#!/usr/bin/env bash # Prowler - the handy cloud security tool (copyright 2021) by Toni de la Fuente # # Licensed under the Apache License, Version 2.0 (the "License"); you may not # use this file except in compliance with the License. You may obtain a copy # of the License at http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software distributed # under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR # CONDITIONS OF ANY KIND, either express or implied. See the License for the # specific language governing permissions and limitations under the License. if [[ $OUTPUT_BUCKET ]]; then # output mode has to be set to other than text if [[ "${MODES[@]}" =~ "html" ]] || [[ "${MODES[@]}" =~ "csv" ]] || [[ "${MODES[@]}" =~ "json" ]] || [[ "${MODES[@]}" =~ "json-asff" ]]; then OUTPUT_BUCKET_WITHOUT_FOLDERS=$(echo $OUTPUT_BUCKET | awk -F'/' '{ print $1 }') # OUTPUT_BUCKET_STATUS=$($AWSCLI s3api head-bucket --bucket "$OUTPUT_BUCKET" 2>&1 || true) # if [[ -z $OUTPUT_BUCKET_STATUS ]]; then # echo "$OPTRED ERROR!$OPTNORMAL wrong bucket name or not right permissions." # exit 1 # else # need to make sure last / is not set to avoid // in S3 if [[ $OUTPUT_BUCKET != *"/" ]]; then OUTPUT_BUCKET="$OUTPUT_BUCKET" else OUTPUT_BUCKET=${OUTPUT_BUCKET::-1} fi # fi else echo "$OPTRED ERROR!$OPTNORMAL - Mode (-M) has to be set as well. Use -h for help." exit 1 fi fi copyToS3() { # Prowler will copy each format to its own folder in S3, that is for better handling # and processing by Quicksight or others. # Also, check if -F was introduced if [ -n "${OUTPUT_FILE_NAME+x}" ]; then OUTPUT_PATH="${OUTPUT_FILE_NAME}" else OUTPUT_PATH="$OUTPUT_DIR/prowler-output-${ACCOUNT_NUM}-${OUTPUT_DATE}" fi for output_format in "${MODES[@]}"; do case ${output_format} in csv) s3cp "${OUTPUT_PATH}" "${EXTENSION_CSV}" ;; html) s3cp "${OUTPUT_PATH}" "${EXTENSION_HTML}" ;; json) s3cp "${OUTPUT_PATH}" "${EXTENSION_JSON}" ;; json-asff) s3cp "${OUTPUT_PATH}" "${EXTENSION_ASFF}" ;; *) echo "$OPTRED ERROR!$OPTNORMAL - Invalid output format copying to S3. Use -h for help." exit 1 ;; esac done } s3cp(){ OUTPUT_PATH="${1}" EXTENSION="${2}" "${AWSCLI}" ${PROFILE_OPT} s3 cp "${OUTPUT_PATH}.${EXTENSION}" s3://"${OUTPUT_BUCKET}"/${EXTENSION}/ --acl bucket-owner-full-control }