ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-07-24 13:01:56 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,964 Commits 496 Branches 214 Tags
2.11.0
Commit Graph

708 Commits

Author SHA1 Message Date
Mitch ddd34dc9cc fix(extra7173): Correct check and alternative name (#1270) 2022-07-20 08:36:34 +02:00
Phil Massyn f0ce17182b feat(ecr_lifecycle): Check Lifecycle policy (#1260) 
* Create checks_7194

ECR Repositories contain docker containers.  When automated processes create containers, the old ones tend to take up space.  With a lot of containers on the system, the account owner will be paying additional fees for images that are no longer in use.  By defining a lifecycle policy, a best practice is followed by reducing the total volume of data being consumed.

* Minor changes

* fix: Include bash header

Co-authored-by: n4ch04 <nachor1992@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-07-11 13:03:31 +02:00
Sergio Garcia 2a8a7d844b fix(apigatewayv2): handle BadRequestException (#1261) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-07-11 12:21:39 +02:00
Sergio Garcia fd850790d5 fix(add-checks-regions): Missing regions in checks (#1247) 
* add regions to checks

* add root as resource

Co-authored-by: sergargar <sergio@verica.io>
 2022-07-04 09:46:08 +02:00
rajarshidas e4f0f3ec87 feat(check): Ensure default internet access from Amazon AppStream fleet should be disabled. (#1233) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-29 12:51:58 +02:00
rajarshidas cc6302f7b8 feat(checks): Amazon AppStream checks (#1216) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-29 12:31:42 +02:00
Bayron Carranza c89fd82856 feat(check7164): 365 days or more in a Cloudwatch log retention should be consider PASS (#1240) 
* 365 DAYS or More Retention log group in cloudwatch

* fix(extra7162): Fix comparison errors

Also include minor changes to texts

* fix(extra7162): Set as Pass log groups that never expires

* fix(typo)

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-06-28 08:58:41 +02:00
Pepe Fagoaga 0e29a92d42 fix(extra7162): Query AWS log groups using LOG_GROUP_RETENTION_PERIOD_DAYS (#1232) 2022-06-27 09:18:39 +02:00
rajarshidas 89416f37af feat(check): Directory Service - Ensure Radius server is using the recommended security protocol (#1203) 
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2022-06-20 11:37:02 +02:00
zsecducna d85d0f5877 fix(extra767): Remove false positive (#1198) 
* Remove fail positive

Exclude distributions that does not support `POST` requests

* fix(extra767): Overall changes

- Quoted and braced variables
- Fix DefaultCacheBehavior twice in a AWS CLI query
- Use regex =~ to match values

* fix(check767): Change textInfo for textPass

* fix(extra767): Include AWS CLI error handling

Co-authored-by: Pepe Fagoaga <pepe@verica.io>
 2022-06-15 09:38:56 +02:00
Pepe Fagoaga 5becaca2c4 fix(extra7187): Remove commas from the metadata (#1187) 2022-06-08 09:02:38 +02:00
Sergio Garcia 48f405a696 fix(check119_remediation): Update check remediation text. (#1185) 2022-06-07 14:48:13 +02:00
Sergio Garcia 7930b449b3 fix(apigateway_iam): Error handling and permissions for extra745. (#1176) 
* fix(apigateway_iam): Error handling and permissions for extra745.

* Update check_extra745

Co-authored-by: sergargar <sergio@verica.io>
 2022-06-02 15:16:43 +02:00
Sergio Garcia 2a54bbf901 fix(SQS_encryption_type): Add SQS encryption types to extra728. (#1175) 
* fix(SQS_encryption_type): Add SQS encryption types to extra728.

* Update check_extra728

* Update check_extra728

Co-authored-by: sergargar <sergio@verica.io>
 2022-06-02 15:01:02 +02:00
Sergio Garcia ba727391db fix(runtimes_extra762): Detect nodejs versions correctly. (#1177) 
Co-authored-by: sergargar <sergio@verica.io>
 2022-06-02 13:14:22 +02:00
Sergio Garcia d4346149fa fix(severity): High severity for check extra7185 (#1178) 2022-06-01 14:04:36 +02:00
Pepe Fagoaga 2637fc5132 feat(checks): New IAM privilege escalation check (#1168) 2022-06-01 13:58:31 +02:00
Sergio Garcia ac5135470b fix(update_deprecate_runtimes): Deprecated runtimes for lambda were updated (#1170) 2022-05-31 17:03:11 +02:00
rajarshidas 613966aecf feat(check): Amazon WorkSpaces storage volumes are encrypted 
If the value listed in the Volume Encryption column is Disabled, the selected AWS WorkSpaces instance volumes (root and user volumes) are not encrypted
 2022-05-31 17:01:20 +02:00
Pepe Fagoaga 83ddcb9c39 feat(check): PublicAccessBlockConfiguration (#1167) 2022-05-31 16:54:05 +02:00
Lucas L Lopes 957c2433cf feat(checks): New checks for Directory Service (#1164) 2022-05-30 14:24:44 +02:00
Pepe Fagoaga 432416d09e fix(checks): Severity for Lambda URL checks (#1162) 2022-05-25 12:22:42 +02:00
Pepe Fagoaga 24c60a0ef6 fix(checks): Handle AWS Gov Cloud regions (#1160) 2022-05-25 12:01:58 +02:00
Andrea Di Fabio f616c17bd2 feat(new): New custom check extra9999 to build a custom check on the fly (#1103) 2022-05-25 09:16:36 +02:00
Pepe Fagoaga 5628200bd4 fix(remediation): Fix remediation fields for checks (#1157) 2022-05-23 15:48:26 +02:00
Pepe Fagoaga ae93527a6f fix(BucketLocation): Recover bucket policy using the right region endpoint (#1156) 2022-05-23 15:45:30 +02:00
Pepe Fagoaga 2939d5cadd feat(lambda-function): Checks for misconfigured function's URLs (#1148) 2022-05-23 10:46:19 +02:00
Pepe Fagoaga e2c7bc2d6d fix(IllegalLocationConstraintException): Recover bucket policy using the right region endpoint (#1155) 2022-05-23 09:37:46 +02:00
Jens Brey 59abd2bd5b check_extra7113: Fix wrong listing of RDS instances in regions without databases (#1124) 
Co-authored-by: Jens Brey <jens.brey@allcloud.io>
 2022-05-03 11:31:23 +02:00
Pepe Fagoaga 8bfd9c0e62 feat(emr): Check BlockPublicAccessConfiguration for EMR (#1120) 2022-04-29 14:23:54 +02:00
Divyanshu 95df9bc316 feat(checks): New group and checks for Codebuild and EMR (#1112) 2022-04-29 14:19:04 +02:00
Pepe Fagoaga d6ade7694e chore(allowlist): Rename references (#1108) 
* chore(allowlist): rename file

