432416d09e
fix(checks): Severity for Lambda URL checks ( #1162 )
2022-05-25 12:22:42 +02:00
dd7d25dc10
release: Prowler 2.10 ( #1161 )
2022-05-25 12:03:05 +02:00
24c60a0ef6
fix(checks): Handle AWS Gov Cloud regions ( #1160 )
2022-05-25 12:01:58 +02:00
f616c17bd2
feat(new): New custom check extra9999 to build a custom check on the fly ( #1103 )
2022-05-25 09:16:36 +02:00
5628200bd4
fix(remediation): Fix remediation fields for checks ( #1157 )
2022-05-23 15:48:26 +02:00
ae93527a6f
fix(BucketLocation): Recover bucket policy using the right region endpoint ( #1156 )
2022-05-23 15:45:30 +02:00
2939d5cadd
feat(lambda-function): Checks for misconfigured function's URLs ( #1148 )
2022-05-23 10:46:19 +02:00
e2c7bc2d6d
fix(IllegalLocationConstraintException): Recover bucket policy using the right region endpoint ( #1155 )
2022-05-23 09:37:46 +02:00
f4bae78730
Timestamp to date casting issues solved ( #1154 )
...
* fix(date): Deleted @ char before date argument
* fix(date): Use @ only when input is epoch
2022-05-23 09:28:56 +02:00
d307898289
Update README.md ( #1153 )
...
pretty README.md
2022-05-19 12:14:11 +02:00
879ac3ccb1
fix(actions): Ignore changes on Readme ( #1149 )
2022-05-17 16:09:55 +02:00
cd41e73cbe
fix(readme): Correct permissions for DynamoDB allowlist ( #1147 )
2022-05-17 12:33:49 +02:00
47f1ca646e
fix(typo): ArtifactBucket tags ( #1145 )
2022-05-17 09:08:11 +02:00
a18b18e530
K8s cronjob sample files ( #1140 )
2022-05-16 10:58:50 +02:00
4d1ffbb652
fix(actions): tag and push ( #1142 )
2022-05-13 11:20:30 +02:00
13423b137e
fix(actions): Include AWS region ( #1141 )
...
* fix(actions): Include AWS regions
* fix(zip): Quiet output
2022-05-13 10:13:03 +02:00
d60eea5e2f
fix(copyToS3): Upload to S3 only when indicated ( #1134 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-05-12 17:30:49 +02:00
39c7d3b69f
fix(typo) ( #1139 )
2022-05-12 17:28:30 +02:00
2de04f1374
fix(actions): Job permissions ( #1138 )
2022-05-12 17:24:15 +02:00
5fb39ea316
fix(actions): Trigger on PR ( #1136 )
...
* fix(actions): Include checkout
* fix(actions): version name
* fix(actions): fix branch
* fix(actions): version name
* fix(actions): PR trigger
2022-05-12 17:20:11 +02:00
55640ecad2
fix(actions): Github token permissions ( #1135 )
2022-05-12 16:46:06 +02:00
69d3867895
feat(actions): Upload Prowler containers to registries ( #1132 )
...
* feat(actions): Upload Prowler latest to dockerhub
* feat(upload-container): Action to Public Registries
* feat(upload-container): Include env secrets
* feat(actions): Include Docker linters
* feat(linters): include pre-commit
* fix(names)
2022-05-12 16:37:46 +02:00
210f44f66f
fix(custom-file-in-bucket): Custom file names are also support for S3 output. ( #1129 )
2022-05-11 10:16:29 +02:00
b78e4ad6a1
fix(allowlist_db): Improve DynamoDB regex for allowlisting. ( #1127 )
2022-05-06 13:46:53 +02:00
4146566f92
feat(assume-role): Properly handle External ID variable
2022-05-05 16:10:52 +02:00
4e46dfb068
feat(add_prowler_pro_banner): include Prowler Pro banner in README ( #1119 )
...
* feat(add_prowler_pro_banner): include Prowler Pro banner in README
Context
Include Prowler Pro banner in README.md
Description
Add Prowler Pro banner in README.md for giving visibility to the Enterprise version of Prowler.
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
* Update README.md
2022-05-03 16:24:23 +02:00
13c96a80db
feat(deployment): Serverless multi account Prowler with SecurityHub Integration ( #1113 )
2022-05-03 13:41:56 +02:00
de77a33341
fix(allowlist_db): Improve DynamoDB regex for allowlisting. ( #1126 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-05-03 11:57:23 +02:00
295bb74acf
fix(additions-policy): Updated multi-org ProwlerRole.yaml ( #1123 )
2022-05-03 11:34:12 +02:00
59abd2bd5b
check_extra7113: Fix wrong listing of RDS instances in regions without databases ( #1124 )
...
