Toni de la Fuente
5670e4a972
Removed CSV header stdout and add bucket-owner-full-control
2021-07-07 16:00:09 +02:00
Toni de la Fuente
c09385976a
Consolidated titles and outputs including resource ID in ASFF
2021-07-05 20:17:27 +02:00
Toni de la Fuente
3936a7b17a
Changed how color codes are shown in text mode
2021-07-05 20:11:35 +02:00
Geoff
b14ac340bb
Update: Add data to the ASFF
...
Added in the ASFF ProductFields ProwlerResourceName. The resource name is passed into the fining from the third parameter in the Prowler checks
2021-06-16 09:12:17 -05:00
Toni de la Fuente
7dec9f3d52
Merge branch '2.5' into nicer-html
2021-06-14 14:30:04 +02:00
Nick Malcolm
da45af78bc
Disable ordering so that it sticks with the order the HTML was generated
2021-06-14 21:13:19 +12:00
Nick Malcolm
01663e4e0d
Page width improvements. Use the 'link' icon for the link to docs, to cut down on page width. Remove the status column to save width, and also remove redundancy (colour coding and Result column serve the same purpose). Remove the column widths that added to over 100%.
2021-06-14 21:00:40 +12:00
Nick Malcolm
34e27131fd
Refactor the HTML outputs so that they reuse code and are easier to change
2021-06-14 20:46:14 +12:00
Nick Malcolm
89af81ed22
Use DataTable's SearchPanes extension to allow easy filtering by result, severity, region, service, or check.
2021-06-14 20:33:38 +12:00
Nick Malcolm
f5a4e357b9
Consolidate javascript at the bottom of the template. Remove duplicate bootstrap includes - you only need bundle to get Popper (see https://getbootstrap.com/docs/4.0/getting-started/contents/#js-files ) and you don't need both plain bootstrap and bundled bootstrap. Remove dupe jQuery too.
2021-06-14 20:27:16 +12:00
Toni de la Fuente
3f07afd7d4
Added custom file option @yangsec888
...
Added custom file option @yangsec888
2021-06-08 15:46:47 +02:00
Toni de la Fuente
5f1fa558c9
Changes in text output with severity and service name
2021-06-01 09:09:25 +02:00
Sam (Yang) Li
a711b482df
Fix #795 custom file option
2021-05-20 14:49:53 -04:00
Toni de la Fuente
1655bdb902
Added resource id to RDS checks and in json,csv,html outputs
2021-05-18 16:57:37 +02:00
Toni de la Fuente
cf4034c3b4
Improved error handling sts get-caller-identity @pablopagani
...
Improved error handling sts get-caller-identity @pablopagani
2021-05-04 15:43:29 +02:00
Toni de la Fuente
7c65430508
Improved error handling when listing regions @pablopagani
...
Improved error handling when listing regions @pablopagani
2021-05-04 15:39:25 +02:00
Pablo Pagani
5385c4e546
Improved error handling sts get-caller-identity
...
Instead of looking for a fixed error string, it uses error codes from aws cli
Previos condition was not catching this error message:
An error occurred (ExpiredToken) when calling the GetCallerIdentity operation: The security token included in the request is expired
Also forced the output of the command to json. In some tests I was doing was failing becuase it was sending output as text
2021-05-01 17:54:11 -03:00
Toni de la Fuente
49533de21b
Added support for custom output folder and S3 bucket
2021-04-15 23:51:21 +02:00
Toni de la Fuente
721b15d105
Fixed issue #776
2021-04-15 09:30:31 +02:00
Toni de la Fuente
53117819fc
Fixed credentials renew issue #775
2021-04-14 11:47:38 +02:00
Toni de la Fuente
2552f2977d
Fixed issue #775
2021-04-12 21:23:28 +02:00
Toni de la Fuente
e4edc2fa2c
Improved feature to refresh assume role credentials before it expires
2021-04-09 15:13:13 +02:00
Toni de la Fuente
3dfca9c9dd
Improved html output with scoring information
2021-04-08 00:14:24 +02:00
Toni de la Fuente
dacfea6b32
Included Risk, Remediation and Link support for CSV and HTML outputs
2021-04-07 18:42:44 +02:00
Toni de la Fuente
574a9c94b0
Added Risk, Remediation and Link to html report
2021-04-07 18:40:50 +02:00
Toni de la Fuente
c0f3265754
Better handle permissions and errors
2021-03-24 15:41:51 +01:00
C.J
7e6291c51d
Cloudtrail metrics pass if found on any, not every, cloudtrail log
2021-02-09 12:29:43 -05:00
Toni de la Fuente
e6d175d62e
Check for errors generating credential report, limit loop iterations @zfLQ2qx2
...
