Nacho Rivera
|
7e44116d51
|
fix(is_valid_arn): include . into resource name (#2789)
|
2023-08-30 16:11:46 +02:00 |
|
Nacho Rivera
|
46f85e6395
|
fix(ec2 tests): add tags and region non sg checks (#2781)
|
2023-08-30 16:10:27 +02:00 |
|
Nacho Rivera
|
276f6f9fb1
|
fix(ec2_securitygroup_default_restrict_traffic): fix check only allow empty rules (#2777)
|
2023-08-25 12:42:26 +02:00 |
|
Pepe Fagoaga
|
21c52db66b
|
test(vpc_endpoint_services_allowed_principals_trust_boundaries) (#2768)
|
2023-08-25 10:56:47 +02:00 |
|
Pepe Fagoaga
|
13cfa02f80
|
fix(test): Update moto to 4.1.15 and update tests (#2769)
|
2023-08-25 10:56:39 +02:00 |
|
Pepe Fagoaga
|
eedfbe3e7a
|
fix(iam_policy_allows_privilege_escalation): Not use search for checking API actions (#2772)
|
2023-08-25 10:56:28 +02:00 |
|
Pepe Fagoaga
|
cb76e5a23c
|
chore(s3): Move lib to the AWS provider and include tests (#2664)
|
2023-08-23 16:12:48 +02:00 |
|
Pepe Fagoaga
|
06a0b12efb
|
fix(iam_policy_allows_privilege_escalation): Handle admin permission so * (#2763)
|
2023-08-23 10:40:06 +02:00 |
|
Pepe Fagoaga
|
d5bd5ebb7d
|
chore(parser): Move provider logic to their folder (#2746)
|
2023-08-23 10:33:36 +02:00 |
|
Nacho Rivera
|
0a9a1c26db
|
fix(get_regions_from_audit_resources): fix logic and add tests (#2766)
|
2023-08-23 10:20:12 +02:00 |
|
Nacho Rivera
|
83bfd8a2d4
|
fix(get_checks_from_input_arn): fix logic and add tests (#2764)
|
2023-08-23 09:35:42 +02:00 |
|
gerardocampo
|
e5d2c0c700
|
feat(iam): Check inline policies in IAM Users, Groups & Roles for admin priv's (#2750)
Co-authored-by: Gerard Ocampo <gerard.ocampo@zelis.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-08-23 08:29:13 +02:00 |
|
Pepe Fagoaga
|
590a5669d6
|
fix(nacls): Tests (#2760)
|
2023-08-22 22:26:19 +02:00 |
|
Geoff Singer
|
cb2ef23a29
|
feat(s3): Add S3 KMS encryption check (#2757)
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-08-22 08:28:17 +02:00 |
|
Chris Farris
|
d186c69473
|
feat(checks): dump all checks as a json file (#2683)
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-08-21 17:35:31 +02:00 |
|
Nacho Rivera
|
4d817c48a8
|
fix(get_checks_from_input_arn): fix function and add tests (#2749)
|
2023-08-21 13:23:43 +02:00 |
|
Pepe Fagoaga
|
7c45cb45ae
|
feat(ecr_repositories_scan_vulnerabilities_in_latest_image): Minimum severity is configurable (#2736)
|
2023-08-18 09:17:02 +02:00 |
|
Pepe Fagoaga
|
ac11c6729b
|
chore(tests): Replace sure with standard assert (#2738)
|
2023-08-17 11:36:45 +02:00 |
|
Pepe Fagoaga
|
bc5a7a961b
|
tests(check_security_group) (#2740)
|
2023-08-17 11:36:17 +02:00 |
|
vysakh-devopspace
|
54a9f412e8
|
feat(ec2): New check ec2_instance_detailed_monitoring_enabled (#2735)
Co-authored-by: Vysakh <venugopal.vysakh@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-08-16 14:31:06 +02:00 |
|
Pepe Fagoaga
|
8f091e7548
|
fix(gcp): Status extended ends with a dot (#2734)
|
2023-08-16 10:14:41 +02:00 |
|
Pepe Fagoaga
|
8cdc7b18c7
|
fix(test-vpc): use the right import paths (#2732)
|
2023-08-16 09:17:18 +02:00 |
|
christiandavilakoobin
|
9f2e87e9fb
|
fix(is_account_only_allowed_in_condition): Context name on conditions are case-insensitive (#2726)
|
2023-08-16 08:27:24 +02:00 |
|
Pepe Fagoaga
|
465e64b9ac
|
fix(azure): Status extended ends with a dot (#2725)
|
2023-08-14 21:48:16 +02:00 |
|
Pepe Fagoaga
|
fc53b28997
|
test(s3): Mock S3Control when used (#2722)
|
2023-08-14 21:48:05 +02:00 |
