ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-22 03:51:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,638 Commits 491 Branches 213 Tags
87f5d32bb3b330bba0d4e69cc00a442142a1fa89
Commit Graph

886 Commits

Author SHA1 Message Date
Prowler Bot 52406f6df2 fix(aws): disallow child-accounts to overwrite policy for ai_services_opt_out (#6291) 2024-12-20 11:53:15 -05:00
Prowler Bot 3786cbcd5f fix(aws): set unique resource IDs (#6191) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-13 09:07:39 -04:00
Prowler Bot 4c4f12ffda fix(aurora): Add default ports to the check of using non default ports (#6150) 
Co-authored-by: Mads Brouer Lundholm <mads@madslundholm.dk>
 2024-12-11 14:58:29 -04:00
Prowler Bot 4c0729378d fix(autoscaling): autoscaling_group_launch_configuration_requires_imdsv2 fails if Launch Template is used (#6146) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2024-12-11 12:06:35 -04:00
Prowler Bot 9606cf21eb fix(app): add support for TLS 1.3 to Web Apps check (#6143) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
 2024-12-11 10:28:53 -04:00
Prowler Bot d3da9dd90e fix(iam): set unique resource id for each user access key (#6133) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-11 09:25:40 -04:00
Prowler Bot 8eac17d826 fix(aws): get firewall manager managed rule groups (#6123) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2024-12-10 16:47:01 -04:00
Prowler Bot 74776bed06 fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6120) 
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
 2024-12-10 14:30:45 -04:00
Prowler Bot 7db74516b3 fix(aws): set IAM identity as resource in threat detection (#6117) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-10 13:37:27 -04:00
Prowler Bot 3ae2f9e0bf fix(gcp): make sure default project is active (#6112) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-10 11:53:28 -04:00
Prowler Bot b60edc1f6b fix(tests): use datetime.datetime.now() in GCP kms_key_rotation_enabled (#6083) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-12-09 11:06:37 -04:00
Prowler Bot c627a3e9aa fix(azure): containerregistry_not_publicly_accesible is not accurate (#5966) 
Co-authored-by: StylusFrost <43682773+StylusFrost@users.noreply.github.com>
 2024-11-29 09:53:06 -04:00
Prowler Bot 412d948585 fix(aws): exclude threat detection checks if category not present (#5934) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-27 12:56:00 -04:00
Prowler Bot 6bc0432ed5 fix(list_by_service): execute lambda if requested (#5931) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-11-27 11:22:49 -04:00
Prowler Bot 3ce785a7b4 chore(aws): update fixers docstring (#5878) 
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
 2024-11-25 13:01:45 -04:00
sansns-aws 53a4befb01 feat(aws): add MemoryDB service (#5546) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-22 15:13:16 -04:00
StylusFrost fee0bf3ea1 feat(azure): AI Search service check not publicly accesible (#5846) 
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-22 13:28:44 -04:00
Daniel Barranquero 6811a22651 feat(documentdb): add new fixer documentdb_cluster_public_snapshot_fixer (#5759) 2024-11-22 11:14:24 -04:00
Daniel Barranquero fe2dd69b08 feat(neptune): add new fixer neptune_cluster_public_snapshot_fixer (#5749) 2024-11-22 11:13:18 -04:00
Daniel Barranquero 00054b5cd9 feat(ec2): add new fixer ec2_ebs_public_snapshot_fixer (#5825) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-21 12:40:28 -04:00
Daniel Barranquero 861fb22257 feat(kms): add new fixer kms_cmk_not_deleted_unintentionally_fixer (#5842) 2024-11-21 11:45:55 -04:00
Daniel Barranquero 09ea6ba6c4 feat(rds): add new fixer rds_instance_no_public_access_fixer (#5794) 2024-11-21 11:42:03 -04:00
Pedro Martín 2e20d52030 feat(compliance): add ENSRD2022 for Azure and GCP (#5746) 2024-11-21 09:36:47 +01:00
