prowler

iam_administrator_access_with_mfa

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

iam_avoid_root_usage

fix(iam_avoid_root_usage): change timestamp format (#4446 )

2024-07-15 17:10:49 +02:00

iam_aws_attached_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_check_saml_providers_sts

fix(iam): handle none SAML Providers (#7359 )

2025-03-25 09:24:32 +01:00

iam_customer_attached_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_customer_unattached_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_group_administrator_access_policy

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_inline_policy_allows_privilege_escalation

feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726 )

2026-07-01 12:49:34 +02:00

iam_inline_policy_no_administrative_privileges

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_inline_policy_no_full_access_to_cloudtrail

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_inline_policy_no_full_access_to_kms

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_inline_policy_no_wildcard_marketplace_subscribe

feat(aws): add iam_policy_no_wildcard_marketplace_subscribe and iam_inline_policy_no_wildcard_marketplace_subscribe checks (#10525 )

2026-04-14 12:08:40 +02:00

iam_no_custom_policy_permissive_role_assumption

chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150 )

2026-05-14 08:10:20 +01:00

iam_no_expired_server_certificates_stored

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_no_root_access_key

fix(iam): check always if root credentials are present (#7967 )

2025-06-12 17:48:09 +02:00

iam_password_policy_expires_passwords_within_90_days_or_less

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_password_policy_lowercase

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_password_policy_minimum_length_14

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_password_policy_number

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_password_policy_reuse_24

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_password_policy_symbol

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_password_policy_uppercase

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_policy_allows_privilege_escalation

feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726 )

2026-07-01 12:49:34 +02:00

iam_policy_attached_only_to_group_or_roles

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_policy_cloudshell_admin_not_attached

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_policy_no_full_access_to_cloudtrail

chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150 )

2026-05-14 08:10:20 +01:00

iam_policy_no_full_access_to_kms

chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150 )

2026-05-14 08:10:20 +01:00

iam_policy_no_wildcard_marketplace_subscribe

chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150 )

2026-05-14 08:10:20 +01:00

iam_role_access_not_stale_to_bedrock

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

iam_role_administratoraccess_policy

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_role_cross_account_readonlyaccess_policy

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_role_cross_service_confused_deputy_prevention

fix(aws): false negative in iam_role_cross_service_confused_deputy_prevention (#9213 )

2025-11-11 17:39:16 -05:00

iam_root_credentials_management_enabled

fix(report): remove invalid resources in report (#6852 )

2025-02-19 21:27:52 +05:45

iam_root_hardware_mfa_enabled

fix(iam): check always if root credentials are present (#7967 )

2025-06-12 17:48:09 +02:00

iam_root_mfa_enabled

fix(iam): check always if root credentials are present (#7967 )

2025-06-12 17:48:09 +02:00

iam_rotate_access_key_90_days

fix(iam): set unique resource id for each user access key (#6128 )

2024-12-11 09:13:49 +01:00

iam_securityaudit_role_created

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_support_role_created

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_user_access_not_stale_to_bedrock

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

iam_user_access_not_stale_to_sagemaker

feat(aws): add iam_user_access_not_stale_to_sagemaker security check (#11000 )

2026-05-11 16:34:18 +02:00

iam_user_accesskey_unused

chore(iam): add tags to missing checks report (#5280 )

2024-10-03 13:47:10 -04:00

iam_user_administrator_access_policy

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_user_console_access_unused

chore(iam): improve iam user console access check (#4211 )

2024-06-11 12:45:29 +02:00

iam_user_hardware_mfa_enabled

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_user_mfa_enabled_console_access

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_user_no_setup_initial_access_key

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_user_two_active_access_key

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

iam_user_with_temporary_credentials

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

lib

feat(aws): add iam_policy_no_wildcard_marketplace_subscribe and iam_inline_policy_no_wildcard_marketplace_subscribe checks (#10525 )

2026-04-14 12:08:40 +02:00

iam_service_test.py

fix(tests_iam): AWS managed policies are isolated (#8609 )

2025-09-30 13:44:03 +05:45