From c01ff74c7387d3e756b70cbf0695ab1988d87896 Mon Sep 17 00:00:00 2001 From: Nacho Rivera Date: Thu, 23 Feb 2023 15:54:23 +0100 Subject: [PATCH] fix(kms): handle if describe_keys returns no value --- prowler/providers/aws/services/kms/kms_service.py | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/prowler/providers/aws/services/kms/kms_service.py b/prowler/providers/aws/services/kms/kms_service.py index 37d4a54d..a8d9ad4f 100644 --- a/prowler/providers/aws/services/kms/kms_service.py +++ b/prowler/providers/aws/services/kms/kms_service.py @@ -76,7 +76,12 @@ class KMS: logger.info("KMS - Get Key Rotation Status...") try: for key in self.keys: - if "EXTERNAL" not in key.origin and "AWS" not in key.manager: + if ( + key.origin + and key.manager + and "EXTERNAL" not in key.origin + and "AWS" not in key.manager + ): regional_client = self.regional_clients[key.region] key.rotation_enabled = regional_client.get_key_rotation_status( KeyId=key.id @@ -90,7 +95,9 @@ class KMS: logger.info("KMS - Get Key Policy...") try: for key in self.keys: - if key.manager == "CUSTOMER": # only customer KMS have policies + if ( + key.manager and key.manager == "CUSTOMER" + ): # only customer KMS have policies regional_client = self.regional_clients[key.region] key.policy = json.loads( regional_client.get_key_policy(