From 9cda78e561651bcad03533184ab7b555925c1367 Mon Sep 17 00:00:00 2001 From: Sergio Garcia <38561120+sergargar@users.noreply.github.com> Date: Fri, 9 Jun 2023 13:07:28 +0200 Subject: [PATCH] chore(docs): improve allowlist suggestion (#2466) --- docs/tutorials/allowlist.md | 2 +- prowler/config/allowlist.yaml | 2 +- tests/providers/aws/lib/allowlist/fixtures/allowlist.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/tutorials/allowlist.md b/docs/tutorials/allowlist.md index 0c0e44af..846db8fd 100644 --- a/docs/tutorials/allowlist.md +++ b/docs/tutorials/allowlist.md @@ -45,7 +45,7 @@ You can use `-w`/`--allowlist-file` with the path of your allowlist yaml file, b Resources: - "ci-logs" # Will ignore bucket "ci-logs" AND ALSO bucket "ci-logs-replica" in specified check and regions - "logs" # Will ignore EVERY BUCKET containing the string "logs" in specified check and regions - - "[[:alnum:]]+-logs" # Will ignore all buckets containing the terms ci-logs, qa-logs, etc. in specified check and regions + - ".+-logs" # Will ignore all buckets containing the terms ci-logs, qa-logs, etc. in specified check and regions "*": Regions: - "*" diff --git a/prowler/config/allowlist.yaml b/prowler/config/allowlist.yaml index ff9bdec6..e6feee71 100644 --- a/prowler/config/allowlist.yaml +++ b/prowler/config/allowlist.yaml @@ -36,7 +36,7 @@ Allowlist: Resources: - "ci-logs" # Will ignore bucket "ci-logs" AND ALSO bucket "ci-logs-replica" in specified check and regions - "logs" # Will ignore EVERY BUCKET containing the string "logs" in specified check and regions - - "[[:alnum:]]+-logs" # Will ignore all buckets containing the terms ci-logs, qa-logs, etc. in specified check and regions + - ".+-logs" # Will ignore all buckets containing the terms ci-logs, qa-logs, etc. in specified check and regions "*": Regions: - "*" diff --git a/tests/providers/aws/lib/allowlist/fixtures/allowlist.yaml b/tests/providers/aws/lib/allowlist/fixtures/allowlist.yaml index 1b559580..02d9667d 100644 --- a/tests/providers/aws/lib/allowlist/fixtures/allowlist.yaml +++ b/tests/providers/aws/lib/allowlist/fixtures/allowlist.yaml @@ -26,7 +26,7 @@ Allowlist: Resources: - "ci-logs" # Will ignore bucket "ci-logs" AND ALSO bucket "ci-logs-replica" in specified check and regions - "logs" # Will ignore EVERY BUCKET containing the string "logs" in specified check and regions - - "[[:alnum:]]+-logs" # Will ignore all buckets containing the terms ci-logs, qa-logs, etc. in specified check and regions + - ".+-logs" # Will ignore all buckets containing the terms ci-logs, qa-logs, etc. in specified check and regions # EXAMPLE: CONTROL TOWER (to migrate) # When using Control Tower, guardrails prevent access to certain protected resources. The allowlist