* chore(allowlist): remove old references
 2022-04-13 11:31:50 +02:00
n4ch04 c9e282f236 IAM check116 and check122 modified to log also PASS results (#1107) 
* fix(check116): Fixed logic to include resource_id of passed users

* fix(check122): Changed logic check to include explicit pass records
 2022-04-12 19:54:51 +02:00
carterjones 5b902a1329 fix typo: publiccly -> publicly (#1106) 2022-04-12 18:12:26 +02:00
Pepe Fagoaga fc7c932169 fix(extra7147): Handle unsupported AWS regions for Glacier (#1101) 2022-04-11 16:10:23 +02:00
n4ch04 07b2b0de5a fix(extra764): Deleted temp file refs (#1089) 2022-04-07 17:03:32 +02:00
nealalan 4287b7ac61 check empty array in SECURITYGROUPS object (#1099) 
* check empty array in SECURITYGROUPS object

Logic is only checking an object to see if it is null. This should be checking for the array in the object to see if it is empty.

* Replace new conditional with the old one

* Update check_extra75

Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>
 2022-04-07 10:57:29 -04:00
Sergio Garcia 734331d5bc fix(extra764): NoSuchBucket error properly handled. (#1094) 2022-03-31 15:35:17 +02:00
Sergio Garcia 5de2bf7a83 fix(extra7172): IllegalLocationConstraintException properly handled. (#1093) 2022-03-31 14:40:32 +02:00
Sergio Garcia 1744921a0a fix(extra792): TLS1.3 policies added as secure (#1091) 2022-03-30 17:50:00 +02:00
Andrea Di Fabio d94acfeb17 New Extra Check - Detect SGs created by the EC2 Launch Wizard (#1081) 
* new check

* added check to group

* fixed name

* added testpass logic

* Fixed a few issues

* Fixed more issues

* Updated to add extended information

* Added new line at end of file

* Fixed Spelling

* fix(title): Update title name

* refactor(style): Minor changes

Co-authored-by: Andrea Di Fabio <adifabio@amazon.com>
 2022-03-29 10:06:44 +02:00
soffensive fcc14012da Update check_extra736, is missing $PROFILE_OPT (#1084) 
$PROFILE_OPT was missing in one aws command
 2022-03-29 09:11:41 +02:00
Lucas Moura cc8cbc89fd Fix typo extra729 and extra740 (#1083) 
* Fix typo on remediation

* Fix typo on remediation description
 2022-03-29 08:58:06 +02:00
Sergio Garcia 8582e40edf fix(secrets_library): Verify if detect-secrets library is missing (#1080) 2022-03-25 13:19:05 +01:00
Pepe Fagoaga 565200529f fix(detect-secrets): Include missing colon to link values (#1078) 2022-03-22 13:53:36 +01:00
Sergio Garcia 198c7f48ca fix(bucket_region): check extra764 doesn't handle bucket region properly (#1077) 
* fix(bucket_region): check extra764 doesn't handle bucket region properly
 2022-03-18 11:51:42 +01:00
plarso c526c61d5e Fix(check122): Error when policy name contains commas (#1067) 
* check122 - Support policy names with commas

* Requested changes
 2022-03-16 15:06:12 +01:00
Leonardo Azize Martins c4aff56f23 fix(extra760): Improve error handling (#1055) 
* Fix AccessDenied issue

* fix(extra760): Error handling

* Fix merge conflict

* Improve code style

* Fix grep filter

* Fix bash variable expansion

* Fix grep logic to handle zip file
 2022-03-16 14:57:37 +01:00
n4ch04 d9e0ed1cc9 fix(check_extra7161): fixed check title (#1068) 2022-03-15 12:30:57 +01:00
Leonardo Azize Martins e77cd6b2b2 fix: Change lower case from bash variable expansion to tr (#1064) 
* fix(extra715): Change lower case from bash variable expansion to tr command

* fix: Change from bash variable expansion to tr command

* Change the way to handle lower case
 2022-03-15 08:22:22 +01:00