Commit Graph
389 Commits
Author SHA1 Message Date
dependabot[bot]andMrCloudSec d9845813b8 chore(deps-dev): bump moto from 5.0.16 to 5.0.26 (#6368)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-01-21 18:14:01 -05:00
2fa1bfbee7 fix(vpc): add new principal wildcard verification (#6464)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
2025-01-13 11:27:26 -05:00
Prowler BotandRubén De la Torre Vico f582b539a4 chore(ec2): add name from image information to status_extended (#5757)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
2024-11-13 14:56:22 -05:00
fced762fcf fix(iam): update AWS Support policy (#5402)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-10-14 14:28:44 -04:00
Prowler BotandSergio Garcia 85d5f19bdf fix(vpc): check all routes tables in subnet (#5121)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-09-20 11:00:34 -04:00
Prowler BotandSergio Garcia a7e237cbbc chore(ssm): add trusted accounts variable to ssm check (#5117)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-09-20 09:36:14 -04:00
7c3a0a00e5 fix(inspector2): Ensure Inspector2 is enabled for ECR, EC2, Lambda and Lambda Code (#5066)
Co-authored-by: Mario Rodriguez Lopez <101330800+MarioRgzLpz@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-09-17 16:40:52 -04:00
Prowler BotandPedro Martín e33fbb1b13 fix(aws): enchance check cloudformation_stack_outputs_find_secrets (#4861)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
2024-08-26 11:00:26 +02:00
github-actions[bot]andSergio Garcia 97a9ee5a3c chore(test): improve iam_root_hardware_mfa_enabled tests (#4834)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-22 09:35:15 -04:00
56ad891c17 fix(ec2): Manage UnicodeDecodeError when reading user data (#4788)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-21 08:55:05 -04:00
github-actions[bot]andRubén De la Torre Vico 0ece45ab05 chore(awslambda): Enhance function public access check called from other resource (#4793)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
2024-08-20 06:56:24 -04:00
github-actions[bot]andSergio 2b0c93de5a fix(iam): update logic of Root Hardware MFA check (#4774)
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-16 12:56:48 -04:00
github-actions[bot]andSergio Garcia 7b29326e1c fix(aws): run Prowler as IAM Root or Federated User (#4772)
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
2024-08-16 12:11:37 -04:00
2de94df159 fix(iam): handle no arn serial numbers for MFA devices (#4710)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-09 14:41:29 -04:00
b7c22d18ab fix(autoscaling): Add exception manage while decoding UserData (#4675)
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-07 17:47:48 -04:00
318d2b1e1a fix(aws): only check artifacts that can be scanned for vulnerabilities by ecr_repositories_scan_vulnerabilities_in_latest_image (#4677)
Co-authored-by: Kay Agahd <kagahd@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-07 15:41:27 -04:00
github-actions[bot]andSergio c54227b245 fix(test): solve VPC import in tests (#4674)
Co-authored-by: Sergio <sergio@prowler.com>
2024-08-07 14:12:05 -04:00
5b3b2c3252 chore(backport): fix(sns): add condition to sns topics (#4498) backport for v3 (#4676)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-08-07 14:35:35 +02:00
Sergio GarciaandPepe Fagoaga aa9fde62b2 chore(release): update v3 with latest changes (#4504)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-07-22 11:52:52 -04:00
Sergio Garcia af2a38a825 fix(inspector2): add more efficient way to check if any active findings (#4495) 2024-07-22 11:25:33 -04:00
fb2c1ba782 chore(v3): update latest changes from v4 (#4459)
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: Rubén De la Torre Vico <rubendltv22@gmail.com>
2024-07-16 11:23:14 -04:00
Sergio Garcia d251fdc546 chore(acm): add ignore unused services feature (#4371) 2024-07-04 12:11:59 -04:00
