prowler

accessanalyzer

refactor(arn): fine tune arn and resources id for unknown values (#5841 )

2024-11-20 12:56:51 +01:00

account

fix(aws): not show findings when AccessDenieds (#3803 )

2024-04-29 17:42:44 +02:00

acm

feat(elb): add new check elb_ssl_listeners_use_acm_certificate (#5424 )

2024-10-21 10:15:12 -07:00

apigateway

feat(apigateway): add new check apigateway_restapi_tracing_enabled (#5470 )

2024-10-21 10:14:38 -07:00

apigatewayv2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

appsync

feat(appsync): add new check appsync_field_level_logging_enabled (#5602 )

2024-11-11 10:23:13 -05:00

athena

feat(athena): add new check athena_workgroup_logging_enabled (#5468 )

2024-10-18 16:40:57 -04:00

autoscaling

fix(autoscaling): autoscaling_group_launch_configuration_requires_imdsv2 fails if Launch Template is used (#6146 )

2024-12-11 12:06:35 -04:00

awslambda

chore(aws): improve logic for determining if resources are publicly accessible (#5195 )

2024-10-16 12:10:38 -04:00

backup

fix(aws): set unique resource IDs (#6191 )

2024-12-13 09:07:39 -04:00

bedrock

refactor(arn): fine tune arn and resources id for unknown values (#5841 )

2024-11-20 12:56:51 +01:00

cloudformation

feat(secrets): improve detect secrets checks and add config (#4915 )

2024-09-04 16:54:55 +02:00

cloudfront

fix: added s3 origin comprobation in cloudfront_distributions_s3_origin_non_existent_bucket (#5543 )

2024-10-28 10:01:03 -05:00

cloudtrail

fix(aws): set IAM identity as resource in threat detection (#6117 )

2024-12-10 13:37:27 -04:00

cloudwatch

fix(aws): remove cloudwatch_log_group_no_critical_pii_in_logs check (#5736 )

2024-11-12 12:50:47 -05:00

codeartifact

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

codebuild

chore(codebuild): Cleanup tests (#5567 )

2024-10-29 11:31:19 -05:00

cognito

feat(wafv2): change web_acls from list to dict (#5308 )

2024-10-07 10:23:58 -04:00

config

feat(config): add new check config_recorder_using_aws_service_role (#5357 )

2024-10-14 11:19:35 -04:00

datasync

feat(datasync): add datasync service and check datasync_task_logging_enabled (#5444 )

2024-10-17 13:07:18 -04:00

directconnect

refactor(arn): refactor arn for unknown resources (#5712 )

2024-11-19 16:21:43 -04:00

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dlm

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dms

feat(dms): add new check dms_replication_task_target_logging_enabled (#5631 )

2024-11-07 10:19:44 -05:00

documentdb

chore(aws): update fixers docstring (#5878 )

2024-11-25 13:01:45 -04:00

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dynamodb

chore(aws): cleanup tests in dynamodb and cw (#5588 )

2024-10-31 07:59:33 +01:00

ec2

feat(ec2): add new fixer ec2_ebs_public_snapshot_fixer (#5825 )

2024-11-21 12:40:28 -04:00

ecr

fix(aws): solve invalid ECR Registry ARN (#5622 )

2024-11-04 11:47:49 -05:00

ecs

feat(ecs): add new check ecs_task_set_no_assign_public_ip (#5603 )

2024-11-04 11:49:22 -05:00

efs

chore(aws): cleanup tests (#5592 )

2024-10-30 14:04:05 -05:00

eks

chore(aws): cleanup tests (#5592 )

2024-10-30 14:04:05 -05:00

elasticache

feat(elasticache): add check elasticache_redis_cluster_auth_enabled (#4830 )

2024-09-20 12:18:08 -04:00

elasticbeanstalk

feat(elasticbeanstalk): add new check elasticbeanstalk_enhanced_health_reporting_enabled (#5348 )

2024-10-11 10:27:48 -04:00

elb

feat(elb): add new check elb_desync_mitigation_mode (#5500 )

2024-10-22 11:08:13 -07:00

elbv2

feat(elbv2): add elbv2_nlb_tls_termination_enabled check (#5550 )

2024-10-30 15:00:55 -05:00

emr

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

eventbridge

feat(eventbridge): add new check eventbridge_global_endpoint_event_replication_enabled (#5396 )

2024-10-18 15:36:39 -04:00

firehose

fix(aws): check AWS Owned keys in firehose_stream_encrypted_at_rest (#6120 )

2024-12-10 14:30:45 -04:00

fms

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

fsx

feat(aws): add new check fsx_windows_file_system_multi_az (#5491 )

