ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-11 07:15:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(eks_endpoints_not_publicly_accessible): handle endpoint private access (#2825)

Browse Source 
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
This commit is contained in:
Fennerr
2023-09-22 11:19:56 +02:00
committed by GitHub
parent 50bc5309f5
commit 6204f6cdc8
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
prowler/providers/aws/services/eks/eks_endpoints_not_publicly_accessible/eks_endpoints_not_publicly_accessible.py
View File

@@ -15,7 +15,7 @@ class eks_endpoints_not_publicly_accessible(Check):
report.status_extended = (
f"Cluster endpoint access is private for EKS cluster {cluster.name}."
)
if cluster.endpoint_public_access and not cluster.endpoint_private_access:
if cluster.endpoint_public_access:
report.status = "FAIL"
report.status_extended = (
f"Cluster endpoint access is public for EKS cluster {cluster.name}."

4
tests/providers/aws/services/eks/eks_endpoints_not_publicly_accessible/eks_endpoints_not_publicly_accessible_test.py
View File

@@ -58,6 +58,8 @@ class Test_eks_endpoints_not_publicly_accessible:
)
assert result[0].resource_id == cluster_name
assert result[0].resource_arn == cluster_arn
assert result[0].resource_tags == []
assert result[0].region == AWS_REGION
def test_endpoint_not_public_access(self):
eks_client = mock.MagicMock
@@ -91,3 +93,5 @@ class Test_eks_endpoints_not_publicly_accessible:
)
assert result[0].resource_id == cluster_name
assert result[0].resource_arn == cluster_arn
assert result[0].resource_tags == []
assert result[0].region == AWS_REGION