103 Commits

Author SHA1 Message Date
Toni de la Fuente 783fc715fb Merge pull request #51 from toniblyx/master
fixed issue #44
1.0
2017-06-15 18:28:02 -04:00
Toni de la Fuente 1d53bb26a6 fixed check 2.8 error with default key 2017-06-15 18:25:09 -04:00
Toni de la Fuente 8c4da8de2a Merge pull request #4 from Alfresco/master
sync with monocrome mode
2017-06-15 08:49:26 -04:00
Toni de la Fuente 1899866225 Merge pull request #50 from MrSecure/monochrome
Add Monochrome Mode and other fixes
2017-06-15 08:44:12 -04:00
MrSecure efbf37faaf Add switch for basic mode to README. 2017-06-14 22:03:35 -05:00
Ben Allen b1a67dfd03 change BAD back to red; simpler logic to decide if color code should show 2017-06-14 21:36:53 -05:00
Ben Allen 2141bf165d more color/mono simplifications 2017-06-14 21:34:41 -05:00
Ben Allen 3bd8a0f8af simplify some of the color/mono checks now that the escape characters are really gone 2017-06-14 21:29:02 -05:00
Ben Allen 023273fa11 fix check 2.4 to find trails when the home region is not the API region 2017-06-14 21:22:13 -05:00
Ben Allen 5f9eb53c5d work on basic/monochrome mode - clean up OK, WARNING, and color marking logic 2017-06-14 21:12:59 -05:00
Toni de la Fuente 8d0c728b25 Merge pull request #3 from Alfresco/master
getting latest changes from Alfresco/prowler
2017-06-14 20:19:38 -04:00
Toni de la Fuente bd75f0ff4b Merge pull request #48 from MrSecure/fix46
fixes #46 - checks 1.16, 1.17, 1.18 were missing from the default lis…
2017-06-14 20:14:24 -04:00
Ben Allen 137d5e908a Revert "work on monochrome - toggle echo -e flag based on monochrome switch"
This reverts commit 8ee100a20f.
2017-06-14 19:08:01 -05:00
Ben Allen 8ee100a20f work on monochrome - toggle echo -e flag based on monochrome switch 2017-06-14 17:21:43 -05:00
Ben Allen 83827d945f work on adding basic/monochrome mode 2017-06-14 17:15:48 -05:00
Ben Allen 34293e5d2b work on adding basic/monochrome mode 2017-06-14 17:00:28 -05:00
Ben Allen ce8725798a work on adding basic/monochrome mode 2017-06-14 16:58:57 -05:00
Ben Allen b252ee0f9d fixes #46 - checks 1.16, 1.17, 1.18 were missing from the default list of checks 2017-06-14 16:46:09 -05:00
Toni de la Fuente 26eeda590a Merge pull request #47 from MrSecure/master
fixes #45 - define TITLE116 variable
2017-06-14 17:46:05 -04:00
Ben Allen d11a80835f fixes #46 - checks 1.16, 1.17, 1.18 were missing from the default list of checks 2017-06-14 16:43:48 -05:00
Ben Allen cea02668ad fixes #45 - define TITLE116 variable 2017-06-14 16:35:22 -05:00
Toni de la Fuente 5517d39285 Merge pull request #43 from toniblyx/master
Update README with new options
2017-06-01 15:38:03 -04:00
Toni de la Fuente 9c6d8b8a7c Added new options to README 2017-06-01 15:37:02 -04:00
Toni de la Fuente 6212c50674 Merge pull request #2 from Alfresco/master
updated from base repo
2017-06-01 15:34:24 -04:00
Toni de la Fuente b208e35cae Merge pull request #42 from AlexCline/master
Improvements and additions to option configurations.
Added filter region option and max-items option for large resource outputs.
2017-06-01 15:27:28 -04:00
AlexClineBB 4439a5f184 Add a configuration option to configure max-items for large resources
This change adds a -m option which configures the --max-items API parameter for large
AWS resources. Currently, SNS topic subscriptions are limited to the default of 100
items. SNS topics can easily surpass 100,000 subscriptions which is too many to show
by default.

