Commit Graph

276 Commits

Author SHA1 Message Date
AlexClineBB
9727d5a3ed Set defaults for environment variables
This change sets the defaults for PROFILE and REGION before they're set by getopts,
allowing us to add support for more options without needing to update the default
setting code that happened after the options were parsed.
2017-05-31 14:54:39 -04:00
Toni de la Fuente
2c865485d9 Merge pull request #41 from AlexCline/master
Match the entire username when running check12
2017-05-31 13:10:50 -04:00
AlexClineBB
666a1c42cd Match the entire username when running check12
When a password-enabled user with a short name (e.g. "bc") is matched against
another user whose username contains the first (e.g. "abcd"), check12 would
erroneously display the second user "abcd" as having a password and no MFA.

This change ensures that grep matches the whole word.
2017-05-31 11:21:31 -04:00
Toni de la Fuente
e0ef94caa5 Updated github repo name in README 2017-05-05 15:07:31 -04:00
Toni de la Fuente
1abdfff7ac Merge pull request #38 from virtualjj/fix-check28
Fix check28 - Issue #36
2017-01-10 09:13:58 -05:00
Toni de la Fuente
a2371a8c34 Merge pull request #37 from virtualjj/fix-readme-custom-iam-policy
Add logs:DescribeMetricFilters to Custom IAM Policy section.
2017-01-10 09:12:03 -05:00
Virtual JJ
7ba0778162 Fix issue #36. Improve parsing of default KMS keys and customer keys. 2017-01-10 15:59:23 +09:00
Virtual JJ
931da9920e Add logs:DescribeMetricFilters to Custom IAM Policy section. 2017-01-09 20:27:29 +09:00
Toni de la Fuente
aa6cd9c614 Merge pull request #35 from davidpanofsky/fix_2.4
fix for rule 2.4
2016-12-30 11:53:24 +01:00
David Panofsky
71f96f017e fix accidental removal 2016-12-29 17:43:09 -05:00
David Panofsky
2280f1cf9c Merge branch 'master' into fix_2.4 2016-12-29 17:37:56 -05:00
David Panofsky
ae88e34cd5 fix for rule 2.4 2016-12-29 17:31:16 -05:00
David Panofsky
434ad7733d fix for rule 2.4 2016-12-29 17:25:34 -05:00
Toni de la Fuente
3b5e6a0680 Merge pull request #34 from davidpanofsky/master
Fix couple of syntax errors
2016-12-19 08:46:24 +00:00
David Panofsky
ae842f2b1a Merge branch 'master' of github.com:davidpanofsky/aws-cis-security-benchmark 2016-12-16 15:23:08 -05:00
David Panofsky
499042dc6f fix a few lists which were being treated as strings 2016-12-16 15:22:22 -05:00
Toni de la Fuente
61d7d39d0a Merge pull request #33 from toniblyx/master
Added Support for CIS AWS 1.1
2016-11-30 00:49:54 -05:00
Toni de la Fuente
581c7c7ebf Added Support for CIS AWS 1.1 2016-11-30 00:48:35 -05:00
Toni de la Fuente
e7b5b8ce58 Support for CIS AWS 1.1 2016-11-30 00:32:00 -05:00
Toni de la Fuente
ae77663fd7 Merge pull request #32 from toniblyx/master
Added info to README and help
2016-11-14 22:35:19 -05:00
Toni de la Fuente
56656e95ef Added info to README and help 2016-11-14 22:34:48 -05:00
Toni de la Fuente
e294c46722 Merge pull request #31 from toniblyx/master
Fixed section 3 commands and added group checks
2016-11-14 22:32:30 -05:00
Toni de la Fuente
cec364581e Fixed section 3 commands 2016-11-14 22:29:56 -05:00
Toni de la Fuente
