Simone 534dedb608 feat(sagemaker): add sagemaker_models_registry_in_use check (#11196) ...

Co-authored-by: cascioli <simdon2015?gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-authored-by: Daniel Barranquero <danielbo2001@gmail.com>

2026-05-20 13:59:18 +02:00

..

accessanalyzer

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

account

fix(report): remove invalid resources in report (#6852)

2025-02-19 21:27:52 +05:45

acm

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

apigateway

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

apigatewayv2

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

appsync

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

athena

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

autoscaling

feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection (#9956)

2026-02-04 16:53:08 +01:00

awslambda

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

backup

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

bedrock

feat(aws): add bedrock_prompt_encrypted_with_cmk security check (#10905)

2026-05-11 10:32:44 +02:00

cloudformation

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

cloudfront

feat(cloudfront): detect Standard Logging v2 via CloudWatch Log Delivery (#10090)

2026-03-25 10:09:21 +00:00

cloudtrail

feat(aws): add cloudtrail_bedrock_logging_enabled security check (#10858)

2026-05-11 17:11:49 +02:00

cloudwatch

fix(cloudwatch): handle None metric alarms (#7205)

2025-03-12 14:44:36 +01:00

codeartifact

fix(codeartifact): only retrieve the latest version from a package (#10243)

2026-04-08 09:21:19 +02:00

codebuild

feat(codebuild): use batched API calls to prevent throttling and false positives (#10639)

2026-04-30 17:19:21 +02:00

codepipeline

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

cognito

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670)

2025-09-09 13:12:57 +05:45

config

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

datasync

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

directconnect

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

dlm

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

dms

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

documentdb

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

dynamodb

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

ec2

feat(ec2): add check for SG ingress from public IPs to any port (#10335)

2026-03-26 17:21:16 +01:00

ecr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

ecs

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

efs

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

eks

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

elasticache

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

elasticbeanstalk

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

elb

fix: handle eks cluster version and listener certificate arn not in acm (#8802)

2025-10-01 13:55:26 -04:00

elbv2

fix(elbv2): Handle post-quantum (PQ) TLS policies (#10219)

2026-03-03 10:18:00 +01:00

emr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

eventbridge

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

firehose

fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142)

2025-11-03 11:31:18 -05:00

fms

fix(fms): resource metadata could not be converted to dict (#7379)

2025-03-26 19:25:00 +01:00

fsx

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

glacier

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

globalaccelerator

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

glue

feat(glue): add check for plaintext secrets in ETL job arguments (#10368)

2026-03-25 12:25:36 +01:00

guardduty

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

iam

chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150)

2026-05-14 08:10:20 +01:00

inspector2

fix(inspector2): handle error when getting active findings (#7670)

2025-05-07 14:39:34 +02:00

kafka

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

kinesis

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

kms

fix(kms): detect public access for any KMS action, not just kms:* (#10071)

2026-02-16 10:12:29 +01:00

lightsail

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

macie

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-21 13:56:06 -05:00

memorydb

fix(memorydb): handle clusters with no security groups (#8666)

2025-09-08 15:05:13 -04:00

mq

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

neptune

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284)

2024-10-04 14:00:25 -04:00

opensearch

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

organizations

fix(organizations): Key Error: Statement in check organizations_scp_deny_regions (#8091)

2025-06-25 15:23:38 +08:00

rds

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598)

2026-04-08 08:40:58 +02:00

redshift

fix: handle errors in AWS, Azure, and GCP (#7456)

2025-04-08 18:05:43 +05:45

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

route53

fix(sdk): cover CNAME → dangling S3 in route53 takeover check (#10920)

2026-04-29 11:14:33 +01:00

s3

fix(s3): only emit shadow-resource finding when bucket name matches a predictable pattern (#11220)

2026-05-19 15:46:05 +01:00

sagemaker

feat(sagemaker): add sagemaker_models_registry_in_use check (#11196)

2026-05-20 13:59:18 +02:00

secretsmanager

feat(aws): add check secretsmanager_has_restrictive_resource_policy (#6985)

2026-04-27 21:49:34 +01:00

securityhub

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

servicecatalog

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-21 13:56:06 -05:00

ses

feat(ses): add check for DKIM signing enabled on SES identities (#10923)

2026-05-20 13:33:03 +02:00

shield

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

sns

fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340)

2025-07-24 18:03:30 +08:00

sqs

chore(sqs): clean up code (#8366)

2025-07-25 20:10:34 +08:00

ssm

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

stepfunctions

feat(stepfunctions): add check for secrets in state machine definition (#10570)

2026-04-09 15:56:29 +02:00

storagegateway

feat(sgw): add storagegateway_fault_tolerance check (#5570)

2024-11-20 15:10:44 -04:00

transfer

feat(transfer): add new check transfer_server_encryption_in_transit (#5590)

2024-11-04 11:30:18 -05:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

vpc

fix(aws): filter VPC endpoint services by audited account to prevent AccessDenied errors (#10152)

2026-02-24 18:30:31 +01:00

waf

feat(waf): add new check waf_global_webacl_with_rules (#5469)

2024-10-22 10:26:22 -07:00

wafv2

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

wellarchitected

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

workspaces

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45