sansns-aws 9b0b61ef02 feat(sgw): add storagegateway_fault_tolerance check (#5570) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-20 15:10:44 -04:00
Sergio Garcia 4b7883c464 fix(kubernetes): filter apiGroup in permission checks (#5829) 2024-11-20 15:06:06 +01:00
Pedro Martín 096749a455 refactor(arn): fine tune arn and resources id for unknown values (#5841) 2024-11-20 12:56:51 +01:00
Pedro Martín b06e549d81 refactor(arn): refactor arn for unknown resources (#5712) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-19 16:21:43 -04:00
Rubén De la Torre Vico e33b081dc6 chore(iam): add exception for public policy in EKS service (#4759) 2024-11-19 09:42:56 -04:00
Daniel Barranquero f5e71db5e0 fix(rds): fix typo error in rds_snapshots_public_access_fixer test (#5826) 2024-11-19 09:23:52 -04:00
Sergio Garcia c69571abcd feat(aws): add new check iam_root_credentials_management_enabled (#5801) 2024-11-18 16:59:35 +01:00
Pedro Martín 8be83fc632 fix(compliance): use SubscriptionID instead of name for Azure CIS (#5786) 2024-11-15 14:40:33 +01:00
Hugo Pereira Brito 7a711095cd feat(kinesis): add new check kinesis_stream_data_retention_period (#5547) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-14 12:01:01 -05:00
Daniel Barranquero b0bb348480 feat(rds): add new fixer rds_snapshots_public_access_fixer (#5773) 2024-11-14 10:40:33 -05:00
Hugo Pereira Brito c1b050b8b9 feat(firehose): add new check firehose_stream_encrypted_at_rest (#5635) 
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
 2024-11-14 10:27:17 -05:00
Víctor Fernández Poyatos 28c7e803ac feat(azure): Add get_regions method for provider (#5774) 2024-11-14 15:58:12 +01:00
Pepe Fagoaga cb74dae296 refactor(aws): Rename get_regions and validate partition (#5772) 2024-11-14 13:02:32 +01:00
Rubén De la Torre Vico 73361a1cea chore(ec2): add name from image information to status_extended (#5755) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-13 14:30:58 -05:00
Pedro Martín 06b41cf8e6 refactor(azure): get locations with self session (#5751) 2024-11-13 19:00:18 +01:00
Pedro Martín a419b4b898 feat(aws): get regions by partition (#5748) 2024-11-13 18:52:50 +01:00
Sergio Garcia 796983a530 fix(gcp): scan only ACTIVE projects (#5743) 2024-11-13 15:18:42 +01:00
Hugo Pereira Brito dca49b1972 feat(aws): add new service firehose (#5620) 
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
 2024-11-12 17:41:46 -05:00
dependabot[bot] 9d65b49cb4 chore(deps): bump azure-mgmt-network from 27.0.0 to 28.0.0 (#5703) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
Co-authored-by: Sergio Garcia <38561120+MrCloudSec@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
 2024-11-12 13:37:51 -05:00
Sergio Garcia f1334190d8 fix(aws): remove cloudwatch_log_group_no_critical_pii_in_logs check (#5736) 2024-11-12 12:50:47 -05:00
sansns-aws 10766d708d feat(mq): add mq_broker_not_publicly_accessible check (#5604) 
Co-authored-by: Sergio <sergio@prowler.com>
 2024-11-11 12:12:21 -05:00
Mario Rodriguez Lopez f231d8b080 feat(appsync): add new check appsync_field_level_logging_enabled (#5602) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-11-11 10:23:13 -05:00
Pedro Martín f1f68da25d feat(jira): add jira integration (#5629) 
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
 2024-11-11 15:00:31 +01:00
Matt Johnson 344d54155a docs: Update contact.md with new Slack join URL (#5671) 2024-11-11 12:06:16 +01:00
Mario Rodriguez Lopez 5de13bdd8a fix(ec2): unique finding per Security Group in high risk ports check (#5697) 2024-11-08 14:08:27 -05:00
Mario Rodriguez Lopez 716558ffcb feat(servicecatalog): Add new check servicecatalog_portfolio_shared_within_organization_only (#5632) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-11-08 12:22:13 -05:00
Mario Rodriguez Lopez 6bdcb509e1 feat(appsync): add new check appsync_graphql_apis_no_api_key_authentication (#5591) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2024-11-07 11:42:07 -05:00