Toni de la Fuente
232292fa3e
Merge pull request #137 from ASIDataScience/fix-check114
...
Use a query to get AccountMFAEnabled rather than awk/sed
2017-12-13 19:03:56 -05:00
Tomáš Milata
b67ca429e9
Use a query to get AccountMFAEnabled rather than awk/sed
...
Parsing with awk/sed relies on the json being pretty printed (no other values on the same line), which is not always true, causing false-positive warings sometimes. Querying for SummaryMap.AccountMFAEnabled directly should be more robust
2017-12-13 13:38:27 +00:00
Toni de la Fuente
7121fb448a
Merge pull request #136 from ASIDataScience/fix-check113
...
Use a query to get AccountMFAEnabled on a root account rather than awk/sed
2017-12-12 22:24:46 -05:00
Tomáš Milata
887805c5be
Use a query to get AccountMFAEnabled rather than awk/sed
...
Parsing with awk/sed relies on the json being pretty printed (no other values on the same line), which is not always true, causing false-positive warings sometimes. Querying for SummaryMap.AccountMFAEnabled directly should be more robust.
2017-12-12 17:21:34 +00:00
Toni de la Fuente
2063a718a5
Merge pull request #135 from sente/patch-1
...
Support "" (blank) values to if [[ ]] statements
2017-12-07 09:26:03 -05:00
Stuart Powers
4e53521c59
Support "" (blank) values to if [[ ]] statements
2017-12-07 08:06:04 -05:00
Toni de la Fuente
858110179b
Merge pull request #134 from pbugnion/fix-check124
...
Check 1.24: fix error getting policy version when multiple policies share the same words
2017-12-06 16:10:21 -05:00
Pascal Bugnion
d8879d9085
Fix bug getting policy versions
...
When serveral policies have the same full word substring, getting the policy
versions can return multiple entries. Now fixed.
2017-12-06 18:36:51 +00:00
Toni de la Fuente
477023d32a
Merge pull request #131 from st33v/st33v-patch-1
...
fixed internet gateway check
2017-12-04 12:00:59 -08:00
Steve Neuharth
4b7b28eb87
fixed internet gateway check
2017-11-27 20:27:38 -06:00
Toni de la Fuente
3d282e2a99
Merge pull request #13 from Alfresco/master
...
sync with master
2017-11-22 22:37:58 -05:00
Toni de la Fuente
bb2958620c
Merge pull request #130 from ASIDataScience/avoid-username-clash-in-check12
...
Avoid name clashes on word boundaries
2017-11-22 22:36:44 -05:00
Pascal Bugnion
0ff6b7fd70
Avoid name clashes on word boundaries
2017-11-22 13:03:42 +00:00
Toni de la Fuente
eaf95a6239
Merge pull request #129 from toniblyx/master
...
fixed issue with multiple CLOUDWATCH_GROUPS in section 3. Issue #111
2017-11-21 10:21:28 -05:00
Toni de la Fuente
010dd950b3
fixed issue with multiple CLOUDWATCH_GROUPS in section 3. Issue #111
2017-11-21 10:20:38 -05:00
Toni de la Fuente
95c4f4683f
Merge pull request #128 from toniblyx/master
...
Added exit code enhancement #126
2017-11-17 18:46:04 -05:00
Toni de la Fuente
2c86cc04d5
Added exit code enhancement #126
2017-11-17 18:45:20 -05:00
Toni de la Fuente
23c61b4077
Merge pull request #127 from toniblyx/master
...
fixed #111 and improved section 3
2017-11-17 18:24:08 -05:00
Toni de la Fuente
521088aa55
fixed #111 and improved section 3
2017-11-17 18:20:42 -05:00
Toni de la Fuente
482d3c5a77
fixed #111 and improved section 3
2017-11-17 18:17:23 -05:00
Toni de la Fuente
49393d258a
Merge pull request #123 from Alfresco/devel
...
Added 2 additional extra checks
2017-11-08 21:28:56 +00:00
Toni de la Fuente
cc843c16a8
Merge pull request #122 from dougbyrne/check123_false_positives
...
