 Prowler BotandHugo Pereira Brito
|
8a3c0fe609
|
test(cloudfront): add name retrieval test for cloudfront bucket domains (#6974)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2025-02-19 09:05:16 +05:30 |
|
|
Prowler BotandOgonna Iwunze
|
c88663b7ef
|
fix(kms): Amazon KMS API call error handling (#6903)
Co-authored-by: Ogonna Iwunze <1915636+wunzeco@users.noreply.github.com>
|
2025-02-12 11:08:29 -05:00 |
|
|
Prowler BotandDaniel Barranquero
|
75dec160bb
|
fix(cloudfront): fix false positive in s3 origins (#6837)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-02-05 13:36:44 -05:00 |
|
|
Prowler BotandKay Agahd
|
d623d26e64
|
fix(aws) wording of report.status_extended in awslambda_function_not_publicly_accessible (#6830)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-02-05 11:13:00 -05:00 |
|
|
Prowler BotandKay Agahd
|
0204d24f5e
|
fix: add detector and line number of potential secret (#6661)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-01-22 10:55:40 -05:00 |
|
|
|
27fe201a48
|
chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6648)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2025-01-21 16:48:28 -05:00 |
|
|
Prowler BotandKay Agahd
|
a591beb1bb
|
fix(aws): list tags for DocumentDB clusters (#6621)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
|
2025-01-20 16:28:41 -05:00 |
|
|
Prowler BotandDaniel Barranquero
|
ddb72cff0f
|
fix(sqs): fix flaky test (#6594)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2025-01-17 12:36:21 -05:00 |
|
|
Prowler BotandHugo Pereira Brito
|
240f57278a
|
fix(apigatewayv2): managed exception NotFoundException (#6589)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2025-01-17 09:27:01 -05:00 |
|
|
Prowler BotandPedro Martín
|
6525c2f17a
|
fix(detect_secrets): refactor logic for detect-secrets (#6565)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
|
2025-01-16 11:17:55 -05:00 |
|
|
Prowler BotandRubén De la Torre Vico
|
e1620bcb0f
|
fix(vpc): add new principal wildcard verification (#6465)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
|
2025-01-13 10:38:07 -05:00 |
|
|
Prowler Bot
|
52406f6df2
|
fix(aws): disallow child-accounts to overwrite policy for ai_services_opt_out (#6291)
|
2024-12-20 11:53:15 -05:00 |
|
|
Prowler BotandSergio Garcia
|
3786cbcd5f
|
fix(aws): set unique resource IDs (#6191)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-12-13 09:07:39 -04:00 |
|
|
Prowler BotandMads Brouer Lundholm
|
4c4f12ffda
|
fix(aurora): Add default ports to the check of using non default ports (#6150)
Co-authored-by: Mads Brouer Lundholm <mads@madslundholm.dk>
|
2024-12-11 14:58:29 -04:00 |
|
|
Prowler BotandDaniel Barranquero
|
4c0729378d
|
fix(autoscaling): autoscaling_group_launch_configuration_requires_imdsv2 fails if Launch Template is used (#6146)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2024-12-11 12:06:35 -04:00 |
|
|
Prowler BotandSergio Garcia
|
d3da9dd90e
|
fix(iam): set unique resource id for each user access key (#6133)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-12-11 09:25:40 -04:00 |
|
|
Prowler BotandHugo Pereira Brito
|
8eac17d826
|
fix(aws): get firewall manager managed rule groups (#6123)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2024-12-10 16:47:01 -04:00 |
|
|
Prowler BotandHugo Pereira Brito
|
74776bed06
|
fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6120)
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com>
|
2024-12-10 14:30:45 -04:00 |
|
|
Prowler BotandSergio Garcia
|
7db74516b3
|
fix(aws): set IAM identity as resource in threat detection (#6117)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-12-10 13:37:27 -04:00 |
|
|
Prowler BotandDaniel Barranquero
|
3ce785a7b4
|
chore(aws): update fixers docstring (#5878)
Co-authored-by: Daniel Barranquero <74871504+danibarranqueroo@users.noreply.github.com>
|
2024-11-25 13:01:45 -04:00 |
|
|
sansns-awsandMrCloudSec
|
53a4befb01
|
feat(aws): add MemoryDB service (#5546)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-22 15:13:16 -04:00 |
|
|
Daniel Barranquero
|
6811a22651
|
feat(documentdb): add new fixer documentdb_cluster_public_snapshot_fixer (#5759)
|
2024-11-22 11:14:24 -04:00 |
|
|
Daniel Barranquero
|
fe2dd69b08
|
feat(neptune): add new fixer neptune_cluster_public_snapshot_fixer (#5749)
|
2024-11-22 11:13:18 -04:00 |
|
|
Daniel BarranqueroandSergio Garcia
|
00054b5cd9
|
feat(ec2): add new fixer ec2_ebs_public_snapshot_fixer (#5825)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-21 12:40:28 -04:00 |
