prowler

accessanalyzer

refactor(arn): fine tune arn and resources id for unknown values (#5841 )

2024-11-20 12:56:51 +01:00

account

fix(aws): not show findings when AccessDenieds (#3803 )

2024-04-29 17:42:44 +02:00

acm

feat(elb): add new check elb_ssl_listeners_use_acm_certificate (#5424 )

2024-10-21 10:15:12 -07:00

apigateway

feat(apigateway): add new check apigateway_restapi_tracing_enabled (#5470 )

2024-10-21 10:14:38 -07:00

apigatewayv2

fix(apigatewayv2): managed exception NotFoundException (#6590 )

2025-01-17 09:27:19 -05:00

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

appsync

feat(appsync): add new check appsync_field_level_logging_enabled (#5602 )

2024-11-11 10:23:13 -05:00

athena

feat(athena): add new check athena_workgroup_logging_enabled (#5468 )

2024-10-18 16:40:57 -04:00

autoscaling

fix(autoscaling): autoscaling_group_launch_configuration_requires_imdsv2 fails if Launch Template is used (#6111 )

2024-12-11 11:18:30 -04:00

awslambda

feat(awslambda): add new fixer awslambda_function_not_publicly_accessible_fixer (#5840 )

2024-12-09 12:28:42 -04:00

backup

fix(aws): set unique resource IDs (#6152 )

2024-12-13 13:00:38 +01:00

bedrock

refactor(arn): fine tune arn and resources id for unknown values (#5841 )

2024-11-20 12:56:51 +01:00

cloudformation

fix(cloudformation): fix flaky tests (#6398 )

2025-01-09 15:30:11 +05:45

cloudfront

fix: added s3 origin comprobation in cloudfront_distributions_s3_origin_non_existent_bucket (#5543 )

2024-10-28 10:01:03 -05:00

cloudtrail

feat(cloudtrail): add new fixer cloudtrail_logs_s3_bucket_is_not_publicly_accessible_fixer (#6174 )

2024-12-16 10:05:34 -05:00

cloudwatch

fix(aws): remove cloudwatch_log_group_no_critical_pii_in_logs check (#5736 )

2024-11-12 12:50:47 -05:00

codeartifact

fix(codeartifact): fix flaky tests (#6449 )

2025-01-10 18:16:00 +05:45

codebuild

chore(codebuild): Cleanup tests (#5567 )

2024-10-29 11:31:19 -05:00

cognito

feat(wafv2): change web_acls from list to dict (#5308 )

2024-10-07 10:23:58 -04:00

config

feat(config): add new check config_recorder_using_aws_service_role (#5357 )

2024-10-14 11:19:35 -04:00

datasync

feat(datasync): add datasync service and check datasync_task_logging_enabled (#5444 )

2024-10-17 13:07:18 -04:00

directconnect

refactor(arn): refactor arn for unknown resources (#5712 )

2024-11-19 16:21:43 -04:00

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dlm

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dms

feat(dms): add new check dms_replication_task_target_logging_enabled (#5631 )

2024-11-07 10:19:44 -05:00

documentdb

fix(aws): list tags for DocumentDB clusters (#6622 )

2025-01-20 17:22:06 -05:00

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dynamodb

chore(aws): cleanup tests in dynamodb and cw (#5588 )

2024-10-31 07:59:33 +01:00

ec2

fix: add detector and line number of potential secret (#6663 )

2025-01-22 10:55:49 -05:00

ecr

feat(ecr): add new fixer ecr_repositories_not_publicly_accessible_fixer (#5923 )

2024-12-11 10:42:11 -04:00

ecs

fix(detect_secrets): refactor logic for detect-secrets (#6566 )

2025-01-16 13:07:18 -05:00

efs

chore(aws): cleanup tests (#5592 )

2024-10-30 14:04:05 -05:00

eks

chore(aws): cleanup tests (#5592 )

2024-10-30 14:04:05 -05:00

elasticache

feat(elasticache): add check elasticache_redis_cluster_auth_enabled (#4830 )

2024-09-20 12:18:08 -04:00

elasticbeanstalk

feat(elasticbeanstalk): add new check elasticbeanstalk_enhanced_health_reporting_enabled (#5348 )

2024-10-11 10:27:48 -04:00

elb

feat(elb): add new check elb_desync_mitigation_mode (#5500 )

2024-10-22 11:08:13 -07:00

elbv2

feat(elbv2): add elbv2_nlb_tls_termination_enabled check (#5550 )

2024-10-30 15:00:55 -05:00

emr

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

eventbridge

chore(deps): bump botocore from 1.35.94 to 1.35.99 (#6520 )

2025-01-23 14:13:04 +01:00

firehose

fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6108 )

2024-12-10 13:42:13 -04:00

fms

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

fsx

feat(aws): add new check fsx_windows_file_system_multi_az (#5491 )