Better grep pattern to find users in the IAM report
2017-11-08 21:26:13 +00:00
Doug Byrne
f5ebc1d227
Better grep pattern to find users in the IAM report
2017-11-08 16:19:42 -05:00
Toni de la Fuente
431178c462
Merge pull request #121 from toniblyx/master
...
added new extras to README
2017-11-08 12:03:23 +00:00
Toni de la Fuente
a06c101fe2
added new extras to README
2017-11-08 12:02:43 +00:00
Toni de la Fuente
caf67f4e6c
Merge pull request #120 from toniblyx/master
...
added extra74 and extra75
2017-11-08 00:03:23 +00:00
Toni de la Fuente
3b251bc4f5
added extra74 and extra75
2017-11-08 00:00:21 +00:00
Toni de la Fuente
0e5da362cb
Merge pull request #119 from toniblyx/master
...
fixed issue #113
2017-11-06 19:30:24 -05:00
Toni de la Fuente
4c9b79a9d2
fixed issue #113
2017-11-06 19:29:41 -05:00
Toni de la Fuente
35da09d97a
Merge pull request #117 from toniblyx/master
...
Fixed issue #112
2017-10-26 18:11:25 -04:00
Toni de la Fuente
0f1407325f
Fixed issue #112
2017-10-26 18:09:36 -04:00
Toni de la Fuente
b5901d0b65
Fixed issue #112
2017-10-26 18:06:45 -04:00
Toni de la Fuente
4daf8cbcae
Merge pull request #116 from toniblyx/master
...
Fixed issue #114
2017-10-26 17:15:39 -04:00
Toni de la Fuente
fc58cd535c
Fixed issue #114
2017-10-26 17:14:41 -04:00
Toni de la Fuente
21e5102206
Merge branch 'master' of https://github.com/toniblyx/prowler
2017-10-26 16:58:34 -04:00
Toni de la Fuente
ca469b5f7c
issue #85
2017-10-26 16:58:14 -04:00
Toni de la Fuente
a6f1affefa
Merge pull request #12 from Alfresco/master
...
syc with master repo
2017-10-26 15:45:05 -04:00
Toni de la Fuente
26b749b470
Merge pull request #110 from netflash/master
...
Fix typo on AWS_ACCESS_KEY_ID variable name
2017-10-05 13:27:16 -04:00
Alex Romanov
d87c4a1cff
Fix typo
2017-10-05 10:14:38 -07:00
Toni de la Fuente
0051adb855
Merge pull request #109 from toniblyx/master
...
Issue #107
2017-10-04 22:38:20 -04:00
Toni de la Fuente
3b62bc433e
Issue #107
...
https://github.com/Alfresco/prowler/issues/107
AWS recommends in official docs is to follow this order:
1 Command line options
2 Environment variables
3 The AWS credentials file
4 The CLI configuration file
5 Container credentials
6 Instance profile credentials
This change makes Prowler first reads creds from enviroment variables if no profile especified, if they are not available look for default profile in ~/.aws/credentials and finally if it has an instance profile attached it uses its credentials.
2017-10-04 22:36:36 -04:00
Toni de la Fuente
15337ad62c
Added info about env credentials
2017-10-04 22:33:14 -04:00
Toni de la Fuente
48ef4f555e
Merge pull request #11 from Alfresco/master
...
get all changes from the main repo
2017-10-04 11:42:28 -04:00
Toni de la Fuente
c16455d752
Merge pull request #106 from neonbunny/patch-2
...
Clarify warning message when CloudTrail is not consumed by CloudWatch
2017-09-26 10:20:05 -04:00
neonbunny
1df55ebf60
Clarify warning message when CloudTrail is not consumed by CloudWatch
2017-09-26 14:49:05 +01:00
Toni de la Fuente
1a79c6e0f9
Merge pull request #105 from neonbunny/patch-1
...
Clarify warning message
2017-09-22 08:53:04 -04:00
neonbunny
3ccf28617e
Clarify warning message
...
A previous change replaced a comma in the message with the word "but" which is incorrect - the missing KMS key was the indicator that the trail was not encrypted.
2017-09-22 11:22:59 +01:00
Toni de la Fuente
ae8b8076c5
Merge pull request #104 from toniblyx/master
...
Fix issue #103
2017-09-11 18:18:14 -04:00
Toni de la Fuente
c7925b6f94
Fix issue #103
...
Fix issue #103
2017-09-11 18:16:18 -04:00
Toni de la Fuente
0e2502fcad
Merge pull request #102 from toniblyx/master
...
Added numeral feature issue #101
2017-09-08 18:20:57 -04:00