César Arroba 29102e7b33 feat(permissions): dead-letter the real-time events EventBridge cannot deliver ...

Adds an SQS dead-letter queue to the real-time detection target, in both the
CloudFormation and Terraform templates, so a delivery failure is auditable
instead of silent. EventBridge retries for up to 24 hours and then writes the
event to the queue with the error code and attempt count; responses that are
never retried land there on the first attempt.

EventBridge delivers to a DLQ as a service rather than through the target
invoke role, so the queue carries a resource policy granting sqs:SendMessage
to events.amazonaws.com, scoped to the rule ARN. The queue uses SQS-managed
encryption to avoid granting KMS permissions, and keeps messages for the
14-day maximum. Prowler is granted no access to it.

2026-08-17 11:15:45 +02:00

..

templates

feat(permissions): dead-letter the real-time events EventBridge cannot deliver

2026-08-17 11:15:45 +02:00

prowler-additions-policy.json

feat(rolesanywhere): flag profiles with unscoped sessions (#12416)

2026-08-13 17:06:24 +02:00

prowler-azure-custom-role.json

fix(azure): custom Prowler Role for Azure assignableScopes (#6149)

2024-12-16 08:34:17 +01:00