Merge pull request #281 from SDugo/master

Option "-c" supports one or multiple checks
This commit is contained in:
Toni de la Fuente
2018-12-19 23:50:57 -05:00
committed by GitHub

View File

@@ -56,8 +56,8 @@ USAGE:
-p <profile> specify your AWS profile to use (i.e.: default) -p <profile> specify your AWS profile to use (i.e.: default)
-r <region> specify an AWS region to direct API requests to -r <region> specify an AWS region to direct API requests to
(i.e.: us-east-1), all regions are checked anyway if the check requires it (i.e.: us-east-1), all regions are checked anyway if the check requires it
-c <check_id> specify a check id, to see all available checks use "-l" option -c <check_id> specify one or multiple check ids separated by commas, to see all available checks use "-l" option
(i.e.: "check11" for check 1.1 or "extra71" for extra check 71) (i.e.: "check11" for check 1.1 or "extra71,extra72" for extra check 71 and extra check 72)
-g <group_id> specify a group of checks by id, to see all available group of checks use "-L" -g <group_id> specify a group of checks by id, to see all available group of checks use "-L"
(i.e.: "check3" for entire section 3, "level1" for CIS Level 1 Profile Definitions or "forensics-ready") (i.e.: "check3" for entire section 3, "level1" for CIS Level 1 Profile Definitions or "forensics-ready")
-f <filterregion> specify an AWS region to run checks against -f <filterregion> specify an AWS region to run checks against
@@ -305,7 +305,10 @@ getWhoami
# Execute single check if called with -c # Execute single check if called with -c
if [[ $CHECK_ID ]];then if [[ $CHECK_ID ]];then
execute_check $CHECK_ID IFS=',' read -ra CHECKS <<< "$CHECK_ID"
for CHECK in "${CHECKS[@]}"; do
execute_check $CHECK
done
cleanTemp cleanTemp
exit $EXITCODE exit $EXITCODE
fi fi