 Prowler BotandSergio Garcia
|
3fb86d754a
|
fix(cloudwatch): handle None metric alarms (#7207)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-03-12 16:18:44 +01:00 |
|
Sergio Garcia
|
96cae5e961
|
feat(aws): add fixers for threat detection checks (#7085)
|
2025-03-03 15:50:18 +01:00 |
|
Sergio Garcia
|
a62ae8af51
|
fix(ecs): ensure unique finding id in ECS checks (#7059)
|
2025-03-03 14:59:56 +01:00 |
|
Adrián Jesús Peña Rodríguez
|
3194675a5c
|
feat(export): add API export system (#6878)
|
2025-03-03 14:57:40 +01:00 |
|
 
|
9c5220ee98
|
fix(elasticache): improve logic in elasticache_redis_cluster_backup_enabled (#7045)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-02-26 12:12:44 +01:00 |
|
 Prowler BotandSergio Garcia
|
5974d0b5da
|
fix(report): remove invalid resources in report (#6984)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-02-20 11:05:58 +05:30 |
|
 Prowler BotandHugo Pereira Brito
|
5b9dae4529
|
test(cloudfront): add name retrieval test for cloudfront bucket domains (#6975)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2025-02-19 09:12:17 +05:30 |
|
 Prowler BotandSergio Garcia
|
48cb45b7a8
|
fix(aws): handle AccessDenied when retrieving resource policy (#6912)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-02-12 19:15:51 -05:00 |
|
 Prowler BotandOgonna Iwunze
|
91b74822e9
|
fix(kms): Amazon KMS API call error handling (#6904)
Co-authored-by: Ogonna Iwunze <1915636+wunzeco@users.noreply.github.com>
|
2025-02-12 11:08:47 -05:00 |
|
 Ogonna IwunzeandMrCloudSec
|
501674a778
|
feat(kms): add kms_cmk_not_multi_region AWS check (#6794)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-02-10 11:23:01 +01:00 |
|
 Prowler BotandKay Agahd
|
7189f3d526
|
fix(aws): key error for detect-secrets (#6865)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-02-07 10:04:54 -05:00 |
|
 Prowler BotandDaniel Barranquero
|
d60f4b5ded
|
fix(cloudfront): fix false positive in s3 origins (#6838)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-02-05 13:36:49 -05:00 |
|
 Prowler BotandKay Agahd
|
c39506ef7d
|
fix(aws) wording of report.status_extended in awslambda_function_not_publicly_accessible (#6831)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-02-05 11:18:27 -05:00 |
|
 Prowler BotandPepe Fagoaga
|
cb22af25c6
|
fix(db_event): Handle other events (#6757)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-01-30 21:48:42 +05:45 |
|
 Prowler BotandPepe Fagoaga
|
0adf7d6e77
|
fix(sns): Add region to subscriptions (#6740)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-01-30 15:46:55 +05:45 |
|
 Hugo Pereira BritoandMrCloudSec
|
6e9876b61a
|
feat(aws): include resource metadata in services from r* to s* (#6536)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-01-23 16:05:17 +01:00 |
|
 Hugo Pereira BritoandSergio Garcia
|
4c6be5e283
|
feat(aws): include resource metadata in services from a* to b* (#6504)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-01-23 16:05:03 +01:00 |
|
Daniel Barranquero
|
69178fd7bd
|
chore(aws): add resource metadata to services from t to w (#6546)
|
2025-01-23 16:04:49 +01:00 |
|
Daniel Barranquero
|
cd4432c14b
|
chore(aws): add resource metadata to services from f to o (#6545)
|
2025-01-23 16:04:40 +01:00 |
|
 Hugo Pereira BritoandSergio Garcia
|
28526b591c
|
feat(aws): include resource metadata in services from d* to e* (#6532)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-01-23 16:03:59 +01:00 |
|
 Pedro MartínandPepe Fagoaga
|
9d04a1bc52
|
feat(detect-secrets): get secrets plugins from config.yaml (#6544)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2025-01-23 14:16:15 +01:00 |
|
 dependabot[bot]andMrCloudSec
|
2c928dead5
|
chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-01-23 14:13:23 +01:00 |
|
 dependabot[bot]andMrCloudSec
|
3ffe147664
|
chore(deps): bump botocore from 1.35.94 to 1.35.99 (#6520)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-01-23 14:13:04 +01:00 |
|
 
