Toni de la Fuente
2362518f13
added -g option to README and fixes
2018-04-19 09:52:31 -04:00
Toni de la Fuente
38ad3ca657
region and profile handling improved
2018-04-19 09:47:16 -04:00
Toni de la Fuente
ada8a225ae
fixed and improved aws profile loader
2018-04-16 14:09:30 -04:00
Toni de la Fuente
98a1f4bda0
improved error handling on check111
2018-04-11 14:09:55 -04:00
Toni de la Fuente
8f86a5319f
set version label 2.0-beta2
2018-04-11 10:14:34 -04:00
Toni de la Fuente
4c607bba1c
improved current directoy handler for includes
2018-04-11 10:13:43 -04:00
Toni de la Fuente
1b0d09da13
added version variable to banner
2018-04-11 10:01:50 -04:00
Toni de la Fuente
473c9b9ce0
added extra725 to extras and forensics
2018-04-10 16:21:08 -04:00
Toni de la Fuente
25cd2202a7
added check extra725 S3 object-level logging
2018-04-10 16:17:53 -04:00
Toni de la Fuente
168ccffaf4
disable concurrency queries due API limits
2018-04-09 15:55:07 -04:00
Toni de la Fuente
7d510b11b2
disable concurrency checks due API limits
2018-04-09 15:41:55 -04:00
Toni de la Fuente
e3e038127f
license changes for checks
2018-04-09 15:09:30 -04:00
Toni de la Fuente
eaaf51813b
Merge pull request #198 from sidewinder12s/patch-2
...
Update all CIS document links to AWS version.
2018-04-05 00:43:34 -04:00
Geoff Webster
1da206cb90
Update all CIS document links to AWS version.
2018-04-04 21:39:57 -07:00
Toni de la Fuente
cd41766e22
added checkid to every check and group title
2018-03-29 10:36:46 -04:00
Toni de la Fuente
7cde6f15e7
removed some spaces from output
2018-03-28 14:24:37 -04:00
Toni de la Fuente
eaf0a6bf09
added command to save report in S3
2018-03-28 13:58:07 -04:00
Toni de la Fuente
058a8d5b33
changed extra742 to FAIL if not default value
2018-03-28 13:51:32 -04:00
Toni de la Fuente
fa474876e9
changed extra742 to FAIL if not default value
2018-03-28 12:51:13 -04:00
Toni de la Fuente
91b8a832ec
hide banner on csv output for group mode
2018-03-28 12:32:51 -04:00
Toni de la Fuente
9a035b1a94
updated check extra724 INFO instead of FAIL if enabled
2018-03-28 11:12:59 -04:00
Toni de la Fuente
07b166baa9
changed outputs to the new ones
2018-03-28 11:07:46 -04:00
Toni de la Fuente
1acc6e45d0
added check extra724 Certificate Transparency
2018-03-28 10:54:59 -04:00
Toni de la Fuente
db8b5a4d0b
added check extra724 Certificate Transparency
2018-03-28 10:50:56 -04:00
Toni de la Fuente
919c530155
added check extra724 Certificate Transparency
2018-03-28 10:49:39 -04:00
Toni de la Fuente
94e7faa1c1
added check extra724 Certificate Transparency
2018-03-28 10:49:00 -04:00
Toni de la Fuente
f130c899e5
added check extra724 Certificate Transparency
2018-03-28 10:44:36 -04:00
Toni de la Fuente
1c0229e1a3
added new CHECKLIST.md file
2018-03-27 18:43:58 -04:00
Toni de la Fuente
39b597ee47
updated README and usage
2018-03-27 18:11:13 -04:00
Toni de la Fuente
a535e66d06
updated README and usage
2018-03-27 18:09:02 -04:00
Toni de la Fuente
70483ba81b
updated README and usage
2018-03-27 18:07:03 -04:00
Toni de la Fuente
ef9b7cef1a
clean up extras
2018-03-26 23:01:52 -04:00
Toni de la Fuente
2648067ac6
fully functional beta 2.0
2018-03-26 22:54:21 -04:00
Toni de la Fuente
6647702d90
added support of -g groups
2018-03-26 21:32:15 -04:00
Toni de la Fuente
7866d42df9
changed output to PASS and FAIL
2018-03-26 15:40:40 -04:00
Toni de la Fuente
da0f266944
first semi functional v2
2018-03-23 19:26:10 -04:00
Toni de la Fuente
a2806ad86b
populated checks
2018-03-23 10:05:20 -04:00
Toni de la Fuente
a98fdf7679
create check files
2018-03-20 23:08:35 -04:00
Toni de la Fuente
a21bff31a5
create check files
2018-03-20 22:59:34 -04:00
Toni de la Fuente
2f761f62a6
new folder structure
2018-03-20 10:56:37 -04:00
Toni de la Fuente
6a4127dc40
tests v2
2018-03-19 14:55:25 -04:00
Toni de la Fuente
4901561fec
tests v2
2018-03-19 14:54:05 -04:00
Toni de la Fuente
c96e2be257
Merge pull request #192 from toniblyx/master
...
update devel branch
2018-03-19 10:45:40 -04:00
Toni de la Fuente
d806c86e90
Merge pull request #188 from ahhh/patch-1
...
Update prowler output text for extra717
2018-03-06 13:21:47 -05:00
Dan Borges
5156376df6
Update prowler
2018-03-06 09:58:12 -08:00
Toni de la Fuente
e714a20ae3
Merge pull request #187 from rtkjbillo/update_cloudwatch_logs_permissions
...
Update IAM permissions needed for CloudWatch Logs
2018-03-05 16:33:38 -05:00
Jake Billo
c20f8878da
Update IAM permissions needed for CloudWatch Logs
...
According to the AWS documentation for the CloudWatch Logs permissions reference [1], the IAM policy to permit or deny CloudWatch Logs actions uses the `logs:` prefix rather than `cloudwatchlogs:`. This commit updates the policy additions JSON file as well as the README to reflect this change.
I confirmed this having assumed an appropriate role in an AWS account, then executing the AWS CLI command `aws logs describe-log-groups`; with the `cloudwatchlogs:` prefix an AccessDeniedException was returned to the client.
[1] https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/permissions-reference-cwl.html
2018-03-05 16:01:42 -05:00
Toni de la Fuente
6ccd1020e3
Merge pull request #180 from subramani95/patch-4
...
Improving check41 and check42
2018-02-26 23:23:29 -05:00
Toni de la Fuente
fa03991edd
Merge pull request #181 from doshitan/improve-check28
...
Improve check28
2018-02-22 11:38:26 -08:00
Toni de la Fuente
5fdedd082b
Merge pull request #182 from doshitan/better-shebang
...
Use `#!/usr/bin/env bash` instead of hard coding `#!/bin/bash`
2018-02-22 11:26:27 -08:00