Check for errors generating credential report, limit loop iterations @zfLQ2qx2
2021-02-02 15:28:32 +01:00
Toni de la Fuente
f9c2e0cf26
Revert PR #718
2021-01-22 16:17:26 +01:00
Toni de la Fuente
6f371744dc
Added AWS service name to json, csv and html outputs
2021-01-22 10:56:59 +01:00
Toni de la Fuente
73cac580f3
Added severity field to CSV and HTML output reports
2021-01-21 22:42:40 +01:00
C.J
be3e771454
Check for errors generating credential report, limit loop iterations
2021-01-14 04:41:16 -05:00
Toni de la Fuente
6cbee3b16c
Fix log metric filter check3x with multiple trails @bridgecrewio
...
Fix log metric filter check3x with multiple trails @bridgecrewio
2021-01-13 23:08:17 +01:00
Toni de la Fuente
a53aeff0e8
Catch errors assuming role and describing regions @zfLQ2qx2
...
Catch errors assuming role and describing regions @zfLQ2qx2
2021-01-13 22:50:11 +01:00
Toni de la Fuente
0d4988b874
Additional check for location of awscli @zfLQ2qx2
...
Additional check for location of awscli @zfLQ2qx2
2021-01-13 21:25:04 +01:00
C.J
1d9c1eaece
Catch errors assuming role and describing regions
2021-01-13 09:44:15 -05:00
C.J
f53a32ae26
Additional check for location of awscli
2021-01-12 11:03:30 -05:00
C.J
bf1bd505c5
Fix for busybox date command
2021-01-12 09:11:52 -05:00
Toni de la Fuente
953bdf3034
Merge branch 'master' into master
2020-12-18 10:24:25 +01:00
Toni de la Fuente
e298158bcd
Enhanced error handling without credentials
2020-12-17 17:15:17 +01:00
Toni de la Fuente
91ce905a5a
Fix issue assuming role in regions with STS disabled
2020-12-17 16:34:10 +01:00
Toni de la Fuente
347872a6de
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
...
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
2020-12-17 15:24:06 +01:00
Toni de la Fuente
5c620949f0
Update os_detector
...
Change above is because epoch time generator in BSD is 1h less than in Linux
2020-12-17 15:20:20 +01:00
Toni de la Fuente
5be38a15d9
Update os_detector bsd_convert_date_to_timestamp
2020-12-17 10:24:25 +01:00
Toni de la Fuente
5e38c61286
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
...
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
2020-12-16 20:04:21 +00:00
Toni de la Fuente
de3e2c3a2b
Added support to run inside AWS CloudShell
2020-12-16 13:41:54 +01:00
Toni de la Fuente
aa0440e426
Revert "Refresh assumed role credentials to avoid role chaining limitations"
2020-12-15 17:37:42 +01:00
Toni de la Fuente
31182059e4
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
...
Refresh assumed role credentials to avoid role chaining limitations @michael-dickinson-sainsburys
2020-12-15 17:29:11 +01:00
Toni de la Fuente
3d62aedf29
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
Michael Dickinson
8ab91e9f8e
fix: Store assumed role expiry time for later checking
2020-11-23 21:05:11 +00:00
