prowler

accessanalyzer

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

account

fix(report): remove invalid resources in report (#6852 )

2025-02-19 21:27:52 +05:45

acm

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

apigateway

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

apigatewayv2

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

appsync

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

athena

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

autoscaling

feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection (#9956 )

2026-02-04 16:53:08 +01:00

awslambda

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

backup

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

bedrock

fix(bedrock): per-finding severity for long-term API key check (#11526 )

2026-06-11 08:31:08 +02:00

cloudformation

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

cloudfront

feat(cloudfront): detect Standard Logging v2 via CloudWatch Log Delivery (#10090 )

2026-03-25 10:09:21 +00:00

cloudtrail

feat(aws): add cloudtrail_bedrock_logging_enabled security check (#10858 )

2026-05-11 17:11:49 +02:00

cloudwatch

fix(aws): order-independent CloudWatch metric filter pattern checks (#11345 )

2026-06-10 18:49:06 +02:00

codeartifact

fix(codeartifact): only retrieve the latest version from a package (#10243 )

2026-04-08 09:21:19 +02:00

codebuild

feat(codebuild): use batched API calls to prevent throttling and false positives (#10639 )

2026-04-30 17:19:21 +02:00

codepipeline

chore(codepipeline): verify if repo is public with TLS (#11603 )

2026-06-16 09:35:11 +02:00

cognito

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670 )

2025-09-09 13:12:57 +05:45

config

feat(aws): add securityhub + config org-wide delegated admin checks (#11259 )

2026-06-11 16:53:28 +02:00

datasync

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

directconnect

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dlm

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

dms

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100 )

2025-09-16 14:17:47 +02:00

documentdb

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

dynamodb

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

ec2

feat(ec2): add check for SG ingress from public IPs to any port (#10335 )

2026-03-26 17:21:16 +01:00

ecr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

ecs

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

efs

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eks

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

elasticache

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

elasticbeanstalk

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

elb

fix: handle eks cluster version and listener certificate arn not in acm (#8802 )

2025-10-01 13:55:26 -04:00

elbv2

feat(elbv2): add elbv2_alb_drop_invalid_header_fields_enabled check (FSBP ELB.4) (#11471 )

2026-06-05 14:26:07 +02:00

emr

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

eventbridge

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692 )

2026-01-29 09:13:34 +01:00

firehose

fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142 )

2025-11-03 11:31:18 -05:00

fms

fix(fms): resource metadata could not be converted to dict (#7379 )

2025-03-26 19:25:00 +01:00

fsx

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

glacier

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

globalaccelerator

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

glue

feat(glue): add check for plaintext secrets in ETL job arguments (#10368 )

2026-03-25 12:25:36 +01:00

guardduty

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

iam

chore(aws): skip unattached IAM policies unless --scan-unused-services (#11150 )

2026-05-14 08:10:20 +01:00

inspector2

fix(inspector2): handle error when getting active findings (#7670 )

2025-05-07 14:39:34 +02:00

kafka

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100 )

2025-09-16 14:17:47 +02:00

kinesis

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

kms

fix(kms): detect public access for any KMS action, not just kms:* (#10071 )

2026-02-16 10:12:29 +01:00

lightsail

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

macie

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632 )

2025-01-21 13:56:06 -05:00

memorydb

fix(memorydb): handle clusters with no security groups (#8666 )

2025-09-08 15:05:13 -04:00

mq

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

neptune

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284 )

2024-10-04 14:00:25 -04:00

opensearch

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

organizations

fix(organizations): Key Error: Statement in check organizations_scp_deny_regions (#8091 )

2025-06-25 15:23:38 +08:00

rds

fix(sdk): resolve empty-set bug in _enabled_regions causing 36-region client creation and CI timeouts (#10598 )

2026-04-08 08:40:58 +02:00

redshift

fix: handle errors in AWS, Azure, and GCP (#7456 )

2025-04-08 18:05:43 +05:45

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

route53

fix(sdk): cover CNAME → dangling S3 in route53 takeover check (#10920 )

2026-04-29 11:14:33 +01:00

s3

fix(s3): only emit shadow-resource finding when bucket name matches a predictable pattern (#11220 )

2026-05-19 15:46:05 +01:00

sagemaker

feat(aws/sagemaker): add sagemaker_clarify_exists check (#11211 )

2026-06-11 17:40:41 +02:00

secretsmanager

feat(aws): add check secretsmanager_has_restrictive_resource_policy (#6985 )

2026-04-27 21:49:34 +01:00

securityhub

feat(aws): add securityhub + config org-wide delegated admin checks (#11259 )

2026-06-11 16:53:28 +02:00

servicecatalog

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632 )

2025-01-21 13:56:06 -05:00

ses

feat(ses): add check for DKIM signing enabled on SES identities (#10923 )

2026-05-20 13:33:03 +02:00

shield

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

sns

fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340 )

2025-07-24 18:03:30 +08:00

sqs

chore(sqs): clean up code (#8366 )

2025-07-25 20:10:34 +08:00

ssm

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

stepfunctions

feat(stepfunctions): add check for secrets in state machine definition (#10570 )

2026-04-09 15:56:29 +02:00

storagegateway

feat(sgw): add storagegateway_fault_tolerance check (#5570 )

2024-11-20 15:10:44 -04:00

transfer

feat(transfer): add new check transfer_server_encryption_in_transit (#5590 )

2024-11-04 11:30:18 -05:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910 )

2024-09-02 10:07:21 +02:00

vpc

fix(aws): filter VPC endpoint services by audited account to prevent AccessDenied errors (#10152 )

2026-02-24 18:30:31 +01:00

waf

feat(waf): add new check waf_global_webacl_with_rules (#5469 )

2024-10-22 10:26:22 -07:00

wafv2

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

wellarchitected

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45

workspaces

chore(poetry): Upgrade to v2 (#7112 )

2025-03-12 17:28:34 +05:45