Co-authored-by: Jens Brey <jens.brey@allcloud.io >
2022-05-03 11:31:23 +02:00
ecbfbfb960
fix(allowlist_db): Improve DynamoDB regex for allowlisting. ( #1125 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-05-03 11:31:12 +02:00
04e5804665
Update CloudFormation template for CodeBuild ( #1114 )
2022-05-03 09:14:38 +02:00
681d0d9538
feat(group7): Include extra7178 ( #1121 )
2022-04-29 14:26:19 +02:00
8bfd9c0e62
feat(emr): Check BlockPublicAccessConfiguration for EMR ( #1120 )
2022-04-29 14:23:54 +02:00
95df9bc316
feat(checks): New group and checks for Codebuild and EMR ( #1112 )
2022-04-29 14:19:04 +02:00
d08576f672
feat(add_prowler_pro_banner): include Prowler Pro banner in README.md ( #1117 )
2022-04-28 17:28:52 +02:00
aa16bf4084
feat(dynamodb_allowlist): Support DynamoDB tables ARN for allowlist input ( #1118 )
...
* feat(dynamodb_allowlist): Support dynamodb tables arn for allowlist input.
* feat(allowlist): Include logging messages for input file
* fix(allowlist): Modify DynamoDB key name
Co-authored-by: sergargar <sergio@verica.io >
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-04-28 17:04:44 +02:00
432632d981
chore(release): 2.9.0 ( #1109 )
2022-04-13 13:54:53 +02:00
d6ade7694e
chore(allowlist): Rename references ( #1108 )
...
* chore(allowlist): rename file
* chore(allowlist): remove old references
2022-04-13 11:31:50 +02:00
c9e282f236
IAM check116 and check122 modified to log also PASS results ( #1107 )
...
* fix(check116): Fixed logic to include resource_id of passed users
* fix(check122): Changed logic check to include explicit pass records
2022-04-12 19:54:51 +02:00
5b902a1329
fix typo: publiccly -> publicly ( #1106 )
2022-04-12 18:12:26 +02:00
fc7c932169
fix(extra7147): Handle unsupported AWS regions for Glacier ( #1101 )
2022-04-11 16:10:23 +02:00
819b52687c
Replace comma from csv input info ( #1102 )
...
* fix(output): replace comma from csv input info
* fix(outputs): parameter expansion done in echo to csv
2022-04-11 16:04:47 +02:00
28fff104a1
feat(S3_in_w_x_flags): Support S3 URIs for custom checks paths and whitelist files. ( #1090 )
...
* feat(S3_in_w_x_flags): Support S3 URIs for custom checks paths and whitelist files.
* feat(S3_in_w_x_flags): README document was updated.
* Update README.md
* Update README.md
* Update README.md
* Update README.md
Co-authored-by: Toni de la Fuente <toni@blyx.com >
Co-authored-by: Sergio Garcia Garcia
2022-04-07 14:37:02 -04:00
07b2b0de5a
fix(extra764): Deleted temp file refs ( #1089 )
2022-04-07 17:03:32 +02:00
4287b7ac61
check empty array in SECURITYGROUPS object ( #1099 )
...
* check empty array in SECURITYGROUPS object
Logic is only checking an object to see if it is null. This should be checking for the array in the object to see if it is empty.
* Replace new conditional with the old one
* Update check_extra75
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2022-04-07 10:57:29 -04:00
734331d5bc
fix(extra764): NoSuchBucket error properly handled. ( #1094 )
2022-03-31 15:35:17 +02:00
5de2bf7a83
fix(extra7172): IllegalLocationConstraintException properly handled. ( #1093 )
2022-03-31 14:40:32 +02:00
1744921a0a
fix(extra792): TLS1.3 policies added as secure ( #1091 )
2022-03-30 17:50:00 +02:00
d4da64582c
docs(tf-quickstart): Update example code for terraform-quickstart ( #1086 )
...
+ use primary repository rather than fork.
+ use default branch.
+ fixed a missing character typos.
+ remove blank end-of-line spaces.
@singergs: thanks for adding this code and the video.
2022-03-30 09:15:38 +02:00
Pepe Fagoaga