2024-10-23 14:07:57 -07:00

glacier

feat(glacier): add new fixer glacier_vaults_policy_public_access_fixer (#5950 )

2024-12-11 11:10:12 -04:00

globalaccelerator

feat(aws): add tags to Global Accelerator (#5233 )

2024-09-27 12:37:19 -04:00

glue

feat(glue): add new check glue_etl_jobs_logging_enabled (#5581 )

2024-10-30 10:56:46 -05:00

guardduty

fix(guardduty): fix guardduty_is_enabled_fixer test (#5668 )

2024-11-07 08:21:49 -05:00

iam

fix(iam): set unique resource id for each user access key (#6128 )

2024-12-11 09:13:49 +01:00

inspector2

feat(inspector2): Add more tests to inspector2_is_enabled check (#5150 )

2024-09-23 15:06:34 -04:00

kafka

feat(kafka): add new check kafka_connector_in_transit_encryption_enabled (#5577 )

2024-11-04 12:46:32 -05:00

kinesis

feat(kinesis): add new check kinesis_stream_data_retention_period (#5547 )

2024-11-14 12:01:01 -05:00

kms

feat(kms): add new fixer kms_cmk_not_deleted_unintentionally_fixer (#5842 )

2024-11-21 11:45:55 -04:00

lightsail

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

macie

feat(macie): add new check macie_automated_sensitive_data_discovery_enabled (#5390 )

2024-10-14 17:58:44 -04:00

memorydb

feat(aws): add MemoryDB service (#5546 )

2024-11-22 15:13:16 -04:00

mq

feat(mq): add mq_broker_not_publicly_accessible check (#5604 )

2024-11-11 12:12:21 -05:00

neptune

feat(neptune): add new fixer neptune_cluster_public_snapshot_fixer (#5749 )

2024-11-22 11:13:18 -04:00

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284 )

2024-10-04 14:00:25 -04:00

opensearch

feat(opensearch): add new fixer opensearch_service_domains_not_publicly_accessible_fixer (#5926 )

2024-12-11 11:29:48 -04:00

organizations

fix(aws): disallow child-accounts to overwrite policy for ai_services_opt_out (#6229 )

2024-12-20 11:04:42 -05:00

rds

fix(aurora): Add default ports to the check of using non default ports (#5821 )

2024-12-11 13:01:45 -04:00

redshift

feat(aws): add new check redshift_cluster_multi_az_enabled (#5492 )

2024-10-23 10:32:25 -07:00

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

route53

fix(aws): set unique resource IDs (#6152 )

2024-12-13 13:00:38 +01:00

s3

feat(s3): add new fixer s3_bucket_policy_public_write_access_fixer (#6173 )

2024-12-16 10:01:38 -05:00

sagemaker

feat(sagemaker): Ensure SageMaker Endpoint Production Variants have Initial Instance Count greater than one (#5045 )

2024-09-19 15:16:56 -04:00

secretsmanager

feat(secretsmanager): add new check secretsmanager_secret_rotated_periodically (#5450 )

2024-11-04 16:08:38 -05:00

securityhub

refactor(arn): fine tune arn and resources id for unknown values (#5841 )

2024-11-20 12:56:51 +01:00

servicecatalog

feat(servicecatalog): Add new check servicecatalog_portfolio_shared_within_organization_only (#5632 )

2024-11-08 12:22:13 -05:00

ses

feat(aws): Add new checks ses_identities/glue_data_catalogs/secretsmanager _not_publicly_accessible (#5471 )

2024-10-18 16:40:12 -04:00

shield

feat(aws): add tags to Global Accelerator (#5233 )

2024-09-27 12:37:19 -04:00

sns

fix(aws): handle none type attributes (#5216 )

2024-09-30 18:04:14 +02:00

sqs

fix(sqs): fix flaky test (#6595 )

2025-01-17 12:40:11 -05:00

ssm

test(aws): fix failing tests for ecs_task_definitions_logging_enabled and ssm_managed_compliant_patching (#5267 )

2024-10-02 09:35:27 -04:00

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

stepfunctions

feat(stepfunctions): add stepfunctions service and check stepfunctions_statemachine_logging_enabled (#5466 )

2024-12-16 11:34:02 -05:00

storagegateway

feat(sgw): add storagegateway_fault_tolerance check (#5570 )

2024-11-20 15:10:44 -04:00

transfer

feat(transfer): add new check transfer_server_encryption_in_transit (#5590 )

2024-11-04 11:30:18 -05:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

vpc

fix(vpc): add new principal wildcard verification (#6461 )

2025-01-13 09:49:10 -05:00

waf

feat(waf): add new check waf_global_webacl_with_rules (#5469 )

2024-10-22 10:26:22 -07:00

wafv2

fix(aws): get firewall manager managed rule groups (#6119 )

2024-12-10 15:34:22 -04:00

wellarchitected

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

workspaces

chore(aws): improve logic for determining if resources are publicly accessible (#5195 )

2024-10-16 12:10:38 -04:00