3 people 90e317d39f fix(kms): detect public access for any KMS action, not just kms:* (#10071) ...

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: jfagoagas <16007882+jfagoagas@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>

2026-02-16 10:12:29 +01:00

..

accessanalyzer

…

account

…

acm

…

apigateway

…

apigatewayv2

…

appstream

…

appsync

…

athena

…

autoscaling

feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection (#9956)

2026-02-04 16:53:08 +01:00

awslambda

…

backup

…

bedrock

feat(bedrock): API pagination (#9606)

2025-12-23 09:06:19 +01:00

cloudformation

…

cloudfront

…

cloudtrail

…

cloudwatch

…

codeartifact

…

codebuild

feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability (#9840)

2026-01-22 15:12:24 +01:00

codepipeline

feat(codepipeline): add new check codepipeline_project_repo_private (#5915)

2025-10-27 18:55:36 -04:00

cognito

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670)

2025-09-09 13:12:57 +05:45

config

…

datasync

…

directconnect

…

directoryservice

…

dlm

…

dms

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

documentdb

…

drs

…

dynamodb

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

ec2

chore(aws): fixup AWS EC2 SG lib (#9216)

2026-01-12 13:47:37 +01:00

ecr

…

ecs

fix(aws): retrieve correctly ECS Container insights settings (#8097)

2025-06-25 15:54:20 +08:00

efs

…

eks

fix: handle eks cluster version and listener certificate arn not in acm (#8802)

2025-10-01 13:55:26 -04:00

elasticache

…

elasticbeanstalk

…

elb

fix: handle eks cluster version and listener certificate arn not in acm (#8802)

2025-10-01 13:55:26 -04:00

elbv2

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

emr

…

eventbridge

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

firehose

fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142)

2025-11-03 11:31:18 -05:00

fms

…

fsx

…

glacier

…

globalaccelerator

…

glue

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

guardduty

feat(attack-paths): update boto dependencies for catrography compatibility (#9798)

2026-01-15 13:00:54 +01:00

iam

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

inspector2

fix(inspector2): handle error when getting active findings (#7670)

2025-05-07 14:39:34 +02:00

kafka

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

kinesis

…

kms

fix(kms): detect public access for any KMS action, not just kms:* (#10071)

2026-02-16 10:12:29 +01:00

lightsail

…

macie

…

memorydb

fix(memorydb): handle clusters with no security groups (#8666)

2025-09-08 15:05:13 -04:00

mq

…

neptune

…

networkfirewall

…

opensearch

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670)

2025-09-09 13:12:57 +05:45

organizations

fix(organizations): Key Error: Statement in check organizations_scp_deny_regions (#8091)

2025-06-25 15:23:38 +08:00

rds

feat(aws): add check rds_instance_extended_support (#9865)

2026-01-28 16:49:35 +01:00

redshift

…

resourceexplorer2

…

route53

…

s3

test: Add edge case test for s3_bucket_server_access_logging_enabled (#9725)

2026-01-12 10:06:34 +01:00

sagemaker

feat(sagemaker): parallelize tag listing for better performance (#9609)

2025-12-23 08:51:16 +01:00

secretsmanager

…

securityhub

…

servicecatalog

…

ses

…

shield

…

sns

fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340)

2025-07-24 18:03:30 +08:00

sqs

chore(sqs): clean up code (#8366)

2025-07-25 20:10:34 +08:00

ssm

…

ssmincidents

…

stepfunctions

…

storagegateway

…

transfer

…

trustedadvisor

…

vpc

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

waf

…

wafv2

…

wellarchitected

…

workspaces

…