mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-10-16 08:24:15 +00:00
César Arroba
56d33fe252
Adds the synthetic hello event from the MVP onboarding flow, so the connection can be verified end to end without changing any real resource. A dedicated rule matches source prowler.simulation and detail-type test_connection, since no CloudTrail event pattern would, and forwards it through the same connection, API destination, API key and endpoint as a real event. In CloudFormation a custom resource emits the event on create and update. Its function only holds events:PutEvents on the default bus plus its own log group, and always answers SUCCESS: a failed verification must never roll back the scan role. Terraform documents the equivalent put-events command instead, because an apply already runs from a shell with credentials. The invoke role trust policy and the dead-letter queue policy now allow both rule ARNs; scoped to a single rule, the hello event would have been dropped with no explanation.