prowler

accessanalyzer

…

account

…

acm

…

acmpca

feat(aws): add acmpca service and pqc key algorithm check (#11318 )

2026-06-22 17:13:17 +01:00

amplify

feat(sdk): add AWS Amplify app secret scanning check (#11825 )

2026-07-15 13:44:20 +02:00

apigateway

feat(apigateway): add check for secrets in REST API stage variables (#11188 )

2026-07-01 14:24:18 +02:00

apigatewayv2

…

appstream

…

appsync

…

athena

…

autoscaling

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

awslambda

feat(awslambda): add awslambda_layer_no_secrets_in_content check (#12233 )

2026-08-07 11:33:54 +02:00

backup

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

batch

fix(aws): treat security groups on Batch compute environments as used (#12458 )

2026-08-24 16:18:56 +02:00

bedrock

feat(bedrock): add model artifact and guardrail grounding security checks for the AWS provider (#12459 )

2026-08-21 10:50:34 +01:00

cloudformation

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

cloudfront

feat(aws): add cloudfront_distributions_pqc_tls_enabled check (#11317 )

2026-06-22 16:44:51 +01:00

cloudtrail

feat(aws): add cloudtrail_bedrock_logging_enabled security check (#10858 )

2026-05-11 17:11:49 +02:00

cloudwatch

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

codeartifact

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

codebuild

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

codecommit

feat(codecommit): add codecommit service and codecommit_repository_no_secrets check (#11846 )

2026-07-30 15:05:27 +02:00

codepipeline

chore(codepipeline): verify if repo is public with TLS (#11603 )

2026-06-16 09:35:11 +02:00

cognito

…

config

fix(aws): delegated administrator lookup and reporting (#12319 )

2026-08-05 09:48:00 +02:00

datapipeline

feat(sdk): add Data Pipeline secret scanning check (#11821 )

2026-07-09 16:21:05 +02:00

datasync

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

directconnect

…

directoryservice

…

dlm

fix(aws): avoid full ec2 inventory in dlm check (#11850 )

2026-07-08 15:59:16 +01:00

dms

fix(dms): lazy load ec2 for public access check (#11899 )

2026-07-08 16:42:23 +01:00

documentdb

…

drs

…

dynamodb

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

ec2

fix(aws): treat security groups on Batch compute environments as used (#12458 )

2026-08-24 16:18:56 +02:00

ecr

feat(ecr): add ecr_repository_image_no_secrets check (#12123 )

2026-08-18 11:10:07 +01:00

ecs

fix(sdk): skip undescribed ECS task definitions (#12217 )

2026-08-17 12:42:06 +01:00

efs

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eks

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

elasticache

…

elasticbeanstalk

feat(aws): add elasticbeanstalk_environment_no_secrets_in_configuration check (#12378 )

2026-08-28 13:54:23 +02:00

elb

…

elbv2

feat(aws): add elbv2_listener_pqc_tls_enabled security check (#11254 )

2026-07-15 12:45:23 +01:00

emr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eventbridge

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

firehose

fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142 )

2025-11-03 11:31:18 -05:00

fms

…

fsx

…

glacier

…

globalaccelerator

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

glue

feat(aws): add glue_catalog_connection_no_secrets check (#11963 )

2026-07-30 15:12:37 +02:00

guardduty

fix(aws): delegated administrator lookup and reporting (#12319 )

2026-08-05 09:48:00 +02:00

iam

feat(aws): add pathfinding.cloud privilege-escalation coverage (#12237 )

2026-08-04 08:59:52 +02:00

inspector2

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

kafka

…

kinesis

…

kms

feat(aws): add Nitro Enclaves security checks for EC2 and KMS (#12283 )

2026-08-03 13:00:26 +02:00

lightsail

…

macie

…

memorydb

feat(memorydb): add memorydb_cluster_in_transit_encryption_enabled check (#12246 )

2026-08-28 14:03:10 +02:00

mq

…

neptune

…

networkfirewall

…

opensearch

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

organizations

fix(aws): check statement Effect instead of policy Statement in SCP a… (#11727 )

2026-07-09 11:19:33 +02:00

rds

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

redshift

…

resourceexplorer2

…

rolesanywhere

feat(rolesanywhere): flag profiles with unscoped sessions (#12416 )

2026-08-13 17:06:24 +02:00

route53

fix(sdk): cover CNAME → dangling S3 in route53 takeover check (#10920 )

2026-04-29 11:14:33 +01:00

s3

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

sagemaker

feat(sagemaker): add sagemaker_endpoint_config_kms_encryption_enabled check (#12118 )

2026-07-30 14:29:45 +02:00

secretsmanager

feat(aws): add check secretsmanager_has_restrictive_resource_policy (#6985 )

2026-04-27 21:49:34 +01:00

securityhub

fix(aws): delegated administrator lookup and reporting (#12319 )

2026-08-05 09:48:00 +02:00

servicecatalog

…

ses

fix(ses): evaluate all identity authorization policies (#12464 )

2026-08-17 14:19:45 +01:00

shield

…

sns

…

sqs

…

ssm

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

ssmincidents

…

stepfunctions

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

storagegateway

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

transfer

feat(aws): add transfer_server_pqc_ssh_kex_enabled check (#11315 )

2026-06-22 14:30:15 +01:00

trustedadvisor

…

vpc

feat(aws): add Nitro Enclaves security checks for EC2 and KMS (#12283 )

2026-08-03 13:00:26 +02:00

waf

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

wafv2

…

wellarchitected

…

workspaces

…