|
7bc9aa2424
|
feat(entra): add new check entra_admin_mfa_enabled_for_administrative_roles (#7181)
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-04-09 16:04:42 +02:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
93f3a094fc
|
feat(entra): add new check entra_identity_protection_sign_in_risk_enabled (#7171)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-04-09 16:04:42 +02:00 |
|
|
Andoni Alonso
|
881133d6b9
|
refactor(check): add docstrings and improve report handling (#7113)
|
2025-04-09 16:04:42 +02:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
bb1b81455c
|
feat(entra): add new check entra_identity_protection_user_risk_enabled (#7126)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-04-09 16:04:42 +02:00 |
|
|
Pepe Fagoaga
|
3116fef89a
|
chore(poetry): Upgrade to v2 (#7112)
|
2025-04-09 16:04:33 +02:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
f6dbf3ef5f
|
feat(entra): add new check entra_managed_device_required_for_authentication (#7115)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-04-09 16:01:40 +02:00 |
|
|
Daniel Barranquero
|
35a9c03467
|
feat(entra): add new check entra_password_hash_sync_enabled (#7061)
|
2025-04-09 16:01:40 +02:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
a77d6ebaa2
|
feat(microsoft365): add new check entra_admin_users_sign_in_frequency_enabled (#7020)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-04-09 16:01:40 +02:00 |
|
|
Daniel BarranqueroandSergio Garcia
|
d979076814
|
feat(entra): add new check entra_dynamic_group_for_guests_created (#7168)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-04-09 16:01:40 +02:00 |
|
|
Daniel Barranquero
|
fab7a107fa
|
feat(entra): add new check entra_admin_consent_workflow_enabled (#7110)
|
2025-04-09 16:01:39 +02:00 |
|
|
Hugo Pereira Brito
|
0b87b63cdd
|
refactor(microsoft365): resource metadata assertions (#7169)
|
2025-04-09 16:01:39 +02:00 |
|
|
Prowler BotandSergio Garcia
|
2cc8363697
|
fix: handle errors in AWS, Azure, and GCP (#7471)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-04-08 19:03:42 +05:45 |
|
|
Prowler BotandSergio Garcia
|
f52929673d
|
fix(gcp): ignore redirect balancers and add regional ones (#7449)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-04-07 12:43:45 -04:00 |
|
|
Prowler BotandSergio Garcia
|
9630f23585
|
fix(aws): solve multiple errors (#7440)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-04-04 10:47:08 -04:00 |
|
|
Prowler BotandPedro Martín
|
23cfd91708
|
fix(azure): remove resource_name inside the Check_Report (#7430)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-04-03 12:34:53 -04:00 |
|
|
Prowler BotandSergio Garcia
|
0c44f28bf7
|
fix(gcp): make logging sink check at project level (#7428)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-04-03 11:34:03 -04:00 |
|
|
|
56d0c2fbea
|
fix(resources): add the correct id and names for resources (#7414)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-04-01 22:24:33 +02:00 |
|
|
Prowler BotandDaniel Barranquero
|
933c5063ee
|
fix(redshift): validation error for Cluster.multi_az (#7400)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-03-31 14:51:49 +02:00 |
|
|
Prowler BotandDaniel Barranquero
|
72a998a692
|
fix(rds): hundle Certificate rds-ca-2019 not found (#7392)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-03-27 12:04:19 +01:00 |
|
|
|
a4d1e3bb69
|
fix(stepfunctions): Nonetype object has no attribute level (#7389)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-03-27 11:09:17 +01:00 |
|
|
Prowler BotandDaniel Barranquero
|
2a8b04cced
|
fix(fms): resource metadata could not be converted to dict (#7388)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-03-27 09:13:16 +01:00 |
|
|
|
cfc02186d4
|
fix(vm): handle Nonetype is not iterable for extensions (#7377)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-03-26 00:31:57 +01:00 |
|
|
Prowler BotandSergio Garcia
|
7e432a3b69
|
fix(s3): handle None S3 account public access block (#7376)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-03-25 17:55:54 +01:00 |
|
|
|
ce23c4b5aa
|
fix(network): handle Nonetype is not iterable for security groups (#7372)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-03-25 15:53:55 +01:00 |
|
|
|
33e99ef628
|
fix(vm): handle NoneType accessing security_profile (#7373)
Co-authored-by: Andoni Alonso <14891798+andoniaf@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-03-25 14:43:49 +01:00 |
|
|
Prowler BotandSergio Garcia
|
72761a6ef6
|
fix(iam): handle none SAML Providers (#7371)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-03-25 11:18:10 +01:00 |
