Toni de la Fuente
d806c86e90
Merge pull request #188 from ahhh/patch-1
...
Update prowler output text for extra717
2018-03-06 13:21:47 -05:00
Dan Borges
5156376df6
Update prowler
2018-03-06 09:58:12 -08:00
Toni de la Fuente
e714a20ae3
Merge pull request #187 from rtkjbillo/update_cloudwatch_logs_permissions
...
Update IAM permissions needed for CloudWatch Logs
2018-03-05 16:33:38 -05:00
Jake Billo
c20f8878da
Update IAM permissions needed for CloudWatch Logs
...
According to the AWS documentation for the CloudWatch Logs permissions reference [1], the IAM policy to permit or deny CloudWatch Logs actions uses the `logs:` prefix rather than `cloudwatchlogs:`. This commit updates the policy additions JSON file as well as the README to reflect this change.
I confirmed this having assumed an appropriate role in an AWS account, then executing the AWS CLI command `aws logs describe-log-groups`; with the `cloudwatchlogs:` prefix an AccessDeniedException was returned to the client.
[1] https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/permissions-reference-cwl.html
2018-03-05 16:01:42 -05:00
Toni de la Fuente
6ccd1020e3
Merge pull request #180 from subramani95/patch-4
...
Improving check41 and check42
2018-02-26 23:23:29 -05:00
Toni de la Fuente
fa03991edd
Merge pull request #181 from doshitan/improve-check28
...
Improve check28
2018-02-22 11:38:26 -08:00
Toni de la Fuente
5fdedd082b
Merge pull request #182 from doshitan/better-shebang
...
Use `#!/usr/bin/env bash` instead of hard coding `#!/bin/bash`
2018-02-22 11:26:27 -08:00
Tanner Doshier
d7f4f99f15
Improve check28
...
The CIS benchmarks state that only customer managed CMKs should be checked, so
exclude all AWS managed CMKs, not just the one for ACM.
Also fix up some formatting and dead code.
2018-02-22 12:32:36 -06:00
Tanner Doshier
1295c5ecff
Use #!/usr/bin/env bash instead of hard coding #!/bin/bash
...
Better cross-platform support.
2018-02-22 12:16:12 -06:00
Subramani Ramanathan
65c417a357
Improving check41 and check42
...
Improved check41 and check42 to ensure no inbound rule exists that has:-
# port no 22 and source of 0.0.0.0/0
# port no in the range (i.e 0-1024) and source of 0.0.0.0/0
# port value of all and source of 0.0.0.0/0
2018-02-21 02:48:20 +05:30
Toni de la Fuente
111615bff4
Merge pull request #177 from toniblyx/master
...
New checks and improvements
2018-02-16 14:13:00 -05:00
Toni de la Fuente
ec7930146b
New checks and improvements
2018-02-16 12:33:05 -05:00
Toni de la Fuente
282f758fd7
Merge pull request #176 from subramani95/patch-3
...
Fix printing texts when both Ok and Warn are present in 'check31'
2018-02-13 21:35:08 -05:00
Subramani Ramanathan
6b759db0ae
Fix printing texts when both Ok and Warn are present in 'check31'
...
We may have groups in both Ok and Warn; so we have to go through both CHECK31OK and CHECK31WARN one by one.
2018-02-13 21:27:04 +05:30
Toni de la Fuente
9ddf17484a
Merge pull request #17 from Alfresco/master
...
get latest PR from master
2018-02-12 16:19:08 -05:00
Toni de la Fuente
1580c38a06
Merge pull request #174 from subramani95/patch-2
...
Improved 'check31'
2018-02-12 11:32:50 -05:00
Subramani Ramanathan
771cbf6b08
Fix to get CloudWatch Log Group Region
...
Fix to get CloudWatch Log Group Region, when more than one log group names are there
2018-02-12 21:55:55 +05:30
Subramani Ramanathan
f64fac3e17
Improved 'check31'
...
Get the Metric Name using Log Group and Filter names and check the alarms associated with that metric.
2018-02-12 18:43:20 +05:30
Toni de la Fuente
01d13691b3
Merge pull request #173 from toniblyx/master
...
Added new check extra719 route53 query logging
2018-02-09 19:58:52 -05:00
Toni de la Fuente
d101e2b3bf
Added new check extra719 route53 query logging
2018-02-09 19:57:54 -05:00
Toni de la Fuente
e248be83f1
Merge pull request #172 from toniblyx/master
...