Since check 3.15 is confirming that subscribers exist - not what they actually are - it's
a waste to display all 100,000 entries.
2017-05-31 15:05:04 -04:00
AlexClineBB fc9b8a1d3c Add the option to filter API requests by region
This change adds the ability to perform checks against specific regions only.

The -r option allows you to set the region that API requests are made against,
but checks are always made against all regions.

The -f allows you to filter which regions to run checks against.
2017-05-31 14:59:37 -04:00
AlexClineBB 9727d5a3ed Set defaults for environment variables
This change sets the defaults for PROFILE and REGION before they're set by getopts,
allowing us to add support for more options without needing to update the default
setting code that happened after the options were parsed.
2017-05-31 14:54:39 -04:00
Toni de la Fuente 2c865485d9 Merge pull request #41 from AlexCline/master
Match the entire username when running check12
2017-05-31 13:10:50 -04:00
AlexClineBB 666a1c42cd Match the entire username when running check12
When a password-enabled user with a short name (e.g. "bc") is matched against
another user whose username contains the first (e.g. "abcd"), check12 would
erroneously display the second user "abcd" as having a password and no MFA.

This change ensures that grep matches the whole word.
2017-05-31 11:21:31 -04:00
Toni de la Fuente e0ef94caa5 Updated github repo name in README 2017-05-05 15:07:31 -04:00
Toni de la Fuente 1abdfff7ac Merge pull request #38 from virtualjj/fix-check28
Fix check28 - Issue #36
2017-01-10 09:13:58 -05:00
Toni de la Fuente a2371a8c34 Merge pull request #37 from virtualjj/fix-readme-custom-iam-policy
Add logs:DescribeMetricFilters to Custom IAM Policy section.
2017-01-10 09:12:03 -05:00
Virtual JJ 7ba0778162 Fix issue #36. Improve parsing of default KMS keys and customer keys. 2017-01-10 15:59:23 +09:00
Virtual JJ 931da9920e Add logs:DescribeMetricFilters to Custom IAM Policy section. 2017-01-09 20:27:29 +09:00
Toni de la Fuente aa6cd9c614 Merge pull request #35 from davidpanofsky/fix_2.4
fix for rule 2.4
2016-12-30 11:53:24 +01:00
David Panofsky 71f96f017e fix accidental removal 2016-12-29 17:43:09 -05:00
David Panofsky 2280f1cf9c Merge branch 'master' into fix_2.4 2016-12-29 17:37:56 -05:00
David Panofsky ae88e34cd5 fix for rule 2.4 2016-12-29 17:31:16 -05:00
David Panofsky 434ad7733d fix for rule 2.4 2016-12-29 17:25:34 -05:00
Toni de la Fuente 3b5e6a0680 Merge pull request #34 from davidpanofsky/master
Fix couple of syntax errors
2016-12-19 08:46:24 +00:00
David Panofsky ae842f2b1a Merge branch 'master' of github.com:davidpanofsky/aws-cis-security-benchmark 2016-12-16 15:23:08 -05:00
David Panofsky 499042dc6f fix a few lists which were being treated as strings 2016-12-16 15:22:22 -05:00
Toni de la Fuente 61d7d39d0a Merge pull request #33 from toniblyx/master
Added Support for CIS AWS 1.1
2016-11-30 00:49:54 -05:00
Toni de la Fuente 581c7c7ebf Added Support for CIS AWS 1.1 2016-11-30 00:48:35 -05:00
Toni de la Fuente e7b5b8ce58 Support for CIS AWS 1.1 2016-11-30 00:32:00 -05:00
Toni de la Fuente ae77663fd7 Merge pull request #32 from toniblyx/master
Added info to README and help
2016-11-14 22:35:19 -05:00
Toni de la Fuente 56656e95ef Added info to README and help 2016-11-14 22:34:48 -05:00
Toni de la Fuente e294c46722 Merge pull request #31 from toniblyx/master
Fixed section 3 commands and added group checks
2016-11-14 22:32:30 -05:00
Toni de la Fuente cec364581e Fixed section 3 commands 2016-11-14 22:29:56 -05:00