César Arroba 580a0436ae fix(permissions): address review on the real-time detection templates ...

Constrains the catalog rule to genuine AWS service events with a source prefix,
which PutEvents cannot forge, so a caller inside the account can no longer inject
a CloudTrail-shaped event into the Prowler pipeline.

Makes the Terraform deploy region an input instead of a hardcoded us-east-1,
which contradicted a README that told users to deploy once per region, and adds
the region to the manual put-events command so it reaches the right bus.

Renames the hello event status to Published and reworks the wording around it:
EventBridge accepting an event is not the endpoint receiving it, and Prowler
Cloud is what confirms the connection. Documents that Terraform writes the API
key to state, so the key belongs in a secret manager and the state in an
encrypted remote backend.

2026-08-18 18:02:15 +02:00

..

templates

fix(permissions): address review on the real-time detection templates

2026-08-18 18:02:15 +02:00

prowler-additions-policy.json

feat(rolesanywhere): flag profiles with unscoped sessions (#12416)

2026-08-13 17:06:24 +02:00

prowler-azure-custom-role.json

fix(azure): custom Prowler Role for Azure assignableScopes (#6149)

2024-12-16 08:34:17 +01:00