Sergio Garcia
8c8763a620
feat(CIS checks): Complete CIS checks ( #1461 )
...
Co-authored-by: sergargar <sergio@verica.io >
Co-authored-by: Nacho Rivera <59198746+n4ch04@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-11-14 17:50:26 +01:00
Pepe Fagoaga
6497f7bfe8
fix(codebuild_project_user_controlled_buildspec): regex ( #1474 )
2022-11-14 17:35:23 +01:00
Pepe Fagoaga
9b035230ac
feat(CodeArtifact): Service and checks ( #1473 )
2022-11-14 16:28:00 +01:00
Pepe Fagoaga
9d3bff9e54
fix: Linter issues ( #1471 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2022-11-14 16:21:51 +01:00
Nacho Rivera
3b86b3ac77
feat(codebuild): codebuild service and checks ( #1467 )
2022-11-14 15:09:56 +01:00
Nacho Rivera
c87327bb77
feat(EFS): Service and checks ( #1469 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
Co-authored-by: sergargar <sergio@verica.io >
2022-11-14 15:05:41 +01:00
Sergio Garcia
b187bf12c2
feat(CloudWatch): add CloudWatch service and checks ( #1456 )
...
Co-authored-by: sergargar <sergio@verica.io >
Co-authored-by: Nacho Rivera <59198746+n4ch04@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-11-10 13:29:46 +01:00
Sergio Garcia
19ab29628f
feat(S3): add S3 service and checks ( #1450 )
...
Co-authored-by: sergargar <sergio@verica.io >
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-11-08 18:06:06 +01:00
Pepe Fagoaga
69d3a9e363
feat(cloudformation): Service and Checks ( #1454 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2022-11-07 16:17:38 +01:00
Pepe Fagoaga
f5873fe0d7
feat(appstream): Service and Checks ( #1452 )
2022-11-07 16:16:58 +01:00
Nacho Rivera
4762e1cc4c
feat(test): Remaining IAM tests ( #1451 )
2022-11-04 13:38:22 +01:00
Nacho Rivera
8ae989cce8
feat(cloudtrail): cloudtrail service and checks ( #1449 )
...
Co-authored-by: sergargar <sergio@verica.io >
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2022-11-03 15:39:41 +01:00
Sergio Garcia
c6adf3a6d8
feat(account): Aaccount service and manual checks ( #1446 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-11-02 11:36:57 +01:00
Sergio Garcia
3e749dd652
feat(config): add config service and checks and check43 ( #1441 )
...
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-10-31 14:37:59 +01:00
Sergio Garcia
adf04ba632
feat(apigateway): Service and checks for APIGW v1 and v2 ( #1415 )
2022-10-31 14:13:11 +01:00
Sergio Garcia
f7842fdcdd
feat(kms): add service, checks and tests ( #1439 )
2022-10-28 12:30:34 +02:00
Sergio Garcia
b2976984d3
feat(vpc): add service, checks and tests ( #1432 )
2022-10-28 12:15:15 +02:00
Sergio Garcia
7e1b0d13c7
feat(autoscaling): Add AutoScaling service, check and test ( #1426 )
2022-10-28 09:33:29 +02:00
Pepe Fagoaga
8487777f96
fix(typo): FPT -> FTP ( #1431 )
2022-10-26 08:57:45 +02:00
Sergio Garcia
bd6eb723dd
feat(ACM): Add check and service for ACM ( #1365 )
2022-10-20 17:17:12 +02:00
Sergio Garcia
5c78e6b171
feat(line_no): Add line number to errors ( #1422 )
2022-10-20 14:32:35 +02:00
Nacho Rivera
44ce00d6e9
fix(iam_user_two_active_access_key_test): fix tests ( #1418 )
2022-10-20 08:34:28 +02:00
Nacho Rivera
df0925394b
feat(extra7100): Migrate check extra7100 -> iam_no_custom_policy_permissive_role_assumption ( #1417 )
2022-10-20 08:10:54 +02:00
Sergio Garcia
5b5b0b0405
feat(securityhub_check): Add check and service for SecurityHub ( #1360 )
...
Co-authored-by: Toni de la Fuente <toni@blyx.com >
Co-authored-by: sergargar <sergio@verica.io >
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-10-19 15:21:07 +02:00
Nacho Rivera
d09020d144
feat(iam): Add IAM checks ( #1407 )
...
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-10-19 09:51:25 +02:00
Nacho Rivera
e2a8fa8738
feat(iam_check_saml_providers_sts): Check and test ( #1413 )
2022-10-18 13:23:50 +02:00
Toni de la Fuente
1119ee54af
feat(accessanalyzer): Check accessanalyzer_enabled_without_findings ( #1359 )
...