Sergio Garcia bd474ef474 chore(v3): include latest v4 changes (#4350) 2024-07-02 09:15:47 -04:00
Sergio GarciaandPepe Fagoaga 63bb337996 chore(backport): update v3 with latest changes (#4198)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-06-06 10:57:36 -04:00
Sergio Garcia cdd37a785f chore(backport): include latest changes of v4 (#4159) 2024-06-03 15:36:11 -04:00
Sergio Garcia bdc42a5251 chore(backport): put latest changes of v4 to v3 (#4144) 2024-05-30 12:16:36 -04:00
Pepe Fagoaga 5af081c148 fix(allowlist): Handle items starting by * (#4135) 2024-05-30 14:49:38 +02:00
Sergio Garcia fd46c704e4 chore(backport): include latest changes of v4 in v3 (#4027) 2024-05-21 13:17:16 -04:00
Sergio Garcia 7954e61944 chore(v3): backport latest v4 changes (#3916) 2024-05-06 17:22:48 +02:00
Kay AgahdandPepe Fagoaga 24d5acdc33 fix(aws): Extend opensearch_service_domains_use_cognito_authentication_for_kibana with SAML (#3861)
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
2024-04-26 12:18:43 +02:00
d63919c2c5 chore(backport): include latest changes of v4 in v3 (#3825)
Co-authored-by: Matt Merchant <matthew.lee.merchant@gmail.com>
Co-authored-by: Pedro Martín <pedromarting3@gmail.com>
Co-authored-by: Jakob Rieck <135810953+rieck-srlabs@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
Co-authored-by: Nacho Rivera <nachor1992@gmail.com>
2024-04-22 11:29:54 +02:00
Pedro Martín fc49de47eb fix(aws_lambda): Update obsolete lambda runtimes for v3 (#3736) 2024-04-09 16:07:40 +02:00
dependabot[bot]andSergio abf0447171 build(deps-dev): bump moto from 5.0.3 to 5.0.4 (#3629)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sergio <sergio@prowler.com>
2024-04-02 10:21:49 +02:00
Sergio Garcia 3015381f43 fix(sts): handle China STS regions (#3613) 2024-03-27 11:18:44 +01:00
Sergio Garcia 64c7de93b6 fix(cloudtrail): use dictionary instead of list (#3579) 2024-03-20 19:05:34 +01:00
Sergio Garcia f14f8e7ec5 fix(iam): ignore Root User in iam_user_mfa_enabled_console_access (#3537) 2024-03-14 13:21:15 +01:00
Sergio Garcia 65edaeae8f fix(cloudwatch): correct recommendation text (#3538) 2024-03-14 13:20:50 +01:00
Pepe Fagoaga 5c3e3dbda3 fix(glue): Add mocked ARN (#3515) 2024-03-12 10:13:17 +01:00
Sergio GarciaandPepe Fagoaga fcb2df93b8 chore(arn): improve resource ARNs in checks (#3388)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-03-05 18:10:22 +01:00
Pedro Martín 98dea32288 fix(check_loader): Add validation in 'Categories' field from metadata (#3480) 2024-03-04 11:37:50 +01:00
Pepe Fagoaga 64aa0435e8 fix(security_hub): Handle user facing errors (#3456) 2024-02-28 10:03:43 +01:00
Sergio GarciaandPepe Fagoaga 354677bc7a feat(aws): add 2 new Amazon EKS checks from CIS (#3439)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-02-27 17:48:56 +01:00
Pepe Fagoaga f69f008dab feat(aws): Get organizations metadata if delegated admin (#3435) 2024-02-27 17:09:56 +01:00
Pepe Fagoaga 753f32b4cb fix(inspector2): Report must have status field (#3419) 2024-02-20 12:58:03 +01:00
Pepe Fagoaga 8e93493d2b test(aws): Add default Boto3 credentials (#3404) 2024-02-16 09:13:51 +01:00
Sergio Garciaandpedrooot 8ed97810a8 feat(cis): add new CIS AWS v3.0.0 (#3379)
Co-authored-by: pedrooot <pedromarting3@gmail.com>
2024-02-08 13:31:12 +01:00
Pepe Fagoaga eadc66f53b fix(allowlist): Handle tags and resources (#3376) 2024-02-08 10:06:02 +01:00
Sergio Garcia 7298f64e5c fix(s3): add s3:Get* case to s3_bucket_policy_public_write_access (#3364) 2024-02-06 13:04:55 +01:00
Sergio GarciaandPepe Fagoaga db15c0de9e fix(rds): verify SGs in rds_instance_no_public_access (#3341)
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
2024-02-06 10:49:58 +01:00
Sergio Garcia f21dcd8122 chore(inspector): refactor inspector2_findings_exist check into two (#3338) 2024-02-06 10:32:19 +01:00