ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 14:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(metadata): Include EC2 subservices (#1311)

Browse Source
This commit is contained in:
Pepe Fagoaga
2022-08-03 17:29:43 +02:00
committed by GitHub
parent 5e40fc28c9
commit de96894a4d
10 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
providers/aws/services/ec2/ec2_ebs_public_snapshot/ec2_ebs_public_snapshot.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Ensure there are no EBS Snapshots set as Public.", "CheckTitle": "Ensure there are no EBS Snapshots set as Public.",
"CheckType": "Data Protection", "CheckType": "Data Protection",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "ebs-snapshots", "SubServiceName": "snapshot",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "critical", "Severity": "critical",
"ResourceType": "AwsEc2Snapshot", "ResourceType": "AwsEc2Snapshot",

2
providers/aws/services/ec2/ec2_ebs_snapshots_encrypted/ec2_ebs_snapshots_encrypted.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Check if EBS snapshots are encrypted.", "CheckTitle": "Check if EBS snapshots are encrypted.",
"CheckType": "Data Protection", "CheckType": "Data Protection",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "ebs-snapshots", "SubServiceName": "snapshot",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium", "Severity": "medium",
"ResourceType": "AwsEc2Snapshot", "ResourceType": "AwsEc2Snapshot",

2
providers/aws/services/ec2/ec2_instance_public_ip/ec2_instance_public_ip.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Check for EC2 Instances with Public IP.", "CheckTitle": "Check for EC2 Instances with Public IP.",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "instances", "SubServiceName": "instance",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "medium", "Severity": "medium",
"ResourceType": "AwsEc2SecurityGroup", "ResourceType": "AwsEc2SecurityGroup",

2
providers/aws/services/ec2/ec2_networkacl_allow_ingress_tcp_port_22/ec2_networkacl_allow_ingress_tcp_port_22.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Ensure no Network ACLs allow ingress from 0.0.0.0/0 to SSH port 22", "CheckTitle": "Ensure no Network ACLs allow ingress from 0.0.0.0/0 to SSH port 22",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "networkacls", "SubServiceName": "networkacl",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high", "Severity": "high",
"ResourceType": "AwsEc2NetworkAcl", "ResourceType": "AwsEc2NetworkAcl",

2
providers/aws/services/ec2/ec2_networkacl_allow_ingress_tcp_port_3389/ec2_networkacl_allow_ingress_tcp_port_3389.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Ensure no Network ACLs allow ingress from 0.0.0.0/0 to Microsoft RDP port 3389", "CheckTitle": "Ensure no Network ACLs allow ingress from 0.0.0.0/0 to Microsoft RDP port 3389",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "networkacls", "SubServiceName": "networkacl",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high", "Severity": "high",
"ResourceType": "AwsEc2NetworkAcl", "ResourceType": "AwsEc2NetworkAcl",

2
providers/aws/services/ec2/ec2_securitygroup_allow_ingress_from_internet_to_any_port/ec2_securitygroup_allow_ingress_from_internet_to_any_port.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to any port.", "CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to any port.",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "securitygroups", "SubServiceName": "securitygroup",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high", "Severity": "high",
"ResourceType": "AwsEc2SecurityGroup", "ResourceType": "AwsEc2SecurityGroup",

2
providers/aws/services/ec2/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_22.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to SSH port 22.", "CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to SSH port 22.",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "securitygroups", "SubServiceName": "securitygroup",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high", "Severity": "high",
"ResourceType": "AwsEc2SecurityGroup", "ResourceType": "AwsEc2SecurityGroup",

2
providers/aws/services/ec2/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_3389/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_3389.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to port 3389.", "CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to port 3389.",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "securitygroups", "SubServiceName": "securitygroup",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high", "Severity": "high",
"ResourceType": "AwsEc2SecurityGroup", "ResourceType": "AwsEc2SecurityGroup",

2
providers/aws/services/ec2/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_mysql_3306/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_mysql_3306.metadata.json
View File

@@ -4,7 +4,7 @@
"CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to MySQL port 3306.", "CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to MySQL port 3306.",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "", "SubServiceName": "securitygroups",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high", "Severity": "high",
"ResourceType": "AwsEc2SecurityGroup", "ResourceType": "AwsEc2SecurityGroup",

2
providers/aws/services/ec2/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_oracle_1521_2483/ec2_securitygroup_allow_ingress_from_internet_to_tcp_port_oracle_1521_2483.metadata.json
View File

@@ -5,7 +5,7 @@
"CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to Oracle ports 1521 or 2483.", "CheckTitle": "Ensure no security groups allow ingress from 0.0.0.0/0 or ::/0 to Oracle ports 1521 or 2483.",
"CheckType": "Infrastructure Security", "CheckType": "Infrastructure Security",
"ServiceName": "ec2", "ServiceName": "ec2",
"SubServiceName": "", "SubServiceName": "securitygroup",
"ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id", "ResourceIdTemplate": "arn:partition:service:region:account-id:resource-id",
"Severity": "high", "Severity": "high",
"ResourceType": "AwsEc2SecurityGroup", "ResourceType": "AwsEc2SecurityGroup",