ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-14 15:34:19 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,993 Commits 578 Branches 224 Tags
6d5a2a94de8dc7781634ed7ed27fd1ba4261aaa5
Commit Graph
6993 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel BarranqueroandSergio Garcia 5fb2d7c3ce feat(neptune): add new check neptune_cluster_integration_cloudwatch_logs (#5048) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 12:20:25 -04:00
Prowler Botandsergargar 64aebe84fe chore(regions_update): Changes in regions for AWS services (#5059) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-17 11:52:41 -04:00
Rubén De la Torre VicoSergioSergio Garcia
 		de831b0abe chore(AWS): match all AWS resource types with SecurityHub supported types in metadata (#4882) 
Co-authored-by: Sergio <sergio@prowler.com>
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-17 11:40:45 -04:00
dependabot[bot] 68af4f6c73 chore(deps): bump botocore from 1.35.19 to 1.35.20 (#5053) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-17 11:39:24 -04:00
dependabot[bot] 52981b54b9 chore(deps): bump trufflesecurity/trufflehog from 3.82.1 to 3.82.2 (#5052) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-17 08:36:42 -04:00
dependabot[bot] a366594714 chore(deps): bump boto3 from 1.35.16 to 1.35.19 (#5049) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 15:16:44 -04:00
Hugo Pereira Brito 1fb36f316b fix(cloudfront): duplicated link in cloudfront_distributions_https_sni_enabled check (#5047) 2024-09-16 15:16:26 -04:00
dependabot[bot] 30ffa8f00b chore(deps): bump azure-mgmt-containerservice from 31.0.0 to 32.0.0 (#5036) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 13:45:01 -04:00
Prowler Botandsergargar 5855918ade chore(regions_update): Changes in regions for AWS services (#5041) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-16 13:44:47 -04:00
dependabot[bot] f9005c875f chore(deps): bump botocore from 1.35.18 to 1.35.19 (#5037) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 12:52:59 -04:00
Mario Rodriguez LopezandSergio Garcia 91bf99ca45 feat(ec2): Ensure EC2 launch templates do not assign public IPs (#4852) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-16 12:52:40 -04:00
dependabot[bot] 8176063fef chore(deps): bump dash from 2.18.0 to 2.18.1 (#5024) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-16 11:25:08 -04:00
Mario Rodriguez LopezandSergio 3373822240 feat(ec2): EBS Volumes Should Be Covered by a Backup Plan (#5028) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 11:23:23 -04:00
Hugo Pereira BritoandSergio 7e16702b2f feat(cloudfront): add cloudfront_distributions_origin_traffic_encrypted check to ensure traffic encryption to custom origins (#4958) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 09:12:37 -04:00
Daniel BarranqueroandSergio f54b64f1f8 feat(rds): add new check rds_instance_inside_vpc (#5029) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-16 08:56:39 -04:00
dependabot[bot] 2c337ab3f6 chore(deps-dev): bump mkdocs-git-revision-date-localized-plugin from 1.2.8 to 1.2.9 (#5023) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 14:44:33 -04:00
dependabot[bot] 5279d937d7 chore(deps): bump botocore from 1.35.17 to 1.35.18 (#5021) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 11:24:55 -04:00
Hugo Pereira BritoandSergio 48c31a1616 feat(cloudfront): Add new cloudfront_distributions_s3_origin_access_control check to ensure OAC is configured in distributions (#4939) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-13 10:51:49 -04:00
Rubén De la Torre Vico 917a2ad0fe docs(check): change where extract ResourceTypes (#5030) 2024-09-13 10:51:09 -04:00
Rubén De la Torre Vico 8cfc4c56cf docs(dev-guide): refer poetry docs for installation (#5031) 2024-09-13 10:45:57 -04:00
Prowler Botandsergargar 99e9e42a17 chore(regions_update): Changes in regions for AWS services (#5027) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-13 10:38:08 -04:00
Jon YoungandVíctor Fernández Poyatos 6a341b88f0 fix(Providers, Resources, Scans): rename provider_id and filter on more provider fields (#42) 
* fix(Providers, Resources, Scans): filter on more provider fields

