Sergio Garcia
|
7b1a0474db
|
fix(aws): set unique resource IDs (#6152)
|
2024-12-13 13:00:38 +01:00 |
|
Daniel Barranquero
|
7d2c50991b
|
feat(s3): add new fixer s3_bucket_public_access_fixer (#6164)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-12-12 12:17:41 -04:00 |
|
Daniel Barranquero
|
be347b2428
|
feat(ec2): add new check ec2_launch_template_imdsv2_required (#6139)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-12-12 11:27:20 -04:00 |
|
Daniel Barranquero
|
a90c772827
|
feat(s3): add new fixer s3_bucket_public_list_acl_fixer (#6166)
|
2024-12-12 11:16:46 -04:00 |
|
Daniel Barranquero
|
26c70976c0
|
feat(s3): add new fixer s3_bucket_public_write_acl_fixer (#5855)
|
2024-12-12 11:10:43 -04:00 |
|
Daniel Barranquero
|
6e595eaf92
|
feat(ec2): add new fixer ec2_instance_port_cifs_exposed_to_internet_fixer (#6159)
|
2024-12-12 09:22:56 -04:00 |
|
Mads Brouer Lundholm
|
bd9673c9de
|
fix(aurora): Add default ports to the check of using non default ports (#5821)
Co-authored-by: Mads Rantala Lundholm <mao@bankdata.dk>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
|
2024-12-11 13:01:45 -04:00 |
|
johannes-engler-mw
|
eded97d735
|
feat(azure): check for minimal TLS version for Azure SQL server (#5745)
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
|
2024-12-11 16:37:53 +01:00 |
|
Daniel Barranquero
|
fdb1956b0b
|
feat(opensearch): add new fixer opensearch_service_domains_not_publicly_accessible_fixer (#5926)
|
2024-12-11 11:29:48 -04:00 |
|
Daniel Barranquero
|
a915c04e9e
|
fix(autoscaling): autoscaling_group_launch_configuration_requires_imdsv2 fails if Launch Template is used (#6111)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-12-11 11:18:30 -04:00 |
|
Daniel Barranquero
|
07178ac69a
|
feat(glacier): add new fixer glacier_vaults_policy_public_access_fixer (#5950)
|
2024-12-11 11:10:12 -04:00 |
|
Daniel Barranquero
|
9b434d4856
|
feat(ecr): add new fixer ecr_repositories_not_publicly_accessible_fixer (#5923)
|
2024-12-11 10:42:11 -04:00 |
|
Rubén De la Torre Vico
|
d7b0bc02ba
|
feat(app): add support for TLS 1.3 to Web Apps check (#6004)
|
2024-12-11 13:14:29 +01:00 |
|
Sergio Garcia
|
989ccf4ae3
|
fix(iam): set unique resource id for each user access key (#6128)
|
2024-12-11 09:13:49 +01:00 |
|
Hugo Pereira Brito
|
8d4b0914a8
|
fix(aws): get firewall manager managed rule groups (#6119)
|
2024-12-10 15:34:22 -04:00 |
|
Hugo Pereira Brito
|
1ae3f89aab
|
fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6108)
|
2024-12-10 13:42:13 -04:00 |
|
Daniel Barranquero
|
b984f0423a
|
feat(sqs): add new fixer sqs_queues_not_publicly_accessible_fixer (#5911)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-12-10 12:26:42 -04:00 |
|
Sergio Garcia
|
f2f196cfcd
|
fix(aws): set IAM identity as resource in threat detection (#6048)
|
2024-12-10 17:03:01 +01:00 |
|
Sergio Garcia
|
48946fa4f7
|
fix(gcp): make sure default project is active (#6097)
|
2024-12-10 11:06:48 -04:00 |
|
Daniel Barranquero
|
7ddd2c04c8
|
feat(awslambda): add new fixer awslambda_function_not_publicly_accessible_fixer (#5840)
|
2024-12-09 12:28:42 -04:00 |
|
Sergio Garcia
|
17c31c64d9
|
fix(tests): use datetime.datetime.now() in GCP kms_key_rotation_enabled (#5976)
|
2024-11-30 16:31:56 -04:00 |
|
StylusFrost
|
d5bb5e9287
|
fix(azure): containerregistry_not_publicly_accesible is not accurate (#5938)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: Rubén De la Torre Vico <ruben@prowler.com>
|
2024-11-29 14:06:55 +01:00 |
|
Sergio Garcia
|
17a39f3305
|
fix(aws): exclude threat detection checks if category not present (#5933)
|
2024-11-27 11:54:59 -04:00 |
|
Pepe Fagoaga
|
f576b24fc8
|
fix(list_by_service): execute lambda if requested (#5930)
|
2024-11-27 15:32:57 +01:00 |
