ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 06:45:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(vpc_peering_routing_tables_with_least_privilege): check only peering routes (#2887)

Browse Source
This commit is contained in:
Sergio Garcia
2023-10-02 16:20:39 +02:00
committed by GitHub
parent 64f06b11b8
commit 40318b87bf
2 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
prowler/providers/aws/services/vpc/vpc_peering_routing_tables_with_least_privilege/vpc_peering_routing_tables_with_least_privilege.metadata.json
View File

@@ -17,7 +17,7 @@
"Code": {
"CLI": "https://docs.bridgecrew.io/docs/networking_5#cli-command",
"NativeIaC": "",
"Other": "",
"Other": "https://www.trendmicro.com/cloudoneconformity-staging/knowledge-base/aws/VPC/vpc-peering-access.html#",
"Terraform": ""
},
"Recommendation": {

5
prowler/providers/aws/services/vpc/vpc_service.py
View File

@@ -103,7 +103,10 @@ class VPC(AWSService):
if (
route["Origin"] != "CreateRouteTable"
): # avoid default route table
if "DestinationCidrBlock" in route:
if (
"DestinationCidrBlock" in route
and "VpcPeeringConnectionId" in route
):
destination_cidrs.append(route["DestinationCidrBlock"])
conn.route_tables.append(
Route(