root
4cc5cd1ab1
Try to make sure prowler cleans up its temporary files
2019-12-30 13:43:53 -05:00
Toni de la Fuente
f3bfe90587
Add native support for AssumeRole clean up issue #445
2019-12-30 18:32:00 +01:00
Toni de la Fuente
53ea126065
Add native support for AssumeRole issue #445
2019-12-30 18:30:25 +01:00
root
688f028698
Add additional error checkings to check extra769
2019-12-30 11:33:12 -05:00
Toni de la Fuente
74380a62d9
Merge pull request #443 from zfLQ2qx2/update_ecr_checks
...
Add error checking to checks extra77 and extra765
2019-12-30 16:31:27 +01:00
root
c84190c3d9
Add error checking to checks extra77 and extra765
2019-12-30 10:07:14 -05:00
Toni de la Fuente
42f15ce164
Merge pull request #441 from dbellizzi/master
...
Add quiet mode that only logs failures
2019-12-27 12:33:13 +01:00
Toni de la Fuente
23be47a9b6
Enhanced title for check extra723
2019-12-27 12:09:35 +01:00
Toni de la Fuente
ab75f19a62
Merge pull request #440 from bridgecrewio/feature/small_fixes_to_extra731_extra716
...
Small check fixes to extra716 & extra731
2019-12-27 12:02:55 +01:00
Toni de la Fuente
20b127f516
Added DS IAM actions
2019-12-26 16:34:24 +01:00
Nimrod Kor
8393383830
Fix credentials
2019-12-26 16:41:25 +02:00
Nimrod Kor
4f721cf243
Use credentials file instead of assume role and stuff
2019-12-24 22:15:11 +02:00
Nimrod Kor
78c9d3a41c
Lengthen the session to 3 hours
2019-12-24 18:02:56 +02:00
Dominick Bellizzi
cc5da42797
add lambda:get* to prowler-additions-policy
...
The check: 7.60 [extra760] Find secrets in Lambda functions code (Not Scored) (Not part of CIS benchmark)
errors by default, with the following:
An error occurred (AccessDeniedException) when calling the GetFunction operation: User: user/prowler is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:eu-west-2:347708466071:function:ApiSimpleDelayDDMonitor
Adding this policy to be successfully run that check.
2019-12-18 14:53:09 -08:00
Dom Bellizzi
f979c7334f
Add quiet mode that only logs failures
2019-12-18 22:06:44 +00:00
Nimrod Kor
1087d60457
Small check fixes
...
(cherry picked from commit 70879ba1e0
2019-12-18 13:24:31 +02:00
Nimrod Kor
70879ba1e0
Small check fixes
2019-12-18 13:23:51 +02:00
Nimrod Kor
15a58124d7
Merge remote-tracking branch 'tony/master'
2019-12-17 15:28:56 +02:00
Toni de la Fuente
d2b3e5ecdc
Added new checks to extras group
2019-12-17 10:44:38 +01:00
Toni de la Fuente
3db94a5a98
Merge pull request #429 from dbellizzi/patch-1
...
Add "access-analyzer:ListTagsForResource" to prowler-additions-policy…
2019-12-17 10:42:04 +01:00
Toni de la Fuente
0d120a4536
Merge pull request #437 from bridgecrewio/feature/check_bucket_policies_public_write
...
Check bucket policies public write
2019-12-17 10:41:35 +01:00
Toni de la Fuente
0ab5d87b8f
Merge pull request #433 from kmcquade/check/public-instance-with-instance-profile-attached
...
Added check_extra770, which checks for internet facing instances with an instance profile attached
2019-12-17 10:40:01 +01:00
Toni de la Fuente
39c7ea52c6
Add feature custom checks folder issue #439
2019-12-17 10:37:14 +01:00
Toni de la Fuente
933e4152cc
Merge pull request #435 from bridgecrewio/feature/fix_check26
...
Fix check26 - get the account ID from sts
2019-12-17 10:14:11 +01:00
Nimrod Kor
fc3f4e830e
Reuse ACCOUNT_NUM
2019-12-17 09:29:06 +02:00
Nimrod Kor
72976cc225
Feature/check public write buckets ( #5 )
...
