prowler

iam_administrator_access_with_mfa

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_avoid_root_usage

fix(iam_avoid_root_usage): change timestamp format (#4446 )

2024-07-15 17:10:49 +02:00

iam_aws_attached_policy_no_administrative_privileges

fix(aws): findings in IAM policies were not reported (#5560 )

2024-10-29 14:29:29 -05:00

iam_check_saml_providers_sts

refactor(arn): refactor arn for unknown resources (#5712 )

2024-11-19 16:21:43 -04:00

iam_customer_attached_policy_no_administrative_privileges

fix(aws): findings in IAM policies were not reported (#5560 )

2024-10-29 14:29:29 -05:00

iam_customer_unattached_policy_no_administrative_privileges

fix(aws): findings in IAM policies were not reported (#5560 )

2024-10-29 14:29:29 -05:00

iam_group_administrator_access_policy

feat(IAM): add new check iam_group_administrator_access_policy (#4831 )

2024-08-22 10:14:45 -04:00

iam_inline_policy_allows_privilege_escalation

chore(aws): handle NotAction cases in IAM policies (#5035 )

2024-09-24 08:36:11 -04:00

iam_inline_policy_no_administrative_privileges

fix(iam): fill resource id with inline policy entity (#5120 )

2024-09-23 10:54:38 -04:00

iam_inline_policy_no_full_access_to_cloudtrail

fix(iam): fill resource id with inline policy entity (#5120 )

2024-09-23 10:54:38 -04:00

iam_inline_policy_no_full_access_to_kms

fix(iam): fill resource id with inline policy entity (#5120 )

2024-09-23 10:54:38 -04:00

iam_no_custom_policy_permissive_role_assumption

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_no_expired_server_certificates_stored

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_no_root_access_key

feat(aws): add new check iam_root_credentials_management_enabled (#5801 )

2024-11-18 16:59:35 +01:00

iam_password_policy_expires_passwords_within_90_days_or_less

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_password_policy_lowercase

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_password_policy_minimum_length_14

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_password_policy_number

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_password_policy_reuse_24

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_password_policy_symbol

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_password_policy_uppercase

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_policy_allows_privilege_escalation

chore(aws): handle NotAction cases in IAM policies (#5035 )

2024-09-24 08:36:11 -04:00

iam_policy_attached_only_to_group_or_roles

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_policy_cloudshell_admin_not_attached

feat(iam): add new check iam_policy_cloudshell_admin_not_attached (#5437 )

2024-10-21 07:41:58 -07:00

iam_policy_no_full_access_to_cloudtrail

feat(IAM): Add inline policies checks and improve custom policy checks (#4255 )

2024-07-03 15:51:19 -04:00

iam_policy_no_full_access_to_kms

feat(IAM): Add inline policies checks and improve custom policy checks (#4255 )

2024-07-03 15:51:19 -04:00

iam_role_administratoraccess_policy

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_role_cross_account_readonlyaccess_policy

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_role_cross_service_confused_deputy_prevention

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_root_credentials_management_enabled

feat(aws): add new check iam_root_credentials_management_enabled (#5801 )

2024-11-18 16:59:35 +01:00

iam_root_hardware_mfa_enabled

feat(aws): add new check iam_root_credentials_management_enabled (#5801 )

2024-11-18 16:59:35 +01:00

iam_root_mfa_enabled

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_rotate_access_key_90_days

fix(iam): set unique resource id for each user access key (#6128 )

2024-12-11 09:13:49 +01:00

iam_securityaudit_role_created

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_support_role_created

fix(iam): update AWS Support policy (#5399 )

2024-10-14 13:58:42 -04:00

iam_user_accesskey_unused

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_user_administrator_access_policy

feat(iam): add new check to ensure user does not have policies with admin access (#4802 )

2024-08-20 11:08:51 -04:00

iam_user_console_access_unused

chore(iam): improve iam user console access check (#4211 )

2024-06-11 12:45:29 +02:00

iam_user_hardware_mfa_enabled

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_user_mfa_enabled_console_access

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_user_no_setup_initial_access_key

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_user_two_active_access_key

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_user_with_temporary_credentials

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

lib

chore(iam): add exception for public policy in EKS service (#4759 )

2024-11-19 09:42:56 -04:00

iam_service_test.py

feat(iam): add new check iam_policy_cloudshell_admin_not_attached (#5437 )

2024-10-21 07:41:58 -07:00