Daniel Barranquero be347b2428 feat(ec2): add new check ec2_launch_template_imdsv2_required (#6139) ...

Co-authored-by: MrCloudSec <hello@mistercloudsec.com>

2024-12-12 11:27:20 -04:00

..

ec2_ami_public

chore(ec2): add name from image information to status_extended (#5755)

2024-11-13 14:30:58 -05:00

ec2_client_vpn_endpoint_connection_logging_enabled

feat(ec2): Client VPN Endpoints Should Have Client Connection Logging Enabled (#4804)

2024-08-22 09:57:33 -04:00

ec2_ebs_default_encryption

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_public_snapshot

feat(ec2): add new fixer ec2_ebs_public_snapshot_fixer (#5825)

2024-11-21 12:40:28 -04:00

ec2_ebs_snapshot_account_block_public_access

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_snapshots_encrypted

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_volume_encryption

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_volume_protected_by_backup_plan

feat(waf): add new check waf_regional_rulegroup_not_empty (#5415)

2024-10-16 15:22:24 -04:00

ec2_ebs_volume_snapshots_exists

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_elastic_ip_shodan

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_elastic_ip_unassigned

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_account_imdsv2_enabled

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_detailed_monitoring_enabled

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_imdsv2_enabled

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_internet_facing_with_instance_profile

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_managed_by_ssm

fix(aws): aws check and metadata fixes (#4251)

2024-06-19 10:21:50 +02:00

ec2_instance_older_than_specific_days

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_paravirtual_type

feat(ec2): Amazon EC2 Paravirtual Instance Types Should Not Be Used (#4922)

2024-09-11 15:56:20 -04:00

ec2_instance_port_cassandra_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_cifs_exposed_to_internet

feat(ec2): add new fixer ec2_instance_port_cifs_exposed_to_internet_fixer (#6159)

2024-12-12 09:22:56 -04:00

ec2_instance_port_elasticsearch_kibana_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_ftp_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_kafka_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_kerberos_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_ldap_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_memcached_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_mongodb_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_mysql_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_oracle_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_postgresql_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_rdp_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_redis_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_sqlserver_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_ssh_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_telnet_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_profile_attached

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_public_ip

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_secrets_user_data

feat(secrets): improve detect secrets checks and add config (#4915)

2024-09-04 16:54:55 +02:00

ec2_instance_uses_single_eni

feat(ec2): Amazon EC2 Instances Should Not Use Multiple ENIs (#4935)

2024-09-12 14:29:36 -04:00

ec2_launch_template_imdsv2_required

feat(ec2): add new check ec2_launch_template_imdsv2_required (#6139)

2024-12-12 11:27:20 -04:00

ec2_launch_template_no_public_ip

chore(ec2): enhance security group with any open port check (#5215)

2024-09-30 14:53:04 -04:00

ec2_launch_template_no_secrets

chore(ec2): add tags to report of EC2 launch templates (#5210)

2024-09-26 10:50:02 -04:00

ec2_networkacl_allow_ingress_any_port

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_networkacl_allow_ingress_tcp_port_22

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_networkacl_allow_ingress_tcp_port_3389

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_networkacl_unused

feat(ec2): Ensure not default Network Access Control Lists are used (#4917)

2024-09-11 09:55:18 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_all_ports

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_any_port

chore(ec2): enhance security group with any open port check (#5215)

2024-09-30 14:53:04 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_high_risk_tcp_ports

fix(ec2): unique finding per Security Group in high risk ports check (#5697)

2024-11-08 14:08:27 -05:00

ec2_securitygroup_allow_ingress_from_internet_to_port_mongodb_27017_27018

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_ftp_port_20_21

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_3389

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_cassandra_7199_9160_8888

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_elasticsearch_kibana_9200_9300_5601

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_kafka_9092

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_memcached_11211

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_mysql_3306

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_oracle_1521_2483

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_postgres_5432

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_redis_6379

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_sql_server_1433_1434

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_telnet_23

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_wide_open_public_ipv4

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_default_restrict_traffic

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_from_launch_wizard

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_securitygroup_not_used

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_securitygroup_with_many_ingress_egress_rules

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_transitgateway_auto_accept_vpc_attachments

feat(ec2): Ensure automatic acceptance of VPC attachment requests is disabled (#4765)

2024-08-22 08:26:01 -04:00

lib

feat(ec2): add checks for EC2 instances with exposed ports to the internet (#4029)

2024-05-28 11:44:19 -04:00

ec2_service_test.py

feat(ec2): add new check ec2_launch_template_imdsv2_required (#6139)

2024-12-12 11:27:20 -04:00