3 people 90e317d39f fix(kms): detect public access for any KMS action, not just kms:* (#10071) ...

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: jfagoagas <16007882+jfagoagas@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>

2026-02-16 10:12:29 +01:00

..

accessanalyzer

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

account

fix(report): remove invalid resources in report (#6852)

2025-02-19 21:27:52 +05:45

acm

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

apigateway

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

apigatewayv2

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

appstream

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

appsync

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

athena

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

autoscaling

feat(aws): revert Adding check that AWS Auto Scaling group has deletion protection (#9956)

2026-02-04 16:53:08 +01:00

awslambda

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

backup

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

bedrock

feat(bedrock): API pagination (#9606)

2025-12-23 09:06:19 +01:00

cloudformation

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

cloudfront

test(cloudfront): add name retrieval test for cloudfront bucket domains (#6969)

2025-02-19 08:08:55 +05:30

cloudtrail

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

cloudwatch

fix(cloudwatch): handle None metric alarms (#7205)

2025-03-12 14:44:36 +01:00

codeartifact

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

codebuild

feat(aws/codebuild): add check for CodeBreach webhook filter vulnerability (#9840)

2026-01-22 15:12:24 +01:00

codepipeline

feat(codepipeline): add new check codepipeline_project_repo_private (#5915)

2025-10-27 18:55:36 -04:00

cognito

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670)

2025-09-09 13:12:57 +05:45

config

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

datasync

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

directconnect

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

directoryservice

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

dlm

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

dms

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

documentdb

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

drs

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

dynamodb

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

ec2

chore(aws): fixup AWS EC2 SG lib (#9216)

2026-01-12 13:47:37 +01:00

ecr

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

ecs

fix(aws): retrieve correctly ECS Container insights settings (#8097)

2025-06-25 15:54:20 +08:00

efs

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

eks

fix: handle eks cluster version and listener certificate arn not in acm (#8802)

2025-10-01 13:55:26 -04:00

elasticache

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

elasticbeanstalk

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

elb

fix: handle eks cluster version and listener certificate arn not in acm (#8802)

2025-10-01 13:55:26 -04:00

elbv2

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

emr

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-21 13:56:06 -05:00

eventbridge

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

firehose

fix(aws): firehose_stream_encrypted_at_rest description and logic (#9142)

2025-11-03 11:31:18 -05:00

fms

fix(fms): resource metadata could not be converted to dict (#7379)

2025-03-26 19:25:00 +01:00

fsx

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

glacier

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

globalaccelerator

feat(aws): add tags to Global Accelerator (#5233)

2024-09-27 12:37:19 -04:00

glue

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

guardduty

feat(attack-paths): update boto dependencies for catrography compatibility (#9798)

2026-01-15 13:00:54 +01:00

iam

chore(aws): add support for trusted aws accounts in cross account checks for s3, eventbridge bus, eventbridge schema and dynamodb (#9692)

2026-01-29 09:13:34 +01:00

inspector2

fix(inspector2): handle error when getting active findings (#7670)

2025-05-07 14:39:34 +02:00

kafka

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

kinesis

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

kms

fix(kms): detect public access for any KMS action, not just kms:* (#10071)

2026-02-16 10:12:29 +01:00

lightsail

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

macie

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-21 13:56:06 -05:00

memorydb

fix(memorydb): handle clusters with no security groups (#8666)

2025-09-08 15:05:13 -04:00

mq

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

neptune

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

networkfirewall

feat(networkfirewall): add new check networkfirewall_policy_default_action_full_packets (#5284)

2024-10-04 14:00:25 -04:00

opensearch

fix(aws): nonetype errors in opensearch, firehose and cognito (#8670)

2025-09-09 13:12:57 +05:45

organizations

fix(organizations): Key Error: Statement in check organizations_scp_deny_regions (#8091)

2025-06-25 15:23:38 +08:00

rds

feat(aws): add check rds_instance_extended_support (#9865)

2026-01-28 16:49:35 +01:00

redshift

fix: handle errors in AWS, Azure, and GCP (#7456)

2025-04-08 18:05:43 +05:45

resourceexplorer2

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

route53

fix(k8s): remove typos from PCI 4.0 (#7294)

2025-03-19 09:31:40 +01:00

s3

test: Add edge case test for s3_bucket_server_access_logging_enabled (#9725)

2026-01-12 10:06:34 +01:00

sagemaker

feat(sagemaker): parallelize tag listing for better performance (#9609)

2025-12-23 08:51:16 +01:00

secretsmanager

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

securityhub

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

servicecatalog

chore(deps-dev): bump moto from 5.0.16 to 5.0.27 (#6632)

2025-01-21 13:56:06 -05:00

ses

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

shield

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

sns

fix(aws): sns_topics_not_publicly_accessible false positive with aws:SourceArn conditions (#8340)

2025-07-24 18:03:30 +08:00

sqs

chore(sqs): clean up code (#8366)

2025-07-25 20:10:34 +08:00

ssm

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

ssmincidents

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

stepfunctions

fix(stepfunctions): Nonetype object has no attribute level (#7386)

2025-03-26 19:39:27 +01:00

storagegateway

feat(sgw): add storagegateway_fault_tolerance check (#5570)

2024-11-20 15:10:44 -04:00

transfer

feat(transfer): add new check transfer_server_encryption_in_transit (#5590)

2024-11-04 11:30:18 -05:00

trustedadvisor

chore(prowler): change all methods from services from format double underscore to single underscore (#4910)

2024-09-02 10:07:21 +02:00

vpc

chore(deps-dev): bump moto from 5.0.28 to 5.1.11 (#7100)

2025-09-16 14:17:47 +02:00

waf

feat(waf): add new check waf_global_webacl_with_rules (#5469)

2024-10-22 10:26:22 -07:00

wafv2

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

wellarchitected

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45

workspaces

chore(poetry): Upgrade to v2 (#7112)

2025-03-12 17:28:34 +05:45