ben.carrasco/prowler
1
0 Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-10 21:44:16 +00:00
Code Issues Packages Projects Releases Wiki Activity
871 Commits 579 Branches 224 Tags
8393383830b419476e77cc1d4167351ef00a75f4
Commit Graph
259 Commits
Author SHA1 Message Date
Nimrod Kor 8393383830 Fix credentials 2019-12-26 16:41:25 +02:00
Nimrod Kor 70879ba1e0 Small check fixes 2019-12-18 13:23:51 +02:00
Nimrod Kor 15a58124d7 Merge remote-tracking branch 'tony/master' 2019-12-17 15:28:56 +02:00
Toni de la Fuente 0d120a4536 Merge pull request #437 from bridgecrewio/feature/check_bucket_policies_public_write 
Check bucket policies public write
 2019-12-17 10:41:35 +01:00
Toni de la Fuente 0ab5d87b8f Merge pull request #433 from kmcquade/check/public-instance-with-instance-profile-attached 
Added check_extra770, which checks for internet facing instances with an instance profile attached
 2019-12-17 10:40:01 +01:00
Toni de la Fuente 933e4152cc Merge pull request #435 from bridgecrewio/feature/fix_check26 
Fix check26 - get the account ID from sts
 2019-12-17 10:14:11 +01:00
Nimrod Kor fc3f4e830e Reuse ACCOUNT_NUM 2019-12-17 09:29:06 +02:00
Nimrod Kor 72976cc225 Feature/check public write buckets (#5) 
* Copy checks to overwrite the old checks in the docker

* Initial commit

* Change to check 771
 2019-12-15 18:50:48 +02:00
Nimrod Kor 7e803bb6a9 Change to check 771 2019-12-15 18:18:02 +02:00
Nimrod Kor 2d5d551696 Initial commit 2019-12-15 18:18:02 +02:00
Nimrod Kor 8e1aa17a80 Fix check26 - get the account ID from sts 
(cherry picked from commit ae20d9c5b7)
 2019-12-15 15:55:54 +02:00
Nimrod Kor ae20d9c5b7 Fix check26 - get the account ID from sts 2019-12-15 15:53:46 +02:00
Kinnaird McQuade 3b264d556b Added check_extra770, which checks for internet facing instances with an Instance Profile attached. 2019-12-12 11:07:14 -05:00
Nimrod Kor 559b0585dc Add trail count to check21 and fail if no trail exist 
(cherry picked from commit fcf28dfa70)
 2019-12-12 09:45:06 +02:00
Nimrod Kor fcf28dfa70 Add trail count to check21 and fail if no trail exist 2019-12-12 09:42:42 +02:00
Nimrod Kor 2e543b4f50 Merge branch 'master' of https://github.com/toniblyx/prowler 2019-12-05 23:09:21 +02:00
Toni de la Fuente 7b5ece8007 New check IAM Access Analyzer issue #428 2019-12-03 15:58:19 +01:00
Toni de la Fuente fe65eaf373 New check ECS scan on push issue #427 2019-12-03 15:27:09 +01:00
Nimrod Kor 9d07391a61 Fix unnecessary `` 2019-11-26 17:14:07 +02:00
Toni de la Fuente dce9d5c96d Merge pull request #423 from barnhartguy/master 
Update check_extra768
 2019-11-25 10:03:27 +01:00
Nimrod Kor 79b62e0a91 Merge remote-tracking branch 'tony/master' 
# Conflicts:
#	.gitignore
#	groups/group11_secrets
 2019-11-25 09:35:16 +02:00
Nimrod Kor 302b856804 Merge remote-tracking branch 'tony/master' 
# Conflicts:
#	checks/check_extra742
#	checks/check_extra763
 2019-11-25 09:34:08 +02:00
Will Thames 2e11e0a3f2 Fix extra764 check 
Add missing bracket to prevent:

```
jq: error: syntax error, unexpected INVALID_CHARACTER, expecting $end (Unix shell quoting issues?) at <top-level>, line 1:
.Statement[]|select(((.Principal|type == "object") and .Principal.AWS == "*") or ((.Principal|type == "string") and
.Principal == "*")) and .Action=="s3:*" and (.Resource|type == "array") and (.Resource|map({(.):0})[]|has($arn)) and
(.Resource|map({(.):0})[]|has($arn+"/*")) and .Condition.Bool."aws:SecureTransport" == "false")
```

