From db8b5a4d0b79d2508e50f3bd3c062d0bfdb237b9 Mon Sep 17 00:00:00 2001 From: Toni de la Fuente Date: Wed, 28 Mar 2018 10:50:56 -0400 Subject: [PATCH] added check extra724 Certificate Transparency --- LIST_OF_CHECKS_AND_GROUPS.md | 2 +- checks/check_extra724 | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/LIST_OF_CHECKS_AND_GROUPS.md b/LIST_OF_CHECKS_AND_GROUPS.md index 45da4264..893bf802 100644 --- a/LIST_OF_CHECKS_AND_GROUPS.md +++ b/LIST_OF_CHECKS_AND_GROUPS.md @@ -395,5 +395,5 @@ Colors code for results: INFO (Information), PASS (Recommended value), FAIL (F 7.23 Check if RDS Snapshots are public (Not Scored) (Not part of CIS benchmark) -7.24 Check if ACM certificates have Certificate Transparence enabled (Not Scored) (Not part of CIS benchmark) +7.24 Check if ACM certificates have Certificate Transparency logging enabled (Not Scored) (Not part of CIS benchmark) ``` diff --git a/checks/check_extra724 b/checks/check_extra724 index d355a9ca..5acc182c 100644 --- a/checks/check_extra724 +++ b/checks/check_extra724 @@ -1,10 +1,10 @@ CHECK_ID_extra724="7.24" -CHECK_TITLE_extra724="Check if ACM certificates have Certificate Transparence enabled (Not Scored) (Not part of CIS benchmark)" +CHECK_TITLE_extra724="Check if ACM certificates have Certificate Transparency logging enabled (Not Scored) (Not part of CIS benchmark)" CHECK_SCORED_extra724="NOT_SCORED" CHECK_ALTERNATE_check724="extra724" extra724(){ - # "Check if ACM certificates have Certificate Transparence enabled (Not Scored) (Not part of CIS benchmark)" + # "Check if ACM certificates have Certificate Transparency logging enabled (Not Scored) (Not part of CIS benchmark)" for regx in $REGIONS; do LIST_OF_CERTS=$($AWSCLI acm list-certificates $PROFILE_OPT --region $regx --query CertificateSummaryList[].CertificateArn --output text) if [[ $LIST_OF_CERTS ]];then