ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 23:05:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(kms): check only KMS CMK tags (#2468)

Browse Source
This commit is contained in:
Sergio Garcia
2023-06-09 13:06:06 +02:00
committed by GitHub
parent 3c2c896708
commit cc31872a7f
1 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
prowler/providers/aws/services/kms/kms_service.py
View File

@@ -113,16 +113,19 @@ class KMS:
def __list_resource_tags__(self):
logger.info("KMS - List Tags...")
for key in self.keys:
try:
regional_client = self.regional_clients[key.region]
response = regional_client.list_resource_tags(
KeyId=key.id,
)["Tags"]
key.tags = response
except Exception as error:
logger.error(
f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
)
if (
key.manager and key.manager == "CUSTOMER"
): # only check customer KMS keys
try:
regional_client = self.regional_clients[key.region]
response = regional_client.list_resource_tags(
KeyId=key.id,
)["Tags"]
key.tags = response
except Exception as error:
logger.error(
f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
)
class Key(BaseModel):