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
2022-10-18 12:26:42 +02:00
Nacho Rivera
2b59068e50
feat(password_policy_checks): Include password policy checks ( #1364 )
2022-10-18 10:15:15 +02:00
Sergio Garcia
107070e6e2
feat(shodan_integration): add ec2_elastic_ip_shodan check and config yaml ( #1356 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-10-05 13:48:34 +02:00
Pepe Fagoaga
7388cb33d4
test(iam_user_two_active_access_key_test): Create unit tests ( #1354 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-09-01 13:35:00 +02:00
Sergio Garcia
eb914d03ce
feat(services_testing): Add tests for EC2, IAM and S3 services ( #1352 )
...
Co-authored-by: Pepe Fagoaga <pepe@verica.io >
Co-authored-by: sergargar <sergio@verica.io >
2022-08-31 13:40:28 +02:00
StylusFrost
e087f2e1b6
fix(check_network_acl): check with all rules together ( #1350 )
2022-08-30 13:58:50 +01:00
Sergio Garcia
65185943ca
feat(shub_compatibility): send finding to filter regions and change checkType to list ( #1341 )
2022-08-26 11:24:12 +01:00
Pepe Fagoaga
c7a43b09ce
chore: Move shared to lib/ for AWS ( #1321 )
...
* chore: Move shared to lib/
* chore: Move shared to lib/ for AWS
Co-authored-by: Sergio Garcia <38561120+sergargar@users.noreply.github.com >
2022-08-22 10:41:09 +01:00
Sergio Garcia
d18b430c16
feat(new_checks): add check for ec2 and iam ( #1337 )
...
* fix(key_error): remove KeyError.
* feat(ftp_check): add ec2_securitygroup_allow_ingress_from_internet_to_tcp_ftp_port_20_21 check.
* feat(password_check): iam_password_policy_expires_passwords_within_15_days_or_less added.
* change days to 90
Co-authored-by: sergargar <sergio@verica.io >
2022-08-22 10:33:43 +02:00
Sergio Garcia
9b4415f7b3
fix(s3_regions): verify if there are filter regions ( #1338 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-08-22 10:30:26 +02:00
Sergio Garcia
92024e2b0e
feat(iam_password_policy): add password policy class. ( #1330 )
...
Co-authored-by: sergargar <sergio@verica.io >
2022-08-09 09:08:00 -07:00
Sergio Garcia
b229c01450
fix(key_error): remove KeyError. ( #1326 )
2022-08-08 22:26:50 +02:00
Pepe Fagoaga
f30245bb15
fix(nacls): Handle IPv6 source ingress ( #1319 )
2022-08-04 16:33:16 +02:00
Sergio Garcia
a796545da5
feat(regions): add regions to resources ( #1285 )
2022-08-04 13:35:13 +02:00
Pepe Fagoaga
6e58991986
fix(time_comparison): Correct time formats ( #1317 )
2022-08-04 11:41:54 +02:00
Pepe Fagoaga
85a6634a56
feat(check): iam-policy-allows-privilege-escalation ( #1315 )
...
* feat(check): iam-policy-allows-privilege-escalation
* feat(metadata): Enrich check metadata
Co-authored-by: Toni de la Fuente <toni@blyx.com >
Co-authored-by: Toni de la Fuente <toni@blyx.com >
2022-08-04 11:26:42 +02:00
Pepe Fagoaga
5541ec0763
fix(ec2_instance_public_ip): format resource_id ( #1316 )
2022-08-04 11:22:50 +02:00
Pepe Fagoaga
cbd375f5d0
fix(iam): Set user's region in findings ( #1312 )
2022-08-04 10:04:00 +02:00
Pepe Fagoaga
de96894a4d
feat(metadata): Include EC2 subservices ( #1311 )
2022-08-03 17:29:43 +02:00
Pepe Fagoaga
0c2ed53c54
refactor(security_groups): general function ( #1306 )
2022-08-03 16:38:29 +02:00
Pepe Fagoaga
6f0d42a881
fix: Sort checks ( #1302 )
...
* fix: sort checks
* fix(metadata): Include missing provider
2022-08-03 12:14:23 +02:00
Pepe Fagoaga
5e479a5050
Prwlr 750 exclude metadata json order ( #1301 )
...
* chore: exclude metadata
* chore: exclude metadata
* chore: no prettify
* chore: no prettify
2022-08-03 12:07:36 +02:00
Pepe Fagoaga
dfbc618d44
chore(metadata): Remove CheckName and CheckAlias field ( #1299 )
2022-08-03 10:12:34 +02:00
Sergio Garcia
66d2b7b4d9
feat(ec2_checks): add several checks for ec2 ( #1268 )
...
* feat(checks): add extra718
* feat(checks): add extra763
* feat(checks): add extra748, extra749, extra72
* feat(checks): add extra750
* feat(checks): add check45
* feat(checks): add check46, check45, check42, check41
* feat(metadata_sample): add sample of check metadata
* feat(pci-group): add pci group.
* feat(cloud9): environment setup.
* fix(protocol): add protocol conditions
Co-authored-by: sergargar <sergio@verica.io >
2022-07-27 00:21:40 +02:00