diff --git a/docs/tutorials/allowlist.md b/docs/tutorials/allowlist.md index ed04758c..2d488338 100644 --- a/docs/tutorials/allowlist.md +++ b/docs/tutorials/allowlist.md @@ -116,6 +116,9 @@ prowler aws -w arn:aws:dynamodb:::table/ - Regions (List): This field contains a list of regions where this allowlist rule is applied (it can also contains an `*` to apply all scanned regions). - Resources (List): This field contains a list of regex expressions that applies to the resources that are wanted to be allowlisted. - Tags (List): -Optional- This field contains a list of tuples in the form of 'key=value' that applies to the resources tags that are wanted to be allowlisted. + - Exceptions (Map): -Optional- This field contains a map of lists of accounts/regions/resources/tags that are wanted to be excepted in the allowlist. + +The following example will allowlist all resources in all accounts for the EC2 checks in the regions `eu-west-1` and `us-east-1` with the tags `environment=dev` and `environment=prod`, except the resources containing the string `test` in the account `012345678912` and region `eu-west-1` with the tag `environment=prod`: diff --git a/docs/tutorials/img/allowlist-row.png b/docs/tutorials/img/allowlist-row.png index bde9c1ec..0ed7d75a 100644 Binary files a/docs/tutorials/img/allowlist-row.png and b/docs/tutorials/img/allowlist-row.png differ