Commit Graph
675 Commits
Author SHA1 Message Date
Toni de la Fuente 7b848c04c4 Added FAIL as error handling when SCP prevents queries to regions 2022-01-06 13:43:48 +01:00
Toni de la Fuente f0e8c79928 Added passed security groups and updated title to check 777 2022-01-06 13:40:19 +01:00
Toni de la Fuente 7a0e180cee Added passed security groups in output to check 778 2022-01-06 13:35:24 +01:00
Toni de la Fuente 9e90bde554 Changed Route53 checks 7152 and 7153 title to clarify 2022-01-06 13:12:24 +01:00
Toni de la Fuente d65eabcd9e Changed Route53 checks7152 and 7153 to INFO when no domains found 2022-01-06 13:08:11 +01:00
Toni de la Fuente d1eca877dd Add AWS Advance Shield protection checks corrections 2021-12-29 11:35:17 +01:00
Michael Dickinson d707f5d994 Include example for global resources 2021-12-23 22:36:53 +00:00
Michael Dickinson 586d1f308c New check 7171 Classic load balancers are protected by AWS Shield Advanced 2021-12-23 22:30:01 +00:00
Michael Dickinson ab9e40c4dd New check 7170 Application load balancers are protected by AWS Shield Advanced 2021-12-23 22:30:01 +00:00
Michael Dickinson 472afa5a1f New check 7169 Global accelerators are protected by AWS Shield Advanced 2021-12-23 22:30:01 +00:00
Michael Dickinson 122e1c0cf8 New check 7168 Route53 hosted zones are protected by AWS Shield Advanced 2021-12-23 22:30:01 +00:00
Michael Dickinson 4aa4c95d22 New check 7167 Cloudfront distributions are protected by AWS Shield Advanced 2021-12-23 22:30:01 +00:00
Michael Dickinson 7690cb5f98 New check 7166 Elastic IP addresses with associations are protected by AWS Shield Advanced 2021-12-23 22:21:51 +00:00
Toni de la Fuente 39171b7387 Fixed CIS LEVEL on 7163 through 7165 2021-12-22 15:54:50 +01:00
Joseph de CLERCK c5416fdeec remove commas 2021-12-21 17:55:10 -05:00
Joseph de CLERCK 050a565440 fix checks with comma issues 2021-12-20 14:38:24 -05:00
Toni de la Fuente 49ea3d8589 Fix #940 handling error when can not list functions 2021-12-09 12:19:45 +01:00
Toni de la Fuente 78faa8f365 Fix #962 check 7147 ALTERNATE NAME 2021-12-09 11:48:20 +01:00
Toni de la Fuente c241f0008a Fix #957 check 763 had us-east-1 region hardcoded 2021-12-09 10:01:34 +01:00
Toni de la Fuente f98f1f8a1d Merge branch '2.7' of https://github.com/toniblyx/prowler into 2.7 2021-12-09 09:54:14 +01:00
Toni de la Fuente 65c95a8354 Fix #963 check 792 to force json in ELB queries 2021-12-09 09:54:05 +01:00
Toni de la Fuente bfdc88123c New check 7165 DynamoDB: DAX encrypted at rest @Daniel-Peladeau @7thseraph @maisenhe
New check 7165 DynamoDB: DAX encrypted at rest @Daniel-Peladeau @7thseraph @maisenhe
2021-12-07 15:55:10 +01:00
Daniel Peladeau 15c5409b0b New check 7165 DynamoDB: DAX encrypted at rest @Daniel-Peladeau 2021-12-07 08:42:31 -05:00
Toni de la Fuente 334a8c2b13 New check 7164 Cloudwatch log groups are protected by KMS @maisenhe
New check 7164 Cloudwatch log groups are protected by KMS @maisenhe
2021-12-02 18:36:25 +01:00
Joel Maisenhelder 6ff94b2b60 updated CHECK_RISK 2021-12-02 09:01:54 -06:00
