From 78ccc7d953e636c9f157776cc1926e2e2a951814 Mon Sep 17 00:00:00 2001 From: Patrick Downey Date: Wed, 8 Apr 2020 13:28:18 +0100 Subject: [PATCH] Remove HomeRegion predicate from describe-trails in extras725 So we can look at cross-region trails too --- checks/check_extra725 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/checks/check_extra725 b/checks/check_extra725 index 259782a9..3ba2af59 100644 --- a/checks/check_extra725 +++ b/checks/check_extra725 @@ -33,7 +33,7 @@ extra725(){ # now create a list with all trails available and their region TEMP_TRAILS_LIST_FILE=$(mktemp -t prowler.trails-list-XXXXXX) for regx in $REGIONS; do - $AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query trailList[?HomeRegion==\`$regx\`].[TrailARN,HomeRegion] --output text >> $TEMP_TRAILS_LIST_FILE + $AWSCLI cloudtrail describe-trails $PROFILE_OPT --region $regx --query trailList[].[TrailARN,HomeRegion] --output text >> $TEMP_TRAILS_LIST_FILE done # look for buckets being logged per trail and create a list with them