Toni de la Fuente
3c3a3f7c54
Fix issue with Security Hub integration when resolving closed findings are either a lot of new findings, or a lot of resolved findings @Kirizan
...
Fix issue with Security Hub integration when resolving closed findings are either a lot of new findings, or a lot of resolved findings @Kirizan
2021-12-03 14:53:53 +01:00
Toni de la Fuente
334a8c2b13
New check 7164 Cloudwatch log groups are protected by KMS @maisenhe
...
New check 7164 Cloudwatch log groups are protected by KMS @maisenhe
2021-12-02 18:36:25 +01:00
Joel Maisenhelder
6ff94b2b60
updated CHECK_RISK
2021-12-02 09:01:54 -06:00
Joel Maisenhelder
e1e57db93e
New check 7164 Check if Cloudwatch log groups are protected by AWS KMS@maisenhe
2021-12-01 19:44:34 -06:00
nikirby
4ea4debedd
Added line to delete the temp folder after everything is done.
2021-12-01 15:06:09 -05:00
nikirby
43b3ad6447
Adjusted the batch to only do 50 at a time. 100 caused capacity issues. Also added a check for an edge case where if the updated findings was a multiple of the batch size, it would throw an error for attempting to import 0 findings.
2021-12-01 13:29:12 -05:00
nikirby
5ecf1e2a85
Fixed error that appeared if the number of findings was very high.
2021-12-01 13:25:48 -05:00
Toni de la Fuente
2bed303474
Label 2.7.0-1December2021 for tests
2021-12-01 14:14:36 +01:00
Toni de la Fuente
fa46709860
Fix and clean assume-role to better handle AWS STS CLI errors @jfagoagas
...
Fix and clean assume-role to better handle AWS STS CLI errors @jfagoagas
2021-12-01 13:35:05 +01:00
Pepe Fagoaga
61bab1d85e
Merge branch '2.7' into fix-aws-sts-handle-errors
2021-12-01 13:29:59 +01:00
Toni de la Fuente
84a6843dda
Fix issue #938 assume_role multiple times @halfluke
...
Fix issue #938 assume_role multiple times @halfluke
2021-12-01 12:52:16 +01:00
Toni de la Fuente
0b92aeca4c
Merge branch '2.7' into fix_#938_assume_role
2021-12-01 12:47:08 +01:00
root
e5eb066c61
#938 issue assume_role multiple times should be fixed
2021-11-30 15:29:10 -05:00
Toni de la Fuente
593c3b88e8
Docs Readme: fix link for group25 FTR @lopmoris
...
Docs Readme: fix link for group25 FTR @lopmoris
2021-11-29 19:27:01 +01:00
Israel
f8ea974142
Update README.md
...
broken link for capital letters in group file (group25_FTR)
2021-11-29 19:11:10 +01:00
Toni de la Fuente
3c32c995bf
Fix group25 FTR @lopmoris
...
Fix group25 FTR @lopmoris
2021-11-29 18:00:05 +01:00
Israel
dd4c3a3b3d
Update group25_FTR
...
When trying to run the group 25 (Amazon FTR related security checks) nothing happens, after looking at the code there is a misconfiguration in 2 params: GROUP_RUN_BY_DEFAULT[9] and GROUP_CHECKS[9]. Updating values to 25 fixed the issue.
2021-11-29 17:56:04 +01:00
Pepe Fagoaga
0b9526da1d
Merge branch '2.7' into fix-aws-sts-handle-errors
2021-11-29 12:19:48 +01:00
Toni de la Fuente
315b4cc7c9
Fix assume-role: check if -T and -A options are set together @jfagoagas
...
Fix assume-role: check if `-T` and `-A` options are set together @jfagoagas
2021-11-29 10:56:27 +01:00
Toni de la Fuente
37de1a1330
Docs Readme: -T option is not mandatory @jfagoagas
...
Docs Readme: `-T` option is not mandatory @jfagoagas
2021-11-29 10:54:57 +01:00
Pepe Fagoaga
63eb184f39
fix(assume-role): Handle AWS STS CLI errors
2021-11-28 18:44:28 +01:00
Pepe Fagoaga
e74658557e
fix(assume-role): Handle AWS STS CLI errors
2021-11-28 14:01:26 +01:00
Pepe Fagoaga
43af01e805
docs(Readme): -T option is not mandatory
2021-11-28 13:31:07 +01:00
Pepe Fagoaga
af4b5539e6
fix(assumed-role): Check if -T and -A options are set
2021-11-28 13:14:10 +01:00
Toni de la Fuente
1f27f08489
New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
...
