Víctor Fernández Poyatos 7cb3a4e16e feat/PRWLR-3996 implement /tenants endpoint and basic filters logic (#14)
* chore: PRWLR-3996 add drf-jsonapi library to project

* feat: PRWLR-3996 implement /tenants endpoint and basic JSON:API spec

* feat: PRWLR-3996 implement new middleware to ingest metadata on API responses

* chore: PRWLR-3996 annotate views with drf-spectacular

* feat: PRWLR-3996 add cache-control to tenants endpoints

* feat: PRWLR-3996 update views filters

* chore: PRWLR-3996 remove meta middleware in favour of meta fields in serializers

* test(API): PRWLR-3996 add unit tests for /tenants

* chore: PRWLR-3996 turn DEBUG on on devel environment

* test: PRWLR-3996 rework tenants unit tests

* chore: PRWLR-3996 refactor filter classes

* fix(Backend,API): PRWLR-3996 use correct filter backend
2024-07-22 16:06:57 -04:00
2024-07-01 10:42:55 -04:00

Prowler SaaS and Prowler Open Source are as dynamic and adaptable as the environment theyre meant to protect. Trusted by the leaders in security.

Learn more at prowler.com

Prowler community on Slack
Join our Prowler community!

Description

Prowler is an Open Source security tool to perform AWS, Azure, Google Cloud and Kubernetes security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness, and also remediations! We have Prowler CLI (Command Line Interface) that we call Prowler Open Source and a service on top of it that we call Prowler SaaS.

This repository contains the REST API and Task Runner components for Prowler, which facilitate a complete backend that interacts with the Prowler SDK and is used by the Prowler UI.

Production deployment

Install all dependencies with Poetry

poetry install
poetry shell

Run the Django server with Gunicorn

cd src/backend
gunicorn -c backend/guniconf.py backend.wsgi:application

By default, the Gunicorn server will try to use as many workers as your machine can handle. You can manually change that in the src/backend/backend/guniconf.py file.

💻 Development guide

Local deployment

This method requires installing a Python virtual environment and keep dependencies updated.

Clone the repository

# HTTPS
git clone https://github.com/prowler-cloud/restful-api.git

# SSH
git clone git@github.com:prowler-cloud/restful-api.git

Install the Python dependencies

You must have Poetry installed

poetry install
poetry shell

Run the Django development server

cd backend
python manage.py runserver

You can access the server in http://localhost:8000. All changes in the code will be automatically reloaded in the server.

Docker deployment

This method requires docker and docker compose.

Clone the repository

# HTTPS
git clone https://github.com/prowler-cloud/restful-api.git

# SSH
git clone git@github.com:prowler-cloud/restful-api.git

Build the base image

docker compose --profile dev build

Run the development service

docker compose --profile dev up

You can access the server in http://localhost:8080. All changes in the code will be automatically reloaded in the server.

NOTE: notice how the port is different. When developing using docker, the port will be 8080 to prevent conflicts.

S
Description
Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
Readme Apache-2.0 342 MiB
Languages
Python 83.4%
TypeScript 15.9%
Shell 0.3%
HCL 0.2%