2024-10-23 14:07:57 -07:00

glacier

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

globalaccelerator

feat(aws): add tags to Global Accelerator (#5233 )

2024-09-27 12:37:19 -04:00

glue

feat(glue): add new check glue_etl_jobs_logging_enabled (#5581 )

2024-10-30 10:56:46 -05:00

guardduty

fix(guardduty): fix guardduty_is_enabled_fixer test (#5668 )

2024-11-07 08:21:49 -05:00

iam

fix(iam): set unique resource id for each user access key (#6133 )

2024-12-11 09:25:40 -04:00

inspector2

feat(inspector2): Add more tests to inspector2_is_enabled check (#5150 )

2024-09-23 15:06:34 -04:00

kafka

feat(kafka): add new check kafka_connector_in_transit_encryption_enabled (#5577 )

2024-11-04 12:46:32 -05:00

kinesis

feat(kinesis): add new check kinesis_stream_data_retention_period (#5547 )

2024-11-14 12:01:01 -05:00

kms

feat(kms): add new fixer kms_cmk_not_deleted_unintentionally_fixer (#5842 )

2024-11-21 11:45:55 -04:00

lightsail

chore(global_provider): Move methods to class as static (#3896 )

2024-05-20 11:29:05 +02:00

macie

feat(macie): add new check macie_automated_sensitive_data_discovery_enabled (#5390 )

2024-10-14 17:58:44 -04:00

memorydb

feat(aws): add MemoryDB service (#5546 )

2024-11-22 15:13:16 -04:00

mq

feat(mq): add mq_broker_not_publicly_accessible check (#5604 )

2024-11-11 12:12:21 -05:00

neptune

feat(neptune): add new fixer neptune_cluster_public_snapshot_fixer (#5749 )

2024-11-22 11:13:18 -04:00

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284 )

2024-10-04 14:00:25 -04:00

opensearch

feat(opensearch): add new check opensearch_domain_master_nodes_fault_tolerant (#5393 )

2024-10-17 14:32:42 -04:00

organizations

refactor(arn): refactor arn for unknown resources (#5712 )

2024-11-19 16:21:43 -04:00

rds

fix(aurora): Add default ports to the check of using non default ports (#6150 )

2024-12-11 14:58:29 -04:00

redshift

feat(aws): add new check redshift_cluster_multi_az_enabled (#5492 )

2024-10-23 10:32:25 -07:00

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

route53

fix(aws): set unique resource IDs (#6191 )

2024-12-13 09:07:39 -04:00

s3

feat(s3): add new check s3_bucket_event_notifications_enabled (#5562 )

2024-10-29 15:38:38 -05:00

sagemaker

feat(sagemaker): Ensure SageMaker Endpoint Production Variants have Initial Instance Count greater than one (#5045 )

2024-09-19 15:16:56 -04:00

secretsmanager

feat(secretsmanager): add new check secretsmanager_secret_rotated_periodically (#5450 )

2024-11-04 16:08:38 -05:00

securityhub

refactor(arn): fine tune arn and resources id for unknown values (#5841 )

2024-11-20 12:56:51 +01:00

servicecatalog

feat(servicecatalog): Add new check servicecatalog_portfolio_shared_within_organization_only (#5632 )

2024-11-08 12:22:13 -05:00

ses

feat(aws): Add new checks ses_identities/glue_data_catalogs/secretsmanager _not_publicly_accessible (#5471 )

2024-10-18 16:40:12 -04:00

shield

feat(aws): add tags to Global Accelerator (#5233 )

2024-09-27 12:37:19 -04:00

sns

fix(aws): handle none type attributes (#5216 )

2024-09-30 18:04:14 +02:00

sqs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

ssm

test(aws): fix failing tests for ecs_task_definitions_logging_enabled and ssm_managed_compliant_patching (#5267 )

2024-10-02 09:35:27 -04:00

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

storagegateway

feat(sgw): add storagegateway_fault_tolerance check (#5570 )

2024-11-20 15:10:44 -04:00

transfer

feat(transfer): add new check transfer_server_encryption_in_transit (#5590 )

2024-11-04 11:30:18 -05:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

vpc

feat(aws): Add Fault Tolerance Checks (#5488 )

2024-10-23 14:07:43 -07:00

waf

feat(waf): add new check waf_global_webacl_with_rules (#5469 )

2024-10-22 10:26:22 -07:00

wafv2

fix(aws): get firewall manager managed rule groups (#6123 )

2024-12-10 16:47:01 -04:00

wellarchitected

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

workspaces

chore(aws): improve logic for determining if resources are publicly accessible (#5195 )

2024-10-16 12:10:38 -04:00