Added check extra718 bucket server access logging
2018-02-09 18:19:08 -05:00
Toni de la Fuente
f5ba67da86
Added check extra718 bucket server access logging
2018-02-09 18:15:06 -05:00
Toni de la Fuente
da86408431
Merge pull request #171 from toniblyx/master
...
Fixed extra79 and added extra717
2018-02-09 17:22:43 -05:00
Toni de la Fuente
1281867bd4
Removed redundand info in README
2018-02-09 17:19:48 -05:00
Toni de la Fuente
1cc7c7d3aa
Removed redundand info in README
2018-02-09 17:18:43 -05:00
Toni de la Fuente
cd276ab959
Added new check extra717 ELB logging
2018-02-09 17:17:09 -05:00
Toni de la Fuente
d38e5aa088
Merge pull request #170 from toniblyx/master
...
Added new check extra716 ES service allow open access
2018-02-08 01:22:25 -05:00
Toni de la Fuente
b2264997d6
Added new check extra716 ES service allow open access
2018-02-08 01:21:22 -05:00
Toni de la Fuente
dce78805a8
Merge pull request #169 from toniblyx/master
...
Added new check extra715 ES service logging
Added new check extra716 ES service allow open access
2018-02-08 01:02:20 -05:00
Toni de la Fuente
55d3d642f9
Added new check extra716 ES service allow open access
2018-02-08 01:01:28 -05:00
Toni de la Fuente
841e5436b9
Added new check extra715 ES service logging
2018-02-08 00:27:27 -05:00
Toni de la Fuente
0360db1b64
Merge pull request #168 from toniblyx/master
...
Added check extra714 CloudFront logging
2018-02-07 23:50:31 -05:00
Toni de la Fuente
3665d64f2b
Added check extra714 CloudFront logging
2018-02-07 23:49:26 -05:00
Toni de la Fuente
0b7a17b2b2
Merge pull request #167 from toniblyx/master
...
Improved OSTYPE handling
2018-02-07 22:53:46 -05:00
Toni de la Fuente
b92ba781ba
Fixed mktemp in OSX and OS handlign
2018-02-07 22:52:32 -05:00
Toni de la Fuente
c447e456d0
Fixed mktemp in OSX
2018-02-07 22:48:02 -05:00
Toni de la Fuente
9f977d263d
Fixed mktemp in OSX
2018-02-07 22:47:13 -05:00
Toni de la Fuente
752a07d406
Merge pull request #166 from toniblyx/master
...
New check and fix issue #165
2018-02-07 22:25:24 -05:00
Toni de la Fuente
53580d488c
Fix issue #165
2018-02-07 22:22:51 -05:00
Toni de la Fuente
84591d25a6
New check extra713 for GuardDuty
2018-02-05 23:41:19 -05:00
Toni de la Fuente
d67170b87c
New forensics-ready check group and extra712
2018-02-05 23:11:43 -05:00
Toni de la Fuente
194eecb269
New forensics-ready check group and extra712
2018-02-05 23:07:55 -05:00
Toni de la Fuente
db765e9c55
Fixed typo in README
2018-02-05 22:26:03 -05:00
Toni de la Fuente
dc2c32be54
Merge pull request #164 from toniblyx/master
...
Improved check31 issue #111
2018-02-05 22:04:17 -05:00
Toni de la Fuente
9f01be416a
Improved check31 issue #111
2018-02-05 22:02:53 -05:00
Toni de la Fuente
fbbb1dd904
Merge pull request #16 from Alfresco/master
...
get all changes from main repo
2018-02-05 21:44:11 -05:00
Toni de la Fuente
9b1451aff1
Merge pull request #162 from subramani95/patch-1
...
Update to 'check114'
2018-02-05 21:39:31 -05:00
Subramani Ramanathan
e192a5ef44
Update to 'check114'
...
Updated 'check114' to ensure hardware MFA is enabled for root account by:-
1) Querying for 'SerialNumber' of the Virtual MFA Devices list
2) 'SerialNumber' is ARN for Virtual MFA Device and Device Number for Hardware MFA Device; so did grep for ARN with 'root-account-mfa-device' in the expression
2018-02-05 21:49:15 +05:30
Toni de la Fuente
845ed39b8c
Merge pull request #161 from sidewinder12s/public-redshift-cluster
...
Add check for publicly accessible redshift clusters.
2018-02-02 15:48:01 -05:00
Geoff Webster
64a11a3446
Add check for publicly accessible redshift clusters.
2018-02-02 10:59:45 -08:00