|
Pepe Fagoaga
|
54137be92b
|
test(python): 3.9, 3.10, 3.11 (#2718)
|
2023-08-14 21:08:29 +02:00 |
|
Pepe Fagoaga
|
4454d9115e
|
chore(aws): 2nd round - Improve tests and include dot in status extended (#2714)
|
2023-08-12 01:41:35 +02:00 |
|
Pepe Fagoaga
|
0313dba7b4
|
chore(aws): Improve tests and status from accessanalyzer to cloudwatch (#2711)
|
2023-08-11 11:04:04 +02:00 |
|
christiandavilakoobin
|
ade511df28
|
fix(sns): allow default SNS policy with SourceOwner (#2698)
Co-authored-by: Azure Pipeplines CI <monitor@koobin.com>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
|
2023-08-10 12:13:57 +02:00 |
|
Pepe Fagoaga
|
f4308032c3
|
fix(cloudfront): fix ViewerProtocolPolicy and GeoRestrictionType (#2701)
|
2023-08-10 12:02:49 +02:00 |
|
Pepe Fagoaga
|
d41b0332ac
|
feat(athena): New AWS Athena service + 2 workgroup checks (#2696)
|
2023-08-10 10:23:17 +02:00 |
|
Sergio Garcia
|
36e095c830
|
fix(iam_role_cross_service_confused_deputy_prevention): add ResourceAccount and PrincipalAccount conditions (#2689)
|
2023-08-09 10:41:48 +02:00 |
|
Pepe Fagoaga
|
13059e0568
|
fix(ec2-securitygroups): Handle IPv6 public (#2690)
|
2023-08-09 10:08:30 +02:00 |
|
Pepe Fagoaga
|
9e8023d716
|
fix(config): Pass a configuration file using --config-file config.yaml (#2679)
|
2023-08-09 09:52:45 +02:00 |
|
Pepe Fagoaga
|
1797b54259
|
test(azure): Storage Service (#2672)
|
2023-08-03 15:07:17 +02:00 |
|
Pepe Fagoaga
|
f289c8fb2e
|
test(azure): SQL Server Service (#2671)
|
2023-08-03 14:43:18 +02:00 |
|
Pepe Fagoaga
|
e4ad881a69
|
test(azure): IAM service (#2670)
|
2023-08-03 14:15:34 +02:00 |
|
Pepe Fagoaga
|
138bca38e7
|
test(azure): Defender service (#2669)
|
2023-08-03 13:52:55 +02:00 |
|
edurra
|
44f7af3580
|
feat(azure): add Azure SQL Server service and 3 checks (#2665)
Co-authored-by: Pepe Fagoaga <pepe@verica.io>
Co-authored-by: Sergio Garcia <sergargar1@gmail.com>
|
2023-08-03 11:29:17 +02:00 |
|
Pepe Fagoaga
|
efa75a62e3
|
fix(iam_policy_allows_privilege_escalation): Handle permissions in groups (#2655)
|
2023-08-03 10:40:51 +02:00 |
|
Pepe Fagoaga
|
5763bca317
|
refactor(vpc_endpoint_connections_trust_boundaries) (#2667)
|
2023-08-03 09:56:09 +02:00 |
|
Pepe Fagoaga
|
c335334402
|
fix(test_only_aws_service_linked_roles): Flaky test (#2666)
|
2023-08-03 09:18:06 +02:00 |
|
Pepe Fagoaga
|
5bf3f70717
|
fix(vpc_endpoint_connections_trust_boundaries): Handle AWS Account ID as Principal (#2611)
|
2023-08-03 09:16:58 +02:00 |
|
Sergio Garcia
|
aced44f051
|
fix(sns): handle topic policy conditions (#2660)
|
2023-08-02 11:45:27 +02:00 |
|
Pepe Fagoaga
|
02f432238e
|
fix(outputs): Not use reserved keyword list as variable (#2657)
|
2023-08-02 09:00:04 +02:00 |
|
Sergio Garcia
|
864d178e01
|
chore(regions_update): Changes in regions for AWS services. (#2654)
Co-authored-by: sergargar <sergargar@users.noreply.github.com>
|
2023-08-01 11:52:02 +02:00 |
|
Sergio Garcia
|
78f0b823a9
|
fix(s3_bucket_level_public_access_block): check s3 public access block at account level (#2653)
|
2023-08-01 11:24:58 +02:00 |
|
Pepe Fagoaga
|
7bdca0420e
|
fix(cloudtrail): Set status to INFO when trail is outside the audited account (#2643)
|
2023-07-31 17:50:21 +02:00 |
|
Pepe Fagoaga
|
b4e78d28f8
|
fix(test): mock VPC client (#2640)
|
2023-07-31 11:19:15 +02:00 |
|
Pepe Fagoaga
|
e3d4e38a59
|
feat(aws): New AWSService class as parent (#2638)
|
2023-07-31 11:18:54 +02:00 |
|