Prowler BotandSergio Garcia 2cc8363697 fix: handle errors in AWS, Azure, and GCP (#7471) ...

Co-authored-by: Sergio Garcia <hello@mistercloudsec.com>

2025-04-08 19:03:42 +05:45

..

accessanalyzer

refactor(arn): fine tune arn and resources id for unknown values (#5841)

2024-11-20 12:56:51 +01:00

account

fix(report): remove invalid resources in report (#6984)

2025-02-20 11:05:58 +05:30

acm

feat(elb): add new check elb_ssl_listeners_use_acm_certificate (#5424)

2024-10-21 10:15:12 -07:00

apigateway

feat(apigateway): add new check apigateway_restapi_tracing_enabled (#5470)

2024-10-21 10:14:38 -07:00

apigatewayv2

fix(apigatewayv2): managed exception NotFoundException (#6590)

2025-01-17 09:27:19 -05:00

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

appsync

feat(appsync): add new check appsync_field_level_logging_enabled (#5602)

2024-11-11 10:23:13 -05:00

athena

feat(athena): add new check athena_workgroup_logging_enabled (#5468)

2024-10-18 16:40:57 -04:00

autoscaling

fix(autoscaling): autoscaling_group_launch_configuration_requires_imdsv2 fails if Launch Template is used (#6111)

2024-12-11 11:18:30 -04:00

awslambda

fix(aws): key error for detect-secrets (#6865)

2025-02-07 10:04:54 -05:00

backup

feat(aws): include resource metadata in services from a* to b* (#6504)

2025-01-23 16:05:03 +01:00

bedrock

refactor(arn): fine tune arn and resources id for unknown values (#5841)

2024-11-20 12:56:51 +01:00

cloudformation

fix(cloudformation): fix flaky tests (#6398)

2025-01-09 15:30:11 +05:45

cloudfront

test(cloudfront): add name retrieval test for cloudfront bucket domains (#6975)

2025-02-19 09:12:17 +05:30

cloudtrail

feat(aws): add fixers for threat detection checks (#7085)

2025-03-03 15:50:18 +01:00

cloudwatch

fix(cloudwatch): handle None metric alarms (#7207)

2025-03-12 16:18:44 +01:00

codeartifact

fix(codeartifact): fix flaky tests (#6449)

2025-01-10 18:16:00 +05:45

codebuild

fix(aws): solve multiple errors (#7440)

2025-04-04 10:47:08 -04:00

cognito

feat(wafv2): change web_acls from list to dict (#5308)

2024-10-07 10:23:58 -04:00

config

feat(config): add new check config_recorder_using_aws_service_role (#5357)

2024-10-14 11:19:35 -04:00

datasync

feat(datasync): add datasync service and check datasync_task_logging_enabled (#5444)

2024-10-17 13:07:18 -04:00

directconnect

refactor(arn): refactor arn for unknown resources (#5712)

2024-11-19 16:21:43 -04:00

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

dlm

feat(aws): include resource metadata in services from d* to e* (#6532)

2025-01-23 16:03:59 +01:00

dms

feat(dms): add new check dms_replication_task_target_logging_enabled (#5631)

2024-11-07 10:19:44 -05:00

documentdb

fix(aws): list tags for DocumentDB clusters (#6622)

2025-01-20 17:22:06 -05:00

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

dynamodb

fix(aws): handle AccessDenied when retrieving resource policy (#6912)

2025-02-12 19:15:51 -05:00

ec2

feat(detect-secrets): get secrets plugins from config.yaml (#6544)

2025-01-23 14:16:15 +01:00

ecr

fix(aws): handle AccessDenied when retrieving resource policy (#6912)

2025-02-12 19:15:51 -05:00

ecs

fix(ecs): ensure unique finding id in ECS checks (#7059)

2025-03-03 14:59:56 +01:00

efs

chore(aws): cleanup tests (#5592)

2024-10-30 14:04:05 -05:00

eks

chore(aws): cleanup tests (#5592)

2024-10-30 14:04:05 -05:00

elasticache

fix(elasticache): improve logic in elasticache_redis_cluster_backup_enabled (#7045)

2025-02-26 12:12:44 +01:00

elasticbeanstalk

feat(elasticbeanstalk): add new check elasticbeanstalk_enhanced_health_reporting_enabled (#5348)

2024-10-11 10:27:48 -04:00

elb

feat(aws): include resource metadata in services from d* to e* (#6532)

2025-01-23 16:03:59 +01:00

elbv2

feat(aws): include resource metadata in services from d* to e* (#6532)

2025-01-23 16:03:59 +01:00

emr

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-23 14:13:23 +01:00

eventbridge

chore(deps): bump botocore from 1.35.94 to 1.35.99 (#6520)

