prowler

accessanalyzer

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

account

fix(report): remove invalid resources in report (#6852 )

2025-02-19 21:27:52 +05:45

acm

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

acmpca

feat(aws): add acmpca service and pqc key algorithm check (#11318 )

2026-06-22 17:13:17 +01:00

amplify

feat(sdk): add AWS Amplify app secret scanning check (#11825 )

2026-07-15 13:44:20 +02:00

apigateway

feat(apigateway): add check for secrets in REST API stage variables (#11188 )

2026-07-01 14:24:18 +02:00

apigatewayv2

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

appsync

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

athena

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

autoscaling

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

awslambda

feat(awslambda): add awslambda_layer_no_secrets_in_content check (#12233 )

2026-08-07 11:33:54 +02:00

backup

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

batch

fix(aws): treat security groups on Batch compute environments as used (#12458 )

2026-08-24 16:18:56 +02:00

bedrock

fix(checks): report MANUAL instead of FAIL on permission and data-availability errors (#12645 )

2026-09-01 17:16:56 +02:00

cloudformation

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

cloudfront

feat(aws): add cloudfront_distributions_pqc_tls_enabled check (#11317 )

2026-06-22 16:44:51 +01:00

cloudtrail

feat(aws): add cloudtrail_bedrock_logging_enabled security check (#10858 )

2026-05-11 17:11:49 +02:00

cloudwatch

fix(checks): report MANUAL instead of FAIL on permission and data-availability errors (#12645 )

2026-09-01 17:16:56 +02:00

codeartifact

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

codebuild

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

codecommit

feat(codecommit): add codecommit service and codecommit_repository_no_secrets check (#11846 )

2026-07-30 15:05:27 +02:00

codepipeline

chore(codepipeline): verify if repo is public with TLS (#11603 )

2026-06-16 09:35:11 +02:00

cognito

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670 )

2025-09-09 13:12:57 +05:45

config

fix(aws): delegated administrator lookup and reporting (#12319 )

2026-08-05 09:48:00 +02:00

datapipeline

feat(sdk): add Data Pipeline secret scanning check (#11821 )

2026-07-09 16:21:05 +02:00

datasync

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

directconnect

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dlm

fix(aws): avoid full ec2 inventory in dlm check (#11850 )

2026-07-08 15:59:16 +01:00

dms

fix(dms): lazy load ec2 for public access check (#11899 )

2026-07-08 16:42:23 +01:00

documentdb

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dynamodb

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

ec2

fix(aws): treat security groups on Batch compute environments as used (#12458 )

2026-08-24 16:18:56 +02:00

ecr

fix(ecr): read each registry scanning rule's frequency instead of assuming scan on push (#12560 )

2026-09-01 16:53:58 +02:00

ecs

fix(sdk): skip undescribed ECS task definitions (#12217 )

2026-08-17 12:42:06 +01:00

efs

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eks

feat(eks): assess Kubernetes network policy enforcement in the Amazon VPC CNI add-on (#12661 )

2026-09-01 13:40:45 +02:00

elasticache

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

elasticbeanstalk

feat(aws): add elasticbeanstalk_environment_no_secrets_in_configuration check (#12378 )

2026-08-28 13:54:23 +02:00

elb

fix: handle eks cluster version and listener certificate arn not in acm (#8802 )

2025-10-01 13:55:26 -04:00

elbv2

feat(aws): add elbv2_listener_pqc_tls_enabled security check (#11254 )

2026-07-15 12:45:23 +01:00

emr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eventbridge

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

firehose

fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142 )

2025-11-03 11:31:18 -05:00

fms

fix(fms): resource metadata could not be converted to dict (#7379 )

2025-03-26 19:25:00 +01:00

fsx

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

glacier

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

globalaccelerator

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

glue

feat(aws): add glue_catalog_connection_no_secrets check (#11963 )

2026-07-30 15:12:37 +02:00

guardduty

feat(guardduty): assess unified Runtime Monitoring and AI Protection (#12564 )

2026-09-01 13:18:57 +02:00

iam

feat(iam): scope AgentCore PassRole and workload token grants, and flag unbound service trust (#12664 )

2026-09-01 17:02:05 +02:00

inspector2

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

kafka

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100 )

2025-09-16 14:17:47 +02:00

kinesis

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

kms

feat(aws): add Nitro Enclaves security checks for EC2 and KMS (#12283 )

2026-08-03 13:00:26 +02:00

lightsail

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

macie

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632 )

2025-01-21 13:56:06 -05:00

memorydb

feat(memorydb): add memorydb_cluster_in_transit_encryption_enabled check (#12246 )

2026-08-28 14:03:10 +02:00

mq

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

neptune

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284 )

2024-10-04 14:00:25 -04:00

opensearch

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

organizations

fix(aws): check statement Effect instead of policy Statement in SCP a… (#11727 )

2026-07-09 11:19:33 +02:00

rds

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

redshift

fix: handle errors in AWS, Azure, and GCP (#7456 )

2025-04-08 18:05:43 +05:45

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

rolesanywhere

fix(checks): report MANUAL instead of FAIL on permission and data-availability errors (#12645 )

2026-09-01 17:16:56 +02:00

route53

fix(sdk): cover CNAME → dangling S3 in route53 takeover check (#10920 )

2026-04-29 11:14:33 +01:00

s3

fix(checks): report MANUAL instead of FAIL on permission and data-availability errors (#12645 )

2026-09-01 17:16:56 +02:00

sagemaker

fix(sagemaker): read DirectInternetAccess instead of RootAccess on notebook instances (#12659 )

2026-09-01 18:22:41 +02:00

secretsmanager

feat(aws): add check secretsmanager_has_restrictive_resource_policy (#6985 )

2026-04-27 21:49:34 +01:00

securityhub

fix(aws): delegated administrator lookup and reporting (#12319 )

2026-08-05 09:48:00 +02:00

servicecatalog

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632 )

2025-01-21 13:56:06 -05:00

ses

fix(ses): evaluate all identity authorization policies (#12464 )

2026-08-17 14:19:45 +01:00

shield

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

sns

fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340 )

2025-07-24 18:03:30 +08:00

sqs

chore(sqs): clean up code (#8366 )

2025-07-25 20:10:34 +08:00

ssm

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

stepfunctions

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

storagegateway

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

transfer

feat(aws): add transfer_server_pqc_ssh_kex_enabled check (#11315 )

2026-06-22 14:30:15 +01:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

vpc

feat(aws): add Nitro Enclaves security checks for EC2 and KMS (#12283 )

2026-08-03 13:00:26 +02:00

waf

chore: remove __init__.py from test directories (#10582 )

2026-07-13 15:09:42 +01:00

wafv2

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

wellarchitected

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

workspaces

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45