Mario Rodriguez LopezandSergio Garcia 91bf99ca45 feat(ec2): Ensure EC2 launch templates do not assign public IPs (#4852) ...

Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com>

2024-09-16 12:52:40 -04:00

..

ec2_ami_public

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_client_vpn_endpoint_connection_logging_enabled

feat(ec2): Client VPN Endpoints Should Have Client Connection Logging Enabled (#4804)

2024-08-22 09:57:33 -04:00

ec2_ebs_default_encryption

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_public_snapshot

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_snapshot_account_block_public_access

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_snapshots_encrypted

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_volume_encryption

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_ebs_volume_protected_by_backup_plan

feat(ec2): EBS Volumes Should Be Covered by a Backup Plan (#5028)

2024-09-16 11:23:23 -04:00

ec2_ebs_volume_snapshots_exists

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_elastic_ip_shodan

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_elastic_ip_unassigned

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_account_imdsv2_enabled

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_detailed_monitoring_enabled

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_imdsv2_enabled

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_internet_facing_with_instance_profile

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_managed_by_ssm

fix(aws): aws check and metadata fixes (#4251)

2024-06-19 10:21:50 +02:00

ec2_instance_older_than_specific_days

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_paravirtual_type

feat(ec2): Amazon EC2 Paravirtual Instance Types Should Not Be Used (#4922)

2024-09-11 15:56:20 -04:00

ec2_instance_port_cassandra_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_cifs_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_elasticsearch_kibana_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_ftp_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_kafka_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_kerberos_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_ldap_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_memcached_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_mongodb_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_mysql_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_oracle_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_postgresql_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_rdp_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_redis_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_sqlserver_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_ssh_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_port_telnet_exposed_to_internet

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_instance_profile_attached

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_public_ip

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_instance_secrets_user_data

feat(secrets): improve detect secrets checks and add config (#4915)

2024-09-04 16:54:55 +02:00

ec2_instance_uses_single_eni

feat(ec2): Amazon EC2 Instances Should Not Use Multiple ENIs (#4935)

2024-09-12 14:29:36 -04:00

ec2_launch_template_no_public_ip

feat(ec2): Ensure EC2 launch templates do not assign public IPs (#4852)

2024-09-16 12:52:40 -04:00

ec2_launch_template_no_secrets

feat(EC2): Change service to adjust the data saved in template_data in LaunchTemplateVersion (#4848)

2024-09-09 12:32:39 -04:00

ec2_networkacl_allow_ingress_any_port

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_networkacl_allow_ingress_tcp_port_22

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_networkacl_allow_ingress_tcp_port_3389

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_networkacl_unused

feat(ec2): Ensure not default Network Access Control Lists are used (#4917)

2024-09-11 09:55:18 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_all_ports

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_any_port

feat(EC2): Change service to adjust the data saved in template_data in LaunchTemplateVersion (#4848)

2024-09-09 12:32:39 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_high_risk_tcp_ports

feat(EC2): Add new check for security group port restrictions (#4594)

2024-08-16 09:43:00 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_port_mongodb_27017_27018

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_ftp_port_20_21

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_3389

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_cassandra_7199_9160_8888

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_elasticsearch_kibana_9200_9300_5601

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_kafka_9092

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_memcached_11211

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_mysql_3306

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_oracle_1521_2483

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_postgres_5432

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_redis_6379

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_sql_server_1433_1434

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_telnet_23

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_allow_wide_open_public_ipv4

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_default_restrict_traffic

fix(test): solve VPC import in tests (#4574)

2024-07-30 10:34:55 -04:00

ec2_securitygroup_from_launch_wizard

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_securitygroup_not_used

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_securitygroup_with_many_ingress_egress_rules

chore(global_provider): Move methods to class as static (#3896)

2024-05-20 11:29:05 +02:00

ec2_transitgateway_auto_accept_vpc_attachments

feat(ec2): Ensure automatic acceptance of VPC attachment requests is disabled (#4765)

2024-08-22 08:26:01 -04:00

lib

feat(ec2): add checks for EC2 instances with exposed ports to the internet (#4029)

2024-05-28 11:44:19 -04:00

ec2_service_test.py

feat(ec2): Amazon EC2 Instances Should Not Use Multiple ENIs (#4935)

2024-09-12 14:29:36 -04:00