|
|
Daniel Barranquero
|
861fb22257
|
feat(kms): add new fixer kms_cmk_not_deleted_unintentionally_fixer (#5842)
|
2024-11-21 11:45:55 -04:00 |
|
|
Daniel Barranquero
|
09ea6ba6c4
|
feat(rds): add new fixer rds_instance_no_public_access_fixer (#5794)
|
2024-11-21 11:42:03 -04:00 |
|
|
sansns-awsandMrCloudSec
|
9b0b61ef02
|
feat(sgw): add storagegateway_fault_tolerance check (#5570)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-20 15:10:44 -04:00 |
|
|
Pedro Martín
|
096749a455
|
refactor(arn): fine tune arn and resources id for unknown values (#5841)
|
2024-11-20 12:56:51 +01:00 |
|
|
Pedro MartínandSergio Garcia
|
b06e549d81
|
refactor(arn): refactor arn for unknown resources (#5712)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-19 16:21:43 -04:00 |
|
|
Rubén De la Torre Vico
|
e33b081dc6
|
chore(iam): add exception for public policy in EKS service (#4759)
|
2024-11-19 09:42:56 -04:00 |
|
|
Daniel Barranquero
|
f5e71db5e0
|
fix(rds): fix typo error in rds_snapshots_public_access_fixer test (#5826)
|
2024-11-19 09:23:52 -04:00 |
|
|
Sergio Garcia
|
c69571abcd
|
feat(aws): add new check iam_root_credentials_management_enabled (#5801)
|
2024-11-18 16:59:35 +01:00 |
|
|
Hugo Pereira BritoandSergio Garcia
|
7a711095cd
|
feat(kinesis): add new check kinesis_stream_data_retention_period (#5547)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-14 12:01:01 -05:00 |
|
|
Daniel Barranquero
|
b0bb348480
|
feat(rds): add new fixer rds_snapshots_public_access_fixer (#5773)
|
2024-11-14 10:40:33 -05:00 |
|
|
Hugo Pereira BritoandSergio Garcia
|
c1b050b8b9
|
feat(firehose): add new check firehose_stream_encrypted_at_rest (#5635)
Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>
|
2024-11-14 10:27:17 -05:00 |
|
|
Rubén De la Torre VicoandMrCloudSec
|
73361a1cea
|
chore(ec2): add name from image information to status_extended (#5755)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-13 14:30:58 -05:00 |
|
|
Hugo Pereira BritoandMrCloudSec
|
dca49b1972
|
feat(aws): add new service firehose (#5620)
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
|
2024-11-12 17:41:46 -05:00 |
|
|
Sergio Garcia
|
f1334190d8
|
fix(aws): remove cloudwatch_log_group_no_critical_pii_in_logs check (#5736)
|
2024-11-12 12:50:47 -05:00 |
|
|
sansns-awsandSergio
|
10766d708d
|
feat(mq): add mq_broker_not_publicly_accessible check (#5604)
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-11-11 12:12:21 -05:00 |
|
|
Mario Rodriguez LopezandSergio Garcia
|
f231d8b080
|
feat(appsync): add new check appsync_field_level_logging_enabled (#5602)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
|
2024-11-11 10:23:13 -05:00 |
|
|
Mario Rodriguez Lopez
|
5de13bdd8a
|
fix(ec2): unique finding per Security Group in high risk ports check (#5697)
|
2024-11-08 14:08:27 -05:00 |
|
|
Mario Rodriguez LopezandSergio Garcia
|
716558ffcb
|
feat(servicecatalog): Add new check servicecatalog_portfolio_shared_within_organization_only (#5632)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
|
2024-11-08 12:22:13 -05:00 |
|
|
Mario Rodriguez LopezandSergio Garcia
|
6bdcb509e1
|
feat(appsync): add new check appsync_graphql_apis_no_api_key_authentication (#5591)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
|
2024-11-07 11:42:07 -05:00 |
|
|
Daniel BarranqueroandSergio
|
d0ef75d8d9
|
feat(dms): add new check dms_replication_task_target_logging_enabled (#5631)
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-11-07 10:19:44 -05:00 |
|
|
Daniel Barranquero
|
a339dafcc6
|
fix(guardduty): fix guardduty_is_enabled_fixer test (#5668)
|
2024-11-07 08:21:49 -05:00 |
|
|
Daniel BarranqueroandSergio
|
d5873c0437
|
feat(dms): add new check dms_replication_task_source_logging_enabled (#5627)
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-11-06 15:50:48 -05:00 |
|
|
Mario Rodriguez LopezandSergio
|
a2dba30869
|
feat(servicecatalog): Add new service servicecatalog (#5618)
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-11-06 12:02:14 -05:00 |
|
|
Mario Rodriguez LopezandSergio
|
0662dff13f
|
feat(appsync): Add new service AppSync (#5589)
Co-authored-by: Sergio <sergio@prowler.com>
|
2024-11-06 11:50:27 -05:00 |
|
|
Daniel BarranqueroandSergio Garcia
|
0ae26bddfc
|
feat(dms): add new check dms_endpoint_redis_tls_enabled (#5583)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
|
2024-11-06 11:03:13 -05:00 |
|
|
sansns-aws
|
78fb540bbb
|
feat(rds): add rds_cluster_protected_by_backup_plan check (#5638)
|
2024-11-05 11:30:45 -05:00 |
|