mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
fix(awslambda_function_no_secrets_in_code): Retrieve Code if set (#1833)
This commit is contained in:
@@ -12,6 +12,7 @@ from prowler.lib.check.check import (
|
||||
list_services,
|
||||
parse_checks_from_file,
|
||||
recover_checks_from_provider,
|
||||
update_audit_metadata,
|
||||
)
|
||||
from prowler.lib.check.models import load_check_metadata
|
||||
|
||||
@@ -317,3 +318,56 @@ class Test_Check:
|
||||
# )
|
||||
# == test_case["expected"]
|
||||
# )
|
||||
|
||||
def test_update_audit_metadata_complete(self):
|
||||
from prowler.providers.common.models import Audit_Metadata
|
||||
|
||||
# Set the expected checks to run
|
||||
expected_checks = ["iam_administrator_access_with_mfa"]
|
||||
services_executed = {"iam"}
|
||||
checks_executed = {"iam_administrator_access_with_mfa"}
|
||||
|
||||
# Set an empty Audit_Metadata
|
||||
audit_metadata = Audit_Metadata(
|
||||
services_scanned=0,
|
||||
expected_checks=expected_checks,
|
||||
completed_checks=0,
|
||||
audit_progress=0,
|
||||
)
|
||||
|
||||
audit_metadata = update_audit_metadata(
|
||||
audit_metadata, services_executed, checks_executed
|
||||
)
|
||||
|
||||
assert audit_metadata.audit_progress == float(100)
|
||||
assert audit_metadata.services_scanned == 1
|
||||
assert audit_metadata.expected_checks == expected_checks
|
||||
assert audit_metadata.completed_checks == 1
|
||||
|
||||
def test_update_audit_metadata_50(self):
|
||||
from prowler.providers.common.models import Audit_Metadata
|
||||
|
||||
# Set the expected checks to run
|
||||
expected_checks = [
|
||||
"iam_administrator_access_with_mfa",
|
||||
"iam_support_role_created",
|
||||
]
|
||||
services_executed = {"iam"}
|
||||
checks_executed = {"iam_administrator_access_with_mfa"}
|
||||
|
||||
# Set an empty Audit_Metadata
|
||||
audit_metadata = Audit_Metadata(
|
||||
services_scanned=0,
|
||||
expected_checks=expected_checks,
|
||||
completed_checks=0,
|
||||
audit_progress=0,
|
||||
)
|
||||
|
||||
audit_metadata = update_audit_metadata(
|
||||
audit_metadata, services_executed, checks_executed
|
||||
)
|
||||
|
||||
assert audit_metadata.audit_progress == float(50)
|
||||
assert audit_metadata.services_scanned == 1
|
||||
assert audit_metadata.expected_checks == expected_checks
|
||||
assert audit_metadata.completed_checks == 1
|
||||
|
||||
@@ -10,9 +10,9 @@ from boto3 import client, resource, session
|
||||
from moto import mock_iam, mock_lambda, mock_s3
|
||||
from moto.core import DEFAULT_ACCOUNT_ID
|
||||
|
||||
from prowler.providers.aws.lib.audit_info.audit_info import current_audit_info
|
||||
from prowler.providers.aws.lib.audit_info.models import AWS_Audit_Info
|
||||
from prowler.providers.aws.services.awslambda.awslambda_service import AuthType, Lambda
|
||||
from prowler.providers.common.models import Audit_Metadata
|
||||
|
||||
# Mock Test Region
|
||||
AWS_REGION = "eu-west-1"
|
||||
@@ -75,22 +75,29 @@ class Test_Lambda_Service:
|
||||
audited_regions=None,
|
||||
organizations_metadata=None,
|
||||
audit_resources=None,
|
||||
audit_metadata=Audit_Metadata(
|
||||
services_scanned=0,
|
||||
# We need to set this check to call __list_functions__
|
||||
expected_checks=["awslambda_function_no_secrets_in_code"],
|
||||
completed_checks=0,
|
||||
audit_progress=0,
|
||||
),
|
||||
)
|
||||
return audit_info
|
||||
|
||||
# Test Lambda Client
|
||||
def test__get_client__(self):
|
||||
awslambda = Lambda(current_audit_info)
|
||||
awslambda = Lambda(self.set_mocked_audit_info())
|
||||
assert awslambda.regional_clients[AWS_REGION].__class__.__name__ == "Lambda"
|
||||
|
||||
# Test Lambda Session
|
||||
def test__get_session__(self):
|
||||
awslambda = Lambda(current_audit_info)
|
||||
awslambda = Lambda(self.set_mocked_audit_info())
|
||||
assert awslambda.session.__class__.__name__ == "Session"
|
||||
|
||||
# Test Lambda Service
|
||||
def test__get_service__(self):
|
||||
awslambda = Lambda(current_audit_info)
|
||||
awslambda = Lambda(self.set_mocked_audit_info())
|
||||
assert awslambda.service == "lambda"
|
||||
|
||||
@mock_lambda
|
||||
|
||||
Reference in New Issue
Block a user