mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
fix(allowlist_db): Improve DynamoDB regex for allowlisting. (#1125)
Co-authored-by: sergargar <sergio@verica.io>
This commit is contained in:
@@ -16,7 +16,7 @@ allowlist(){
|
|||||||
if grep -q -E "^s3://([^/]+)/(.*?([^/]+))$" <<< "${ALLOWLIST_FILE}"; then
|
if grep -q -E "^s3://([^/]+)/(.*?([^/]+))$" <<< "${ALLOWLIST_FILE}"; then
|
||||||
allowlist_S3
|
allowlist_S3
|
||||||
# Check if the file is a DynamoDB ARN
|
# Check if the file is a DynamoDB ARN
|
||||||
elif grep -q -E "^arn:aws:dynamodb:\w+(?:-\w+)+:\d{12}:table\/[A-Za-z0-9]+$" <<< "${ALLOWLIST_FILE}"; then
|
elif grep -q -E "^arn:aws:dynamodb:\w+(?:-\w+)+:\d{12}:table\/[A-Za-z0-9-._]+$" <<< "${ALLOWLIST_FILE}"; then
|
||||||
allowlist_DynamoDB
|
allowlist_DynamoDB
|
||||||
else
|
else
|
||||||
# Check if the file is a DynamoDB ARN
|
# Check if the file is a DynamoDB ARN
|
||||||
|
|||||||
Reference in New Issue
Block a user