mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 06:45:08 +00:00
Revert "added check72 about EBS snapshots set as public"
This commit is contained in:
committed by
GitHub
parent
f64607d925
commit
1697d6c92a
38
prowler
38
prowler
@@ -1396,40 +1396,6 @@ extra71(){
|
|||||||
# set +x
|
# set +x
|
||||||
}
|
}
|
||||||
|
|
||||||
extra72(){
|
|
||||||
#set -x
|
|
||||||
ID72="7.2"
|
|
||||||
TITLE72="Ensure there are no EBS Snapshots set as Public (Not Scored) (Not part of CIS benchmark)"
|
|
||||||
textTitle "$ID72" "$TITLE72" "0"
|
|
||||||
textNotice "Looking for EBS Snapshots in all regions... "
|
|
||||||
for regx in $REGIONS; do
|
|
||||||
LIST_OF_EBS_SNAPSHOTS=$($AWSCLI ec2 describe-snapshots --profile $PROFILE --region $regx --owner-ids $ACCOUNT_NUM --output text --query 'Snapshots[*].{ID:SnapshotId}')
|
|
||||||
for snapshot in $LIST_OF_EBS_SNAPSHOTS; do
|
|
||||||
SNAPSHOT_IS_PUBLIC=$($AWSCLI ec2 describe-snapshot-attribute --profile $PROFILE --region $regx --output text --snapshot-id $snapshot --attribute createVolumePermission --query "CreateVolumePermissions[?Group=='all']")
|
|
||||||
if [[ $SNAPSHOT_IS_PUBLIC ]];then
|
|
||||||
textWarn "$regx: $snapshot is currently Public!" "$regx"
|
|
||||||
else
|
|
||||||
textOK "$regx: $snapshot is not Public" "$regx"
|
|
||||||
fi
|
|
||||||
done
|
|
||||||
done
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
extra73(){
|
|
||||||
# # set -x
|
|
||||||
ID73="7.3"
|
|
||||||
TITLE73="Ensure there are no S3 buckets open to the AllUsers (Not Scored) (Not part of CIS benchmark)"
|
|
||||||
textTitle "$ID73" "$TITLE73" "0"
|
|
||||||
#
|
|
||||||
# for regx in $REGIONS; do
|
|
||||||
#
|
|
||||||
# done
|
|
||||||
# # set +x
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
callCheck(){
|
callCheck(){
|
||||||
if [[ $CHECKNUMBER ]];then
|
if [[ $CHECKNUMBER ]];then
|
||||||
@@ -1487,8 +1453,6 @@ callCheck(){
|
|||||||
check44 ) check44;;
|
check44 ) check44;;
|
||||||
check45 ) check45;;
|
check45 ) check45;;
|
||||||
extra71 ) extra71;;
|
extra71 ) extra71;;
|
||||||
extra72 ) extra72;;
|
|
||||||
extra73 ) extra73;;
|
|
||||||
## Groups of Checks
|
## Groups of Checks
|
||||||
check1 )
|
check1 )
|
||||||
check11;check12;check13;check14;check15;check16;check17;check18;
|
check11;check12;check13;check14;check15;check16;check17;check18;
|
||||||
@@ -1523,7 +1487,7 @@ callCheck(){
|
|||||||
check43;check44;check45
|
check43;check44;check45
|
||||||
;;
|
;;
|
||||||
extras )
|
extras )
|
||||||
extra71;extra72;extra73
|
extra71;
|
||||||
;;
|
;;
|
||||||
* )
|
* )
|
||||||
textWarn "ERROR! Use a valid check name (i.e. check41)\n";
|
textWarn "ERROR! Use a valid check name (i.e. check41)\n";
|
||||||
|
|||||||
Reference in New Issue
Block a user