2025-01-23 14:13:04 +01:00

firehose

fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6108)

2024-12-10 13:42:13 -04:00

fms

fix(fms): resource metadata could not be converted to dict (#7388)

2025-03-27 09:13:16 +01:00

fsx

feat(aws): add new check fsx_windows_file_system_multi_az (#5491)

2024-10-23 14:07:57 -07:00

glacier

feat(glacier): add new fixer glacier_vaults_policy_public_access_fixer (#5950)

2024-12-11 11:10:12 -04:00

globalaccelerator

feat(aws): add tags to Global Accelerator (#5233)

2024-09-27 12:37:19 -04:00

glue

feat(glue): add new check glue_etl_jobs_logging_enabled (#5581)

2024-10-30 10:56:46 -05:00

guardduty

fix(guardduty): fix guardduty_is_enabled_fixer test (#5668)

2024-11-07 08:21:49 -05:00

iam

fix(iam): handle none SAML Providers (#7371)

2025-03-25 11:18:10 +01:00

inspector2

feat(inspector2): Add more tests to inspector2_is_enabled check (#5150)

2024-09-23 15:06:34 -04:00

kafka

chore(aws): add resource metadata to services from f to o (#6545)

2025-01-23 16:04:40 +01:00

kinesis

feat(kinesis): add new check kinesis_stream_data_retention_period (#5547)

2024-11-14 12:01:01 -05:00

kms

fix(kms): Amazon KMS API call error handling (#6904)

2025-02-12 11:08:47 -05:00

lightsail

chore(aws): add resource metadata to services from f to o (#6545)

2025-01-23 16:04:40 +01:00

macie

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-23 14:13:23 +01:00

memorydb

feat(aws): add MemoryDB service (#5546)

2024-11-22 15:13:16 -04:00

mq

feat(mq): add mq_broker_not_publicly_accessible check (#5604)

2024-11-11 12:12:21 -05:00

neptune

feat(neptune): add new fixer neptune_cluster_public_snapshot_fixer (#5749)

2024-11-22 11:13:18 -04:00

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284)

2024-10-04 14:00:25 -04:00

opensearch

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-23 14:13:23 +01:00

organizations

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-23 14:13:23 +01:00

rds

fix(rds): hundle Certificate rds-ca-2019 not found (#7392)

2025-03-27 12:04:19 +01:00

redshift

fix: handle errors in AWS, Azure, and GCP (#7471)

2025-04-08 19:03:42 +05:45

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

route53

fix(route53): solve false positive in route53_public_hosted_zones_cloudwatch_logging_enabled (#7293)

2025-03-19 13:39:56 +05:45

s3

fix(s3): handle None S3 account public access block (#7376)

2025-03-25 17:55:54 +01:00

sagemaker

feat(sagemaker): Ensure SageMaker Endpoint Production Variants have Initial Instance Count greater than one (#5045)

2024-09-19 15:16:56 -04:00

secretsmanager

feat(secretsmanager): add new check secretsmanager_secret_rotated_periodically (#5450)

2024-11-04 16:08:38 -05:00

securityhub

refactor(arn): fine tune arn and resources id for unknown values (#5841)

2024-11-20 12:56:51 +01:00

servicecatalog

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-23 14:13:23 +01:00

ses

feat(aws): Add new checks ses_identities/glue_data_catalogs/secretsmanager _not_publicly_accessible (#5471)

2024-10-18 16:40:12 -04:00

shield

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-23 14:13:23 +01:00

sns

fix(sns): Add region to subscriptions (#6740)

2025-01-30 15:46:55 +05:45

sqs

fix(sqs): fix flaky test (#6595)

2025-01-17 12:40:11 -05:00

ssm

feat(detect-secrets): get secrets plugins from config.yaml (#6544)

2025-01-23 14:16:15 +01:00

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

stepfunctions

fix(stepfunctions): Nonetype object has no attribute level (#7389)

2025-03-27 11:09:17 +01:00

storagegateway

feat(sgw): add storagegateway_fault_tolerance check (#5570)

2024-11-20 15:10:44 -04:00

transfer

feat(transfer): add new check transfer_server_encryption_in_transit (#5590)

2024-11-04 11:30:18 -05:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

vpc

chore(aws): add resource metadata to services from t to w (#6546)

2025-01-23 16:04:49 +01:00

waf

feat(waf): add new check waf_global_webacl_with_rules (#5469)

2024-10-22 10:26:22 -07:00

wafv2

fix(aws): get firewall manager managed rule groups (#6119)

2024-12-10 15:34:22 -04:00

wellarchitected

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

workspaces

chore(aws): improve logic for determining if resources are publicly accessible (#5195)

2024-10-16 12:10:38 -04:00