2d8f19b61b Merge pull request #28 from toniblyx/master
Improved output for check28 and Fixed issue #27
2016-10-13 13:32:38 -04:00
Toni de la Fuente
7d20141859 Fixed issue #27 2016-10-13 13:31:17 -04:00
Toni de la Fuente
0679fe43e8 Improved output for check28 2016-10-12 16:41:55 -04:00
Toni de la Fuente
ebffbd5166 Merge pull request #25 from toniblyx/master
Added ansi2html for reporting
2016-10-12 15:54:53 -04:00
Toni de la Fuente
f7256d1b97 Improved check25 when configured but not enabled 2016-10-12 15:29:33 -04:00
Toni de la Fuente
e9eda9dfdb fixed report temp deletion after single check and fixed check24 region bug 2016-10-12 12:16:31 -04:00
Toni de la Fuente
3e79b5c5be Added ansi2html for reporting 2016-10-07 13:25:08 -04:00
Toni de la Fuente
259ab994ba Merge pull request #24 from toniblyx/master
Added suggestion as in issue #19
2016-10-07 10:25:59 -04:00
Toni de la Fuente
5c3cee9c0c Added suggestion as in issue #19 2016-10-07 10:25:18 -04:00
Toni de la Fuente
6a5cf701dd Merge pull request #23 from toniblyx/master
Fixes of issue #16
2016-10-06 16:19:53 -04:00
Toni de la Fuente
e70e3c7100 Fixes of issue #16 2016-10-06 16:18:58 -04:00
Toni de la Fuente
a1d6b2b3a4 Merge pull request #22 from toniblyx/master
Fixed issue in check 1.10
2016-10-06 13:57:26 -04:00
Toni de la Fuente
e9839fc2d9 Fixed issue in check 1.10 2016-10-06 13:56:50 -04:00
Toni de la Fuente
9d425c0ea4 Merge pull request #21 from toniblyx/master
Added info about default region us-east-1
2016-10-06 13:26:27 -04:00
Toni de la Fuente
2e2c9b7126 Added info about default region us-east-1 2016-10-06 13:25:22 -04:00
Toni de la Fuente
ba1b9de199 Merge pull request #20 from toniblyx/master
fixed issues 2.1 and 2.2 when more than one trail
2016-10-06 13:22:54 -04:00
Toni de la Fuente
68f8f5b4b8 fixed issues 2.1 and 2.2 when more than one trail 2016-10-06 13:21:28 -04:00
Toni de la Fuente
7ab0ab46be Merge pull request #17 from lyletagawa/use_cloudwatch_group
Ensure ${CLOUDWATCH_GROUP} lookup for single checks
2016-10-06 12:52:16 -04:00
Lyle Tagawa
fa024973a0 Ensure ${CLOUDWATCH_GROUP} lookup for single checks, and use the discoverd ${CLOUDWATCH_GROUP} as the metric-filter log-group-name 2016-10-05 20:10:26 -07:00
Toni de la Fuente
038ee8fda8 Merge pull request #14 from toniblyx/master
Added information about custom IAM Policy, issue #12
2016-09-27 11:42:02 -04:00
Toni de la Fuente
1b2a312808 Added information about custom IAM Policy, issue #12 2016-09-27 11:41:06 -04:00
Toni de la Fuente
2c9b2e8576 Merge pull request #13 from toniblyx/master
Fixed color when OK in check 4.4
2016-09-27 08:56:04 -04:00
Toni de la Fuente
0ee3821bc8 Fixed color when OK in check 4.4 2016-09-27 08:55:29 -04:00
Toni de la Fuente
5a7daed1a1 Merge pull request #10 from toniblyx/master
Fixed issue #9, check113
2016-09-20 17:15:45 -04:00
Toni de la Fuente
19ab11f072 Fixed issue #9, check113 2016-09-20 17:14:15 -04:00
Toni de la Fuente
cb98251a7a Fixed issue #8, check113 2016-09-20 17:00:28 -04:00
Toni de la Fuente
3c2d91e133 Merge pull request #8 from toniblyx/master
Fix issue #7, base64 option in Linux
2016-09-20 14:05:06 -04:00