ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 14:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(allowlist): allowlist a specific service (#2331)

Browse Source
This commit is contained in:
Sergio Garcia
2023-05-09 15:43:04 +02:00
committed by GitHub
parent 6273dd3d83
commit d344318dd4
4 changed files with 90 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

53
tests/providers/aws/lib/allowlist/allowlist_test.py
View File

@@ -323,6 +323,59 @@ class Test_Allowlist:
)
)
def test_is_allowlisted_in_check_regex(self):
# Allowlist example
allowlist = {
"Accounts": {
AWS_ACCOUNT_NUMBER: {
"Checks": {
"s3_*": {
"Regions": ["us-east-1", "eu-west-1"],
"Resources": ["*"],
}
}
}
}
}
assert is_allowlisted_in_check(
allowlist,
AWS_ACCOUNT_NUMBER,
"s3_bucket_public_access",
AWS_REGION,
"prowler",
[],
)
assert is_allowlisted_in_check(
allowlist,
AWS_ACCOUNT_NUMBER,
"s3_bucket_public_access",
AWS_REGION,
"prowler-test",
[],
)
assert is_allowlisted_in_check(
allowlist,
AWS_ACCOUNT_NUMBER,
"s3_bucket_public_access",
AWS_REGION,
"test-prowler",
[],
)
assert not (
is_allowlisted_in_check(
allowlist,
AWS_ACCOUNT_NUMBER,
"iam_user_hardware_mfa_enabled",
AWS_REGION,
"test",
[],
)
)
def test_is_allowlisted_tags(self):
# Allowlist example
allowlist = {