Commit Graph

185 Commits

Author SHA1 Message Date
Toni de la Fuente
955cde08fd Improved extra73 (s3 bucket permissions)
Now extra73 checks for S3 policies that have Allow for Principal as *.
2017-07-21 00:13:11 -04:00
Toni de la Fuente
ed2448dbe0 Fixed bug in extra73 for buckets in EU (eu-west-1) 2017-07-19 13:33:03 -04:00
Toni de la Fuente
9f8941b76f updated check 7.3 2017-07-19 10:58:39 -04:00
Toni de la Fuente
7eeee0e777 Improved extra73 to check also Authenticated users
Ensure there are no S3 buckets open to the Everyone or Any AWS user (Not Scored) (Not part of CIS benchmark)
2017-07-19 10:57:05 -04:00
Toni de la Fuente
5723bcb1a4 Update README.md 2017-07-18 13:00:46 -04:00
Toni de la Fuente
f949d2f588 Add TOC and section about extras 2017-07-18 12:32:16 -04:00
Toni de la Fuente
2faa50c4de fixed typo in TITTLE73 2017-07-18 11:47:56 -04:00
Toni de la Fuente
ae274b2fc9 Added check73 S3 buckets open to the AllUsers 2017-07-18 11:45:52 -04:00
Toni de la Fuente
255b6f4ccb Added extra check72
7.2  Ensure there are no EBS Snapshots set as Public (Not Scored) (Not part of CIS benchmark)
2017-07-18 09:15:31 -04:00
Toni de la Fuente
7e3b1bd3ca Merge pull request #7 from Alfresco/master
get changes
2017-07-17 23:10:35 -04:00
Toni de la Fuente
93d5d7295f Merge pull request #73 from MrSecure/extra71-admins
add extra check - look for admins w/o MFA
2017-07-17 23:08:45 -04:00
Toni de la Fuente
435d2ed6fc Merge pull request #72 from MrSecure/check315-fixes
update check315
2017-07-17 22:55:01 -04:00
Ben Allen
bb1cb1e081 add extra71 check 2017-07-17 21:43:43 -05:00
Ben Allen
1527e438a1 update check315 to provide more consistent display of topics & subscriptiongs 2017-07-17 21:42:18 -05:00
Toni de la Fuente
c2b5ed17c2 Merge pull request #71 from toniblyx/master
fixed issue with check 3.15 issue #70
2017-07-17 22:28:02 -04:00
Toni de la Fuente
c2540b2828 fixed issue with check 3.15 2017-07-17 22:27:12 -04:00
Toni de la Fuente
fe4dfdb368 Merge pull request #68 from toniblyx/master
Added checks based on CIS profile definitions, issue #64
2017-07-17 21:21:54 -04:00
Toni de la Fuente
39f1411f30 added info about profile definitions 2017-07-17 21:20:05 -04:00
Toni de la Fuente
ebf80a6455 Added CIS profile definitions checks
level1 and level2 profile definition checks enabled see https://github.com/Alfresco/prowler/issues/64
2017-07-17 21:14:46 -04:00
Toni de la Fuente
ebeb747686 Merge pull request #67 from toniblyx/master
issue #65
2017-07-17 20:50:40 -04:00
Toni de la Fuente
e3400b05ba fixed issue #65
added --output json to those places needed to override different default configuration
2017-07-17 20:49:19 -04:00
Toni de la Fuente
90b24ef734 Merge pull request #6 from Alfresco/master
get latest updates
2017-07-13 09:58:07 -04:00
Toni de la Fuente
2de0b5e6b0 Merge pull request #62 from MrSecure/keep-cred-report
Keep cred report
2017-07-12 11:57:21 -04:00
Ben Allen
2ddf31ca22 Merge in tweaks to keep the credential report, when requested, and fix a notice 2017-07-12 10:34:55 -05:00
Ben Allen
b8d2d1cd4b Merge branch 'policy_requirements' into all-updates 2017-07-12 10:32:06 -05:00
Toni de la Fuente
fb420d13cc Merge pull request #61 from MrSecure/policy_requirements
Policy requirements
2017-07-12 11:24:18 -04:00
Toni de la Fuente
55ed1273d9 Merge pull request #60 from MrSecure/fail-early
Fail early
2017-07-12 11:15:35 -04:00
Ben Allen
edceb17b71 Merge branch 'fail-early' into all-updates 2017-07-12 10:13:07 -05:00
Ben Allen
a1e3c09fad Merge branch 'fail-early' into all-updates 2017-07-12 10:06:39 -05:00
Ben Allen
118da69eb5 add headings for incremental policy and bootstrap script 2017-07-11 16:34:25 -05:00
Ben Allen
02a4ab665f fix policy document syntax error in README 2017-07-11 16:34:25 -05:00
Ben Allen
c8a2e16a1c add note about saving the key material 2017-07-11 16:34:25 -05:00
Ben Allen
ca012ebf76 fix policy document syntax error 2017-07-11 16:34:25 -05:00
Ben Allen
1cbedb1eb6 add incremental policy file; update readme to show use case 2017-07-11 16:34:25 -05:00
Ben Allen
30c3a8aa76 correct typo in permission name 2017-07-11 16:34:25 -05:00
Ben Allen
68f8e08506 add option (-k) to keep the credential report after execution. 2017-07-11 16:24:42 -05:00
Ben Allen
866fe11610 fix typo in function name 2017-07-11 16:23:50 -05:00
Ben Allen
f787c57636 improve trap handling 2017-07-11 16:04:27 -05:00
Ben Allen
93b815ecf2 gather count of topics per region, even when unable to list subscribers. 2017-07-11 15:58:50 -05:00
Ben Allen
fe99890683 swallow error message for list-subscriptions-by-topic 2017-07-11 15:58:42 -05:00
Ben Allen
9ef23aecca handle permission failure on list-subscriptions-by-topic gracefully 2017-07-11 15:58:34 -05:00
Ben Allen
043fa32aef exit script if there are problems with the credentials. 2017-07-11 15:58:21 -05:00
Ben Allen
5bdd5d8e54 add account number to CSV output. 2017-07-11 15:57:33 -05:00
Ben Allen
df47f94cf9 change name of temp file so that it's random
Allows multiple instances of prowler to run in parallel (eg. via xargs
-P ).
Also, add trap handler to remove temp file if interrupted.
2017-07-11 15:57:33 -05:00
Ben Allen
7b6f168d8c update output for check 1.22 to handle multiple users 2017-07-11 15:57:16 -05:00
Ben Allen
cf9a73d539 gather count of topics per region, even when unable to list subscribers. 2017-07-11 15:52:21 -05:00
Toni de la Fuente
ae6ebfcafd Merge pull request #59 from toniblyx/master
Updated README with shortlist of features and parallel command
2017-07-11 16:51:59 -04:00
Toni de la Fuente
52f88abd33 Update README.md
Added short list of features and parallel command from @MrSecure
2017-07-11 16:50:55 -04:00
Ben Allen
95a4b56575 swallow error message for list-subscriptions-by-topic 2017-07-11 15:47:06 -05:00
Toni de la Fuente
1625bbcf19 Merge pull request #5 from Alfresco/master
get all new changes
2017-07-11 16:39:25 -04:00