Joel Maisenhelder e1e57db93e New check 7164 Check if Cloudwatch log groups are protected by AWS KMS@maisenhe 2021-12-01 19:44:34 -06:00
Toni de la Fuente 1f27f08489 New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
New check 7163 Secrets Manager key rotation enabled @Daniel-Peladeau
2021-11-25 15:22:35 +01:00
Daniel Peladeau a101352219 Updating check_extra7163 with requested changes 2021-11-23 22:29:12 -05:00
Toni de la Fuente d45cab2b0a New check 7162 CloudWatch log groups have 365 days retention @Obiakara
New check 7162 CloudWatch log groups have 365 days retention @Obiakara
2021-11-23 11:12:43 +01:00
Toni de la Fuente 8e793c9060 New check 7161 EFS encryption at rest enabled @rustic
New check 7161 EFS encryption at rest enabled @rustic
2021-11-23 11:03:23 +01:00
Toni de la Fuente 5ae04717fa New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
New check 7160 Redshift cluster AutomaticVersionUpgrade enabled @jonloza
2021-11-23 11:02:40 +01:00
Jonathan Lozano 49f1060922 New check7160 Enabled AutomaticVersionUpgrade on RedShift Cluster 2021-11-22 16:06:10 -05:00
Daniel Peladeau 65cf527d5a New check_extra7163 Secrets Manager key rotation enabled 2021-11-21 16:36:49 -05:00
Lee Myers e7a5d7266c Extra7161 EFS encryption at rest check 2021-11-19 17:28:12 -05:00
Chinedu Obiakara 2af565ead1 changed check title, resource type and service name as well as making the code more dynamic 2021-11-19 13:31:14 -06:00
Chinedu Obiakara 1fd2e36049 fixed code to handle all regions and formatted output 2021-11-19 12:00:15 -06:00
Chinedu Obiakara 68b26700c1 Added check_extra7162 which checks if Log groups have 365 days retention 2021-11-19 09:28:16 -06:00
Lee Myers c6858f1d0e Extra7161 EFS encryption at rest check 2021-11-18 20:25:25 -05:00
Toni de la Fuente cee6437ae1 Fix issue #926 resource id and remediation typo 2021-11-15 16:49:40 +01:00
Toni de la Fuente b251f31da9 Fix issue #925 replace sensible by sensitive 2021-11-15 15:59:13 +01:00
Toni de la Fuente a6ba580344 Fix severity case variable 2021-11-15 15:45:33 +01:00
Toni de la Fuente 82b7eca80a Fix CIS LEVEL variable in check21 2021-11-11 14:00:33 +01:00
Toni de la Fuente 140e96e5e1 Fix issue #848 CIS LEVEL added to CSV and other formats 2021-11-11 13:40:40 +01:00
Toni de la Fuente 6921eaa6e9 Fix issue #868 2021-11-11 11:25:12 +01:00
Toni de la Fuente a5dfa788a6 New check 7159 ELB Classic Load balancer has listeners underneath @kbgoll05
New check 7159 ELB Classic Load balancer has listeners underneath @kbgoll05
2021-11-10 16:49:10 +01:00
Toni de la Fuente afed5eb4b2 New check 7158 ELBV2 has listeners underneath @kbgoll05
New check 7158 ELBV2 has listeners underneath @kbgoll05
2021-11-10 16:48:45 +01:00
kbgoll05 226b016557 Add files via upload 2021-11-05 16:02:25 -05:00
kbgoll05 41c6131d10 Add files via upload 2021-11-05 15:50:54 -05:00
Toni de la Fuente 2c1fd8aeb4 New Check 7157 API Gateway V2 has Configured Authorizers @qumei
New Check 7157 API Gateway V2 has Configured Authorizers @qumei
2021-10-26 14:31:10 +02:00
Toni de la Fuente 1c7d3c452f Fix Shodan typo in -h usage text @jfagoagas
Fix Shodan typo in -h usage text @jfagoagas
2021-10-26 12:42:44 +02:00