prowler

accessanalyzer

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

account

fix(report): remove invalid resources in report (#6852 )

2025-02-19 21:27:52 +05:45

acm

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

acmpca

feat(aws): add acmpca service and pqc key algorithm check (#11318 )

2026-06-22 17:13:17 +01:00

apigateway

feat(apigateway): add check for secrets in REST API stage variables (#11188 )

2026-07-01 14:24:18 +02:00

apigatewayv2

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

appsync

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

athena

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

autoscaling

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

awslambda

feat(awslambda): add secrets_ignore_files to skip false-positive files (e.g. *.deps.json) in no-secrets-in-code check (#11222 )

2026-07-01 09:03:25 +01:00

backup

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

bedrock

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

cloudformation

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

cloudfront

feat(aws): add cloudfront_distributions_pqc_tls_enabled check (#11317 )

2026-06-22 16:44:51 +01:00

cloudtrail

feat(aws): add cloudtrail_bedrock_logging_enabled security check (#10858 )

2026-05-11 17:11:49 +02:00

cloudwatch

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

codeartifact

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

codebuild

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

codepipeline

chore(codepipeline): verify if repo is public with TLS (#11603 )

2026-06-16 09:35:11 +02:00

cognito

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670 )

2025-09-09 13:12:57 +05:45

config

feat(aws): add securityhub + config org-wide delegated admin checks (#11259 )

2026-06-11 16:53:28 +02:00

datasync

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

directconnect

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dlm

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

dms

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100 )

2025-09-16 14:17:47 +02:00

documentdb

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dynamodb

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

ec2

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

ecr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

ecs

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

efs

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eks

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

elasticache

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

elasticbeanstalk

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

elb

fix: handle eks cluster version and listener certificate arn not in acm (#8802 )

2025-10-01 13:55:26 -04:00

elbv2

feat(elbv2): add elbv2_alb_drop_invalid_header_fields_enabled check (FSBP ELB.4) (#11471 )

2026-06-05 14:26:07 +02:00

emr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eventbridge

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

firehose

fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142 )

2025-11-03 11:31:18 -05:00

fms

fix(fms): resource metadata could not be converted to dict (#7379 )

2025-03-26 19:25:00 +01:00

fsx

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

glacier

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

globalaccelerator

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

glue

feat(glue): add check for plaintext secrets in ETL job arguments (#10368 )

2026-03-25 12:25:36 +01:00

guardduty

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

iam

feat(iam): add AWS Bedrock AgentCore privilege escalation paths (#11726 )

2026-07-01 12:49:34 +02:00

inspector2

feat(sdk): limit selected high-volume AWS resource analysis (#11228 )

2026-06-30 15:49:12 +01:00

kafka

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100 )

2025-09-16 14:17:47 +02:00

kinesis

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

kms

fix(kms): detect public access for any KMS action, not just kms:* (#10071 )

2026-02-16 10:12:29 +01:00

lightsail

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

macie

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632 )

2025-01-21 13:56:06 -05:00

memorydb

fix(memorydb): handle clusters with no security groups (#8666 )

2025-09-08 15:05:13 -04:00

mq

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

neptune

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284 )

2024-10-04 14:00:25 -04:00

opensearch

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

organizations

fix(organizations): Key Error: Statement in check organizations_scp_deny_regions (#8091 )

2025-06-25 15:23:38 +08:00

rds

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

redshift

fix: handle errors in AWS, Azure, and GCP (#7456 )

2025-04-08 18:05:43 +05:45

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

rolesanywhere

feat(aws): add rolesanywhere service and pqc trust anchor check (#11319 )

2026-06-22 18:39:16 +01:00

route53

fix(sdk): cover CNAME → dangling S3 in route53 takeover check (#10920 )

2026-04-29 11:14:33 +01:00

s3

feat(s3): new check s3_bucket_object_public to detect public objects (#9517 )

2026-07-02 11:41:29 +02:00

sagemaker

feat(aws/sagemaker): add sagemaker_clarify_exists check (#11211 )

2026-06-11 17:40:41 +02:00

secretsmanager

feat(aws): add check secretsmanager_has_restrictive_resource_policy (#6985 )

2026-04-27 21:49:34 +01:00

securityhub

feat(aws): add securityhub + config org-wide delegated admin checks (#11259 )

2026-06-11 16:53:28 +02:00

servicecatalog

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632 )

2025-01-21 13:56:06 -05:00

ses

feat(ses): add check for DKIM signing enabled on SES identities (#10923 )

2026-05-20 13:33:03 +02:00

shield

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

sns

fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340 )

2025-07-24 18:03:30 +08:00

sqs

chore(sqs): clean up code (#8366 )

2025-07-25 20:10:34 +08:00

ssm

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

stepfunctions

feat(sdk): replace detect-secrets library with kingfisher (#11694 )

2026-06-30 15:36:23 +02:00

storagegateway

feat(sgw): add storagegateway_fault_tolerance check (#5570 )

2024-11-20 15:10:44 -04:00

transfer

feat(aws): add transfer_server_pqc_ssh_kex_enabled check (#11315 )

2026-06-22 14:30:15 +01:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

vpc

fix(aws): filter VPC endpoint services by audited account to prevent AccessDenied errors (#10152 )

2026-02-24 18:30:31 +01:00

waf

feat(waf): add check for regional web ACL logging enabled (#11539 )

2026-06-26 12:31:44 +02:00

wafv2

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

wellarchitected

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

workspaces

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45