|
0448429a9f
|
chore(regions_update): Changes in regions for AWS services (#6495)
Co-authored-by: MrCloudSec <38561120+MrCloudSec@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-01-23 13:56:43 +01:00 |
|
 Prowler BotandKay Agahd
|
f9cfc4d087
|
fix: add detector and line number of potential secret (#6663)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-01-22 10:55:49 -05:00 |
|
 Prowler BotandKay Agahd
|
1140c29384
|
fix(aws): list tags for DocumentDB clusters (#6622)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-01-20 17:22:06 -05:00 |
|
 Prowler BotandDaniel Barranquero
|
9a28ff025a
|
fix(sqs): fix flaky test (#6595)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-01-17 12:40:11 -05:00 |
|
 Prowler BotandHugo Pereira Brito
|
f1c7050700
|
fix(apigatewayv2): managed exception NotFoundException (#6590)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2025-01-17 09:27:19 -05:00 |
|
 Prowler BotandPedro Martín
|
bdcba9c642
|
fix(detect_secrets): refactor logic for detect-secrets (#6566)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-01-16 13:07:18 -05:00 |
|
Rubén De la Torre Vico
|
7777c8f135
|
fix(vpc): add new principal wildcard verification (#6461)
|
2025-01-13 09:49:10 -05:00 |
|
Sergio Garcia
|
15e888a939
|
feat(ec2): include resource metadata in Check_Report (#6440)
|
2025-01-13 13:04:55 +05:45 |
|
Daniel Barranquero
|
f3dbe28681
|
fix(codeartifact): fix flaky tests (#6449)
|
2025-01-10 18:16:00 +05:45 |
|
Daniel Barranquero
|
9d48f7286a
|
fix(cloudformation): fix flaky tests (#6398)
|
2025-01-09 15:30:11 +05:45 |
|
 
|
80311d3837
|
chore(regions_update): Changes in regions for AWS services (#6390)
Co-authored-by: MrCloudSec <38561120+MrCloudSec@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-01-08 12:28:24 -05:00 |
|
Sergio Garcia
|
b5180389f8
|
feat(aws): add new check cloudformation_stack_cdktoolkit_bootstrap_version (#6323)
|
2025-01-07 14:52:55 -05:00 |
|
 Kay AgahdandMrCloudSec
|
231829d8cd
|
fix(aws): disallow child-accounts to overwrite policy for ai_services_opt_out (#6229)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-12-20 11:04:42 -05:00 |
|
Daniel Barranquero
|
5964b68c86
|
feat(codeartifact): add new fixer codeartifact_packages_external_public_publishing_disabled_fixer (#6263)
|
2024-12-19 10:05:01 -05:00 |
|
Daniel Barranquero
|
2183f31ff5
|
feat(ec2): add new fixers for internet exposed ports (#6223)
|
2024-12-17 10:04:00 -05:00 |
|
 
|
b8cc4b4f0f
|
feat(stepfunctions): add stepfunctions service and check stepfunctions_statemachine_logging_enabled (#5466)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2024-12-16 11:34:02 -05:00 |
|
Daniel Barranquero
|
36e61cb7a2
|
feat(ec2): add new fixer ec2_ami_public_fixer (#6177)
|
2024-12-16 10:09:14 -05:00 |
|
Daniel Barranquero
|
78c6484ddb
|
feat(cloudtrail): add new fixer cloudtrail_logs_s3_bucket_is_not_publicly_accessible_fixer (#6174)
|
2024-12-16 10:05:34 -05:00 |
|
Daniel Barranquero
|
3f1e90a5b3
|
feat(s3): add new fixer s3_bucket_policy_public_write_access_fixer (#6173)
|
2024-12-16 10:01:38 -05:00 |
|
Sergio Garcia
|
7b1a0474db
|
fix(aws): set unique resource IDs (#6152)
|
2024-12-13 13:00:38 +01:00 |
|
 Daniel BarranqueroandMrCloudSec
|
7d2c50991b
|
feat(s3): add new fixer s3_bucket_public_access_fixer (#6164)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-12-12 12:17:41 -04:00 |
|
 Daniel BarranqueroandMrCloudSec
|
be347b2428
|
feat(ec2): add new check ec2_launch_template_imdsv2_required (#6139)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-12-12 11:27:20 -04:00 |
|
Daniel Barranquero
|
a90c772827
|
feat(s3): add new fixer s3_bucket_public_list_acl_fixer (#6166)
|
2024-12-12 11:16:46 -04:00 |
|
Daniel Barranquero
|
26c70976c0
|
feat(s3): add new fixer s3_bucket_public_write_acl_fixer (#5855)
|
2024-12-12 11:10:43 -04:00 |
|
Daniel Barranquero
|
6e595eaf92
|
feat(ec2): add new fixer ec2_instance_port_cifs_exposed_to_internet_fixer (#6159)
|
2024-12-12 09:22:56 -04:00 |
|
 
|
bd9673c9de
|
fix(aurora): Add default ports to the check of using non default ports (#5821)
Co-authored-by: Mads Rantala Lundholm <mao@bankdata.dk>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
|
2024-12-11 13:01:45 -04:00 |
|
Daniel Barranquero
|
fdb1956b0b
|
feat(opensearch): add new fixer opensearch_service_domains_not_publicly_accessible_fixer (#5926)
|
2024-12-11 11:29:48 -04:00 |
|