New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
2021-11-25 15:22:35 +01:00
Daniel Peladeau
a101352219
Updating check_extra7163 with requested changes
2021-11-23 22:29:12 -05:00
Toni de la Fuente
34f67f71e4
Smaller fixes in README and multiaccount serverless deployment templates @dlorch
...
Smaller fixes in README and multiaccount serverless deployment templates @dlorch
2021-11-23 20:59:44 +01:00
Daniel Lorch
bbf6a0f5d9
Install detect-secrets (e.g. for check_extra742)
2021-11-23 20:08:07 +01:00
Daniel Lorch
10f2234e3d
Fix link to quicksight dashboard
2021-11-23 17:26:26 +01:00
Daniel Lorch
cebd5cce3e
Update ProwlerRole.yaml to have same permissions as util/org-multi-account/ProwlerRole.yaml
2021-11-23 17:26:14 +01:00
Toni de la Fuente
d45cab2b0a
New check 7162 CloudWatch log groups have 365 days retention @Obiakara
...
New check 7162 CloudWatch log groups have 365 days retention @Obiakara
2021-11-23 11:12:43 +01:00
Toni de la Fuente
8e793c9060
New check 7161 EFS encryption at rest enabled @rustic
...
New check 7161 EFS encryption at rest enabled @rustic
2021-11-23 11:03:23 +01:00
Toni de la Fuente
5ae04717fa
New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
...
New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
2021-11-23 11:02:40 +01:00
Jonathan Lozano
49f1060922
New check7160 Enabled AutomaticVersionUpgrade on RedShift Cluster
2021-11-22 16:06:10 -05:00
Daniel Peladeau
65cf527d5a
New check_extra7163 Secrets Manager key rotation enabled
2021-11-21 16:36:49 -05:00
Lee Myers
e7a5d7266c
Extra7161 EFS encryption at rest check
2021-11-19 17:28:12 -05:00
Chinedu Obiakara
2af565ead1
changed check title, resource type and service name as well as making the code more dynamic
2021-11-19 13:31:14 -06:00
Chinedu Obiakara
1fd2e36049
fixed code to handle all regions and formatted output
2021-11-19 12:00:15 -06:00
Chinedu Obiakara
68b26700c1
Added check_extra7162 which checks if Log groups have 365 days retention
2021-11-19 09:28:16 -06:00
Lee Myers
c6858f1d0e
Extra7161 EFS encryption at rest check
2021-11-18 20:25:25 -05:00
Toni de la Fuente
42e54c42cf
Label new version 2.6.1-15November2021
2021-11-15 19:12:06 +01:00
Toni de la Fuente
f0c12bbf93
Merge pull request #928 from toniblyx/2.6.1
...
2.6.1
2021-11-15 18:56:16 +01:00
Toni de la Fuente
d272fad4c2
Enhancement IAM assumed role session duration error handling by @jfagoagas
...
Enhancement IAM assumed role session duration error handling by @jfagoagas
2.6.1
2021-11-15 18:17:09 +01:00
Toni de la Fuente
3e78f017e2
Fix Terraform Kickstarter path in README by @z0ph
...
Fix Terraform Kickstarter path in README
2021-11-15 17:05:37 +01:00
Toni de la Fuente
cee6437ae1
Fix issue #926 resource id and remediation typo
2021-11-15 16:49:40 +01:00
Toni de la Fuente
b251f31da9
Fix issue #925 replace sensible by sensitive
2021-11-15 15:59:13 +01:00
Toni de la Fuente
50de9f2ab4
Fix output for checks check3x when no CW group is in place
2021-11-15 15:49:33 +01:00
Toni de la Fuente
a6ba580344
Fix severity case variable
2021-11-15 15:45:33 +01:00
Pepe Fagoaga
563cd71060
fix(iam-role): Delete temporary prowler.sts_assumed* if error
2021-11-13 16:25:43 +01:00
Victor GRENU
32e5738c46
fix readme for terraform kickstarter
2021-11-13 14:48:16 +01:00