ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 14:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #261 from SkxNMDI5/fix-260

Browse Source 
Issue 260 : Fix incremental policy
This commit is contained in:
Toni de la Fuente
2018-10-24 13:37:40 -04:00
committed by GitHub
parent db2483b7a5 e49cf1fde7
commit f8130fa2df
1 changed files with 5 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
README.md
View File

@@ -332,7 +332,7 @@ Instead of using default policy SecurityAudit for the account you use for checks
### Incremental IAM Policy
Alternatively, here is a policy which defines the permissions which are NOT present in the AWS Managed SecurityAudit policy. Attach both this policy and the AWS Managed SecurityAudit policy to the group and you're good to go.
Alternatively, here is a policy which defines the permissions which are NOT present in the AWS Managed SecurityAudit policy. Attach both this policy and the [AWS Managed SecurityAudit policy](https://console.aws.amazon.com/iam/home#/policies/arn:aws:iam::aws:policy/SecurityAudit$jsonEditor) to the group and you're good to go.
```sh
{
@@ -340,13 +340,7 @@ Alternatively, here is a policy which defines the permissions which are NOT pres
"Statement": [
{
"Action": [
"acm:DescribeCertificate",
"acm:ListCertificates",
"es:DescribeElasticsearchDomainConfig",
"logs:DescribeLogGroups",
"logs:DescribeMetricFilters",
"ses:GetIdentityVerificationAttributes",
"sns:ListSubscriptionsByTopic"
"support:DescribeTrustedAdvisorChecks"
],
"Effect": "Allow",
"Resource": "*"
@@ -454,9 +448,9 @@ The `forensics-ready` group of checks uses existing and extra checks. To get a f
In order to add any new check feel free to create a new extra check in the extras group or other group. To do so, you will need to follow these steps:
1. Follow structure in file `checks/check_sample`
1. Name your check with a number part of an existing group or a new one
1. Save changes and run it as `./prowler -c extraNN`
1. Send me a pull request! :)
2. Name your check with a number part of an existing group or a new one
3. Save changes and run it as `./prowler -c extraNN`
4. Send me a pull request! :)
## Add Custom Groups