhancement IAM assumed role session duration error handling by @jfagoagas
...
Enhancement IAM assumed role session duration error handling by @jfagoagas
2.6.1
2021-11-15 18:17:09 +01:00
Toni de la Fuente
3e78f017e2
Fix Terraform Kickstarter path in README by @z0ph
...
Fix Terraform Kickstarter path in README
2021-11-15 17:05:37 +01:00
Toni de la Fuente
cee6437ae1
Fix issue #926 resource id and remediation typo
2021-11-15 16:49:40 +01:00
Toni de la Fuente
b251f31da9
Fix issue #925 replace sensible by sensitive
2021-11-15 15:59:13 +01:00
Toni de la Fuente
50de9f2ab4
Fix output for checks check3x when no CW group is in place
2021-11-15 15:49:33 +01:00
Toni de la Fuente
a6ba580344
Fix severity case variable
2021-11-15 15:45:33 +01:00
Pepe Fagoaga
563cd71060
fix(iam-role): Delete temporary prowler.sts_assumed* if error
2021-11-13 16:25:43 +01:00
Victor GRENU
32e5738c46
fix readme for terraform kickstarter
2021-11-13 14:48:16 +01:00
Pepe Fagoaga
e4edb5e39e
fix(iam-role): IAM assumed role session duration
2021-11-12 18:32:02 +01:00
Toni de la Fuente
cbd1c31424
Merge pull request #922 from toniblyx/2.6
...
2.6
2021-11-12 13:23:42 +01:00
Toni de la Fuente
df6e3f9462
Merge branch 'master' into 2.6
2021-11-12 13:21:18 +01:00
Toni de la Fuente
79c32a3c0b
Label new version 2.6.0-12November2021
2.6.0
2021-11-12 10:34:32 +01:00
Toni de la Fuente
9cf076899e
Updated screenshots and minor changes
2021-11-12 10:33:45 +01:00
Toni de la Fuente
dd398a994b
Fix issue #904
2021-11-11 14:05:14 +01:00
Toni de la Fuente
82b7eca80a
Fix CIS LEVEL variable in check21
2021-11-11 14:00:33 +01:00