* Apply suggestions from code review

more python-y

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-13 16:09:09 +02:00
dependabot[bot] 13c95ba131 chore(deps): bump trufflesecurity/trufflehog from 3.81.10 to 3.82.1 (#5025) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 08:59:06 -04:00
LefterisXefterisLefteris GilmazSergio
 		600a8c7804 chore(aws): add mixed regions test for s3_access_point_public_access_block (#4877) 
Co-authored-by: Lefteris Gilmaz <lefterisgilmaz@Lefteriss-MacBook-Pro.local>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 15:58:39 -04:00
Hugo Pereira BritoandSergio Garcia 64fb52fc5e feat(cloudfront): add new check cloudfront_distributions_custom_ssl_certificate (#4959) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-12 15:00:48 -04:00
Mario Rodriguez LopezandSergio Garcia 92b6e7230d feat(ec2): Amazon EC2 Instances Should Not Use Multiple ENIs (#4935) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-12 14:29:36 -04:00
Hugo Pereira BritoandSergio cc8bc781c1 feat(elasticache): Ensure Redis replication groups have automatic failover enabled (#4853) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 12:23:15 -04:00
Hugo Pereira BritoandSergio edbe463d73 feat(cloudfront): Add new check cloudfront_distributions_default_root_object (#4938) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 10:58:24 -04:00
Sergio Garciaandpedrooot 8ace8c01cf chore(refactor): make Provider generation global (#4961) 
Co-authored-by: pedrooot <pedromarting3@gmail.com>
 2024-09-12 16:56:58 +02:00
Hugo Pereira BritoandSergio 8f37252676 feat(cloudfront): Ensure distributions use SNI to serve HTTPS requests (#4888) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-12 09:28:26 -04:00
Víctor Fernández Poyatos 1cef6f0db7 feat(Tasks): PRWLR-4826 add task_args to serializer (#41) 2024-09-12 09:07:08 -04:00
Mario Rodriguez Lopez c0c59968bf feat(ec2): Ensure both VPN tunnels for an AWS Site-to-Site VPN connection are UP (#4948) 2024-09-12 08:26:35 -04:00
dependabot[bot] 9f5a909be3 chore(deps): bump msgraph-sdk from 1.6.0 to 1.7.0 (#5013) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 14:10:50 +02:00
dependabot[bot] 90975bdadc chore(deps): bump pytz from 2024.1 to 2024.2 (#5012) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 11:32:58 +02:00
dependabot[bot] 7d1fad9eb7 chore(deps): bump botocore from 1.35.16 to 1.35.17 (#5011) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 10:50:07 +02:00
dependabot[bot] 983c79ad3b chore(deps): bump boto3 from 1.35.15 to 1.35.16 (#5010) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-12 09:16:53 +02:00
Mario Rodriguez LopezandSergio 96e73fcb63 feat(ec2): Amazon EC2 Paravirtual Instance Types Should Not Be Used (#4922) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 15:56:20 -04:00
Pedro Martín 70a3736073 fix(awslamba): add audit config to lambda_client in tests (#4999) 2024-09-11 12:15:22 -04:00
Jon YoungandVíctor Fernández Poyatos f7645e8f25 feat(Resources): add the /resources endpoint (#34) 
* fix(Resources): add basic Resource MVC

* fix(Resources): implement many-to-many tags via through table

* fix(Resources): tsvector & migration

migration needs work, need to create a custom
django migration field to build the GENERATED ALWAYS
column.

Without it, django will complain about the ts column
not exisiting when we try to create an index.

* test(Resources): add tests for /resources views

* fix(Resources): get basic test cases to pass

need to work on tsvector column
and filtering by provider columns like alias, name

* fix(Resources): provide way to get tags as dict

not a list of ResourceTag models

* fix(Resources): annotate with return type

* fix(Resources): rename search field to not conflict with filters

* fix(Resources): filter by provider.id

* fix(Resources): remove filter and sort by provider

must use provider_id first

* fix(Resources): test adding, clearing tags

* fix(Scans): filter by provider_id

* fix(Resources): remove FIXME comments

* fix(Resources): filter and search on tags

* fix(Resources): full text search

* fix(Resources): full text search to include both resources and tags

and get rid of the distinct() query

* fix(Resources): document text search a bit more

* fix(Resources): remove TODO comments

* fix(Resources): move Resource migrations into 0001_initital

* fix(Config): revert to match main

* fix(Resources): use Django's default query builder for full text search

* Apply suggestions from code review

Mostly formatting changes

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>

* fix(Resources): just use text search

instead of guessing at allowed split characters for each provider

* fix(Resources): remove unused tests

these cases are covered in parameterized lists

* fix(Resources): set a read-only RLS policy

* fix(Resources): rename add_tags to be upsert_or_delete_tags

* fix(Resources): include primary key on through table

django query builder doesn't like tables without primary keys

* fix(Resources): default xx_at filters to date

instead of date time

* docs(Resources): describe what a Resource is

in API docs

* chore(Resources): rename file to match others

---------

Co-authored-by: Víctor Fernández Poyatos <victor@prowler.com>
 2024-09-11 18:04:34 +02:00
Pedro Martín 1e8e8ba65c fix(iam-gcp): add getters in iam_service for gcp (#4998) 2024-09-11 11:01:58 -04:00
Pablo Lara 0adb8c142b Merge pull request #56 from prowler-cloud/PRWLR-4776-Implementing-check-connection-real-CASE 
Starting implementing check connection and style tweaks for the Provider's table
 2024-09-11 16:54:24 +02:00
dependabot[bot]andSergio 359a1f2c8e chore(deps): bump botocore from 1.35.15 to 1.35.16 (#4989) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 10:53:18 -04:00
Pablo Lara e7eb57375e feat: the search debounce is working now as expected 2024-09-11 16:49:43 +02:00
Mario Rodriguez LopezandSergio Garcia 2e4f8cbfc7 feat(ec2): Ensure not default Network Access Control Lists are used (#4917) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-09-11 09:55:18 -04:00
Prowler Botandsergargar 482aee0d9d chore(regions_update): Changes in regions for AWS services (#4995) 
Co-authored-by: sergargar <38561120+sergargar@users.noreply.github.com>
 2024-09-11 09:52:28 -04:00
Daniel BarranqueroandSergio 0ae3374e81 feat(aws): Add new check to ensure Aurora MySQL DB Clusters publish audit logs to CloudWatch logs (#4916) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-09-11 09:10:49 -04:00
Mario Rodriguez Lopez ddc088859e feat(vpc): Ensure Amazon EC2 Is Configured to Use VPC Endpoints Created for the Amazon EC2 Service (#4872) 2024-09-11 09:08:25 -04:00
Pablo Lara d264a16065 Merge branch 'main' into PRWLR-4776-Implementing-check-connection-real-CASE 2024-09-11 15:04:23 +02:00
Pablo Lara 67f572285b refactor: tweaks styles for providers table 2024-09-11 15:03:51 +02:00
dependabot[bot] 5e3da2d687 chore(deps): bump google-api-python-client from 2.144.0 to 2.145.0 (#4990) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-11 13:28:13 +02:00