* Copy checks to overwrite the old checks in the docker
* Initial commit
* Change to check 771
2019-12-15 18:50:48 +02:00
Nimrod Kor
7e803bb6a9
Change to check 771
2019-12-15 18:18:02 +02:00
Nimrod Kor
2d5d551696
Initial commit
2019-12-15 18:18:02 +02:00
Nimrod Kor
8e1aa17a80
Fix check26 - get the account ID from sts
...
(cherry picked from commit ae20d9c5b7
2019-12-15 15:55:54 +02:00
Nimrod Kor
ae20d9c5b7
Fix check26 - get the account ID from sts
2019-12-15 15:53:46 +02:00
Toni de la Fuente
dd5bf6c7f8
Merge pull request #432 from bridgecrewio/feature/fix_check21
...
Add trail count to check21 and fail if no trail exist
2019-12-13 14:22:14 +01:00
Dominick Bellizzi
7cb869ad33
use more generic access-analyzer:List*
2019-12-12 09:36:19 -08:00
Kinnaird McQuade
3b264d556b
Added check_extra770, which checks for internet facing instances with an Instance Profile attached.
2019-12-12 11:07:14 -05:00
Toni de la Fuente
e4a063f9d1
Merge pull request #430 from JohnVonNeumann/patch-1
...
UPDATE README.md - fix incorrect group flag
2019-12-12 10:19:28 +01:00
Nimrod Kor
559b0585dc
Add trail count to check21 and fail if no trail exist
...
(cherry picked from commit fcf28dfa70
2019-12-12 09:45:06 +02:00
Nimrod Kor
fcf28dfa70
Add trail count to check21 and fail if no trail exist
2019-12-12 09:42:42 +02:00
JohnVonNeumann
2da125ff8b
UPDATE README.md - fix incorrect group flag
...
To run prowler with the cislevelx group you use '-g', not '-c'
2019-12-12 11:28:52 +11:00
Dominick Bellizzi
53f097c2af
Add "access-analyzer:ListTagsForResource" to prowler-additions-policy.json
...
check extra769 (Check if IAM Access Analyzer is enabled and its findings) requires this IAM permission
2019-12-06 14:49:36 -08:00
Nimrod Kor
2e543b4f50
Merge branch 'master' of https://github.com/toniblyx/prowler
2019-12-05 23:09:21 +02:00
Toni de la Fuente
b6e34adc24
Fix issue #409
2019-12-05 12:52:19 +01:00
Nimrod Kor
405f4033c2
Merge branch 'feature/dockerized_prowler'
2019-12-04 15:48:16 +02:00
Toni de la Fuente
7b5ece8007
New check IAM Access Analyzer issue #428
2019-12-03 15:58:19 +01:00
Toni de la Fuente
fe65eaf373
New check ECS scan on push issue #427
2019-12-03 15:27:09 +01:00
Toni de la Fuente
4af3dc1254
Fix issue #426 updated base64 function
2019-12-02 15:26:48 +01:00
Nimrod Kor
9d07391a61
Fix unnecessary ``
2019-11-26 17:14:07 +02:00
Toni de la Fuente
923fadbfa9
Merge pull request #425 from zfLQ2qx2/check-3xx-whitespace-tolerance
...
Make check3x more tolerant
2019-11-26 10:18:49 +01:00
Toni de la Fuente
3f68accf6f
Added missing file iam/prowler-additions-policy.json
2019-11-26 09:57:29 +01:00
zfLQ2qx2
25d1aa9126
Make check3x more tolerant
2019-11-26 00:56:52 -05:00
Toni de la Fuente
dce9d5c96d
Merge pull request #423 from barnhartguy/master
...
Update check_extra768
2019-11-25 10:03:27 +01:00
Toni de la Fuente
80c6900193
Merge pull request #424 from willthames/extra764_fix
...
Fix extra764 check
2019-11-25 10:01:51 +01:00
root