From 775d28f9c4f2e231be328ec9d63a0f6aba56ac33 Mon Sep 17 00:00:00 2001 From: Jason Chen Date: Thu, 19 Apr 2018 14:02:54 +0800 Subject: [PATCH] prowler: fix IAM role detection and curl error Related to https://github.com/toniblyx/prowler/pull/200 If the ec2 instance is not attached to an IAM role, the `curl -s -m 1 http://169.254.169.254/latest/meta-data/iam/security-credentials` will return a 404 page instead of null, INSTANCE_PROFILE will always be true and result to curl error when trying to use default cli profile: curl: option -: is unknown curl: try 'curl --help' or 'curl --manual' for more information --- prowler | 3 +++ 1 file changed, 3 insertions(+) diff --git a/prowler b/prowler index c0ccb372..51b32d8c 100755 --- a/prowler +++ b/prowler @@ -250,6 +250,9 @@ fi # instance profile (metadata server) if runs in an EC2 instance INSTANCE_PROFILE=$(curl -s -m 1 http://169.254.169.254/latest/meta-data/iam/security-credentials/) +if echo "$INSTANCE_PROFILE" | grep -q '404 - Not Found'; then + INSTANCE_PROFILE= +fi if [[ $PROFILE ]]; then PROFILE_OPT="--profile $PROFILE"