|
|
Prowler BotandDaniel Barranquero
|
2a4fdff827
|
fix(iam): handle UnboundLocalError cannot access local variable 'report' (#7370)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-03-25 10:20:49 +01:00 |
|
|
Prowler BotandPedro Martín
|
d95fccd163
|
fix(gcp): make provider id mandatory in test_connection (#7315)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-03-19 20:38:37 +05:45 |
|
|
Prowler BotandDaniel Barranquero
|
3f41c75a45
|
fix(route53): solve false positive in route53_public_hosted_zones_cloudwatch_logging_enabled (#7293)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-03-19 13:39:56 +05:45 |
|
|
Prowler BotandSergio Garcia
|
3fb86d754a
|
fix(cloudwatch): handle None metric alarms (#7207)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-03-12 16:18:44 +01:00 |
|
|
Sergio Garcia
|
96cae5e961
|
feat(aws): add fixers for threat detection checks (#7085)
|
2025-03-03 15:50:18 +01:00 |
|
|
|
d3dd1644e6
|
feat(m365): add sharepoint service with 4 checks (#7057)
Co-authored-by: MarioRgzLpz <mariorgzlpz1809@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-03-03 15:00:29 +01:00 |
|
|
Sergio Garcia
|
a62ae8af51
|
fix(ecs): ensure unique finding id in ECS checks (#7059)
|
2025-03-03 14:59:56 +01:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
1056c270ca
|
feat(microsoft365): add new check entra_policy_ensure_default_user_cannot_create_tenants (#6918)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-03-03 14:59:35 +01:00 |
|
|
Adrián Jesús Peña Rodríguez
|
3194675a5c
|
feat(export): add API export system (#6878)
|
2025-03-03 14:57:40 +01:00 |
|
|
Hugo Pereira Brito
|
175360dbe6
|
refactor(microsoft365): CheckReportMicrosoft365 and resource metadata (#6952)
|
2025-03-03 14:53:42 +01:00 |
|
|
|
9c5220ee98
|
fix(elasticache): improve logic in elasticache_redis_cluster_backup_enabled (#7045)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-02-26 12:12:44 +01:00 |
|
|
Prowler BotandRubén De la Torre Vico
|
6491bce5a6
|
fix(azure): migrate resource models to avoid using SDK defaults (#7043)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2025-02-26 10:49:33 +01:00 |
|
|
Prowler BotandSergio Garcia
|
5974d0b5da
|
fix(report): remove invalid resources in report (#6984)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-02-20 11:05:58 +05:30 |
|
|
Prowler BotandHugo Pereira Brito
|
5b9dae4529
|
test(cloudfront): add name retrieval test for cloudfront bucket domains (#6975)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2025-02-19 09:12:17 +05:30 |
|
|
Prowler BotandRubén De la Torre Vico
|
b7fc2542e8
|
fix(gcp): Correct false positive when sslMode=ENCRYPTED_ONLY in CloudSQL (#6942)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2025-02-14 16:36:26 -05:00 |
|
|
Prowler BotandSergio Garcia
|
48cb45b7a8
|
fix(aws): handle AccessDenied when retrieving resource policy (#6912)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2025-02-12 19:15:51 -05:00 |
|
|
Prowler BotandOgonna Iwunze
|
91b74822e9
|
fix(kms): Amazon KMS API call error handling (#6904)
Co-authored-by: Ogonna Iwunze <1915636+wunzeco@users.noreply.github.com>
|
2025-02-12 11:08:47 -05:00 |
|
|
Mario Rodriguez LopezandMrCloudSec
|
b3aa800082
|
feat(entra): add new check entra_thirdparty_integrated_apps_not_allowed (#6357)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-02-10 11:23:13 +01:00 |
|
|
Ogonna IwunzeandMrCloudSec
|
501674a778
|
feat(kms): add kms_cmk_not_multi_region AWS check (#6794)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-02-10 11:23:01 +01:00 |
|
|
Mario Rodriguez LopezandMrCloudSec
|
e518a869ab
|
feat(entra): add new entra service for Microsoft365 (#6326)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-02-10 11:20:58 +01:00 |
|
|
Mario Rodriguez LopezandMrCloudSec
|
43927a62f3
|
feat(microsoft365): add new check admincenter_settings_password_never_expire (#6023)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-02-10 11:20:52 +01:00 |
|
|
|
e184c9cb61
|
feat(m365): add Microsoft 365 provider (#5902)
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>
Co-authored-by: HugoPBrito <hugopbrit@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-02-10 11:15:24 +01:00 |
|
|
Prowler BotandKay Agahd
|
7189f3d526
|
fix(aws): key error for detect-secrets (#6865)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-02-07 10:04:54 -05:00 |
|
|
Prowler BotandDaniel Barranquero
|
d60f4b5ded
|
fix(cloudfront): fix false positive in s3 origins (#6838)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-02-05 13:36:49 -05:00 |
|