(line breaks added to reduce commit width)
 2019-11-25 16:01:26 +10:00
barnhartguy c630c02a26 Update check_extra768 
fixed typo
 2019-11-24 14:37:09 +02:00
Toni de la Fuente 8f91bfee24 clean up documentation and added info to check_sample 2019-11-22 11:59:03 +01:00
Toni de la Fuente c513e7af6c Merge pull request #420 from bridgecrewio/feature/ecs_task_definition_secrets_check_contribute 
Add ECS task definition environment variables check
 2019-11-22 00:18:00 +01:00
Toni de la Fuente 2e1cead3a2 Merge pull request #419 from zfLQ2qx2/prowler-extra719 
Filter out private zones in check extra719
 2019-11-22 00:12:36 +01:00
Toni de la Fuente 5c8b0aa942 Merge pull request #418 from zfLQ2qx2/prowler-check726 
Handle Trusted Advisor entitlement issue gracefully
 2019-11-22 00:10:39 +01:00
Toni de la Fuente 15dda01842 Merge pull request #417 from zfLQ2qx2/prowler-misc-updates 
Update extra764 and extra734, add .gitignore rules for vim
 2019-11-22 00:09:35 +01:00
Nimrod Kor d19ae27f7c Fix merge issue 2019-11-21 12:48:17 -08:00
Nimrod Kor b61af3a9eb Add ECS task definition environment variables check 
(cherry picked from commit 662f287dd6)
 2019-11-21 12:44:09 -08:00
Nimrod Kor 662f287dd6 Add ECS task definition environment variables check 2019-11-21 12:39:22 -08:00
zfLQ2qx2 687686c929 Filter out private zones in check extra719 2019-11-21 15:36:38 -05:00
zfLQ2qx2 94a90599bd Handle Trusted Advisor entitlement issue gracefully 2019-11-21 15:17:03 -05:00
zfLQ2qx2 669469e618 Update extra764 and extra734, add .gitignore rules for vim 2019-11-21 14:56:13 -05:00
Toni de la Fuente 961b79a4aa Added extra767 for CloudFront field level encryption issue #425 2019-11-21 17:48:34 +01:00
Toni de la Fuente 264b84ae2a Added check_extra765 ECR scanning issue #406 2019-11-21 00:52:18 +01:00
Toni de la Fuente d737193b98 Merge pull request #407 from zfLQ2qx2/prowler_misc_fixes 
Misc prowler fixes


    Add GetEbsEncryptionByDefault wherever Prowler policies are mentioned
    Update Extra718 check to be aware of access denied responses
    Update Extra726 check to be more verbose for non-failure items
    Update Extra73 check to be aware of access denied responses
    Update Extra734 check to be aware of access denied responses and parse policies with jq for better accuracy
    Update Extra742 check for verbiage
    Update Extra756 check for verbiage and parameter order
    Update Extra761 check for failure scenarios (requires most recent awscli and addition to Prowler IAM policy)
    Added Extra763 check to verify that object versioning is enabled on S3 buckets
    Added Extra764 check to verify that S3 buckets enforce a secure transport policy
 2019-11-20 22:03:02 +00:00
Toni de la Fuente 649192eb41 Merge pull request #411 from zfLQ2qx2/prowler-extra75-enhancement 
Update extra75 to be aware of default security groups
 2019-11-20 21:46:21 +00:00
zfLQ2qx2 054043d78e Update extra75 to aware of default security groups 2019-11-20 00:09:35 -05:00
zfLQ2qx2 603ed0b16f Update log metric filter checks to latest AWS CIS Foundations Benchmark and provide hints on how to remediate 2019-11-19 01:37:42 -05:00
zfLQ2qx2 3a893889b6 Misc prowler fixes 2019-11-13 22:49:32 -05:00
Nimrod Kor 15f1c1a236 Fix the check extra760 to not delete the secrets folder 2019-11-05 09:38:39 +02:00
Nimrod Kor 3634dcf1d0 Merge remote-tracking branch 'origin/master' 2019-11-04 23:32:39 +02:00
Nimrod Kor 8a4362e2e0 Save the secrets found to the account folder for analysis 2019-11-04 23:32:28 +02:00
Nimrod Kor 3484f3a0bc Merge pull request #3 from toniblyx/master 
Updates from fork
 2019-10-31 16:10:42 +02:00
Toni de la Fuente 18e5c0b8ae Merge pull request #404 from gabrielsoltz/check_extra731_jq 
Extra 731 with JQ
 2019-10-28 15:36:43 +01:00
Toni de la Fuente e748275fc5 Merge pull request #403 from gabrielsoltz/check_extra727_smarter 
Check extra727 smarter (SQS)
 2019-10-28 15:35:45 +01:00
gabrielsoltz 8bb1529c2a jq_improvements 2019-10-25 16:46:36 +02:00
gabrielsoltz 61ef02ec50 reduce_api_calls 2019-10-25 16:42:59 +02:00