|
Mario Rodriguez Lopez
|
9c383baff3
|
fix(ec2): Change ec2_sg_high_risk_ports configurable parameter name (#5904)
|
2024-11-26 08:24:45 -04:00 |
|
Daniel Barranquero
|
a67e3f4c58
|
chore(aws): update fixers docstring (#5874)
|
2024-11-25 11:16:16 -04:00 |
|
sansns-aws
|
53a4befb01
|
feat(aws): add MemoryDB service (#5546)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-22 15:13:16 -04:00 |
|
StylusFrost
|
fee0bf3ea1
|
feat(azure): AI Search service check not publicly accesible (#5846)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-22 13:28:44 -04:00 |
|
Daniel Barranquero
|
6811a22651
|
feat(documentdb): add new fixer documentdb_cluster_public_snapshot_fixer (#5759)
|
2024-11-22 11:14:24 -04:00 |
|
Daniel Barranquero
|
fe2dd69b08
|
feat(neptune): add new fixer neptune_cluster_public_snapshot_fixer (#5749)
|
2024-11-22 11:13:18 -04:00 |
|
Daniel Barranquero
|
00054b5cd9
|
feat(ec2): add new fixer ec2_ebs_public_snapshot_fixer (#5825)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-21 12:40:28 -04:00 |
|
Daniel Barranquero
|
861fb22257
|
feat(kms): add new fixer kms_cmk_not_deleted_unintentionally_fixer (#5842)
|
2024-11-21 11:45:55 -04:00 |
|
Daniel Barranquero
|
09ea6ba6c4
|
feat(rds): add new fixer rds_instance_no_public_access_fixer (#5794)
|
2024-11-21 11:42:03 -04:00 |
|
Pedro Martín
|
2e20d52030
|
feat(compliance): add ENSRD2022 for Azure and GCP (#5746)
|
2024-11-21 09:36:47 +01:00 |
|
sansns-aws
|
9b0b61ef02
|
feat(sgw): add storagegateway_fault_tolerance check (#5570)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-20 15:10:44 -04:00 |
|
Sergio Garcia
|
4b7883c464
|
fix(kubernetes): filter apiGroup in permission checks (#5829)
|
2024-11-20 15:06:06 +01:00 |
|
Pedro Martín
|
096749a455
|
refactor(arn): fine tune arn and resources id for unknown values (#5841)
|
2024-11-20 12:56:51 +01:00 |
|
Pedro Martín
|
b06e549d81
|
refactor(arn): refactor arn for unknown resources (#5712)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-19 16:21:43 -04:00 |
|
Rubén De la Torre Vico
|
e33b081dc6
|
chore(iam): add exception for public policy in EKS service (#4759)
|
2024-11-19 09:42:56 -04:00 |
|
Daniel Barranquero
|
f5e71db5e0
|
fix(rds): fix typo error in rds_snapshots_public_access_fixer test (#5826)
|
2024-11-19 09:23:52 -04:00 |
|
Sergio Garcia
|
c69571abcd
|
feat(aws): add new check iam_root_credentials_management_enabled (#5801)
|
2024-11-18 16:59:35 +01:00 |
|
Pedro Martín
|
8be83fc632
|
fix(compliance): use SubscriptionID instead of name for Azure CIS (#5786)
|
2024-11-15 14:40:33 +01:00 |
|
Hugo Pereira Brito
|
7a711095cd
|
feat(kinesis): add new check kinesis_stream_data_retention_period (#5547)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-14 12:01:01 -05:00 |
|
Daniel Barranquero
|
b0bb348480
|
feat(rds): add new fixer rds_snapshots_public_access_fixer (#5773)
|
2024-11-14 10:40:33 -05:00 |
|
Hugo Pereira Brito
|
c1b050b8b9
|
feat(firehose): add new check firehose_stream_encrypted_at_rest (#5635)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-14 10:27:17 -05:00 |
|
Víctor Fernández Poyatos
|
28c7e803ac
|
feat(azure): Add get_regions method for provider (#5774)
|
2024-11-14 15:58:12 +01:00 |
|
Pepe Fagoaga
|
cb74dae296
|
refactor(aws): Rename get_regions and validate partition (#5772)
|
2024-11-14 13:02:32 +01:00 |
|
Rubén De la Torre Vico
|
73361a1cea
|
chore(ec2): add name from image information to status_extended (#5755)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-13 14:30:58 -05:00 |
|
Pedro Martín
|
06b41cf8e6
|
refactor(azure): get locations with self session (#5751)
|
2024-11-13 19:00:18 +01:00 |
|
Pedro Martín
|
a419b4b898
|
feat(aws): get regions by partition (#5748)
|
2024-11-13 18:52:50 +01:00 |
|