mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
110 lines
4.3 KiB
Python
110 lines
4.3 KiB
Python
import threading
|
|
|
|
from pydantic import BaseModel
|
|
|
|
from lib.logger import logger
|
|
from providers.aws.aws_provider import generate_regional_clients
|
|
|
|
|
|
################################ Redshift
|
|
class Redshift:
|
|
def __init__(self, audit_info):
|
|
self.service = "redshift"
|
|
self.session = audit_info.audit_session
|
|
self.regional_clients = generate_regional_clients(self.service, audit_info)
|
|
self.clusters = []
|
|
self.__threading_call__(self.__describe_clusters__)
|
|
self.__describe_logging_status__(self.regional_clients)
|
|
self.__describe_cluster_snapshots__(self.regional_clients)
|
|
|
|
def __get_session__(self):
|
|
return self.session
|
|
|
|
def __threading_call__(self, call):
|
|
threads = []
|
|
for regional_client in self.regional_clients.values():
|
|
threads.append(threading.Thread(target=call, args=(regional_client,)))
|
|
for t in threads:
|
|
t.start()
|
|
for t in threads:
|
|
t.join()
|
|
|
|
def __describe_clusters__(self, regional_client):
|
|
logger.info("Redshift - describing clusters...")
|
|
try:
|
|
list_clusters_paginator = regional_client.get_paginator("describe_clusters")
|
|
for page in list_clusters_paginator.paginate():
|
|
for cluster in page["Clusters"]:
|
|
cluster_to_append = Cluster(
|
|
id=cluster["ClusterIdentifier"],
|
|
region=regional_client.region,
|
|
)
|
|
if (
|
|
"PubliclyAccessible" in cluster
|
|
and cluster["PubliclyAccessible"]
|
|
):
|
|
cluster_to_append.public_access = True
|
|
if "Endpoint" in cluster and "Address" in cluster["Endpoint"]:
|
|
cluster_to_append.endpoint_address = cluster["Endpoint"][
|
|
"Address"
|
|
]
|
|
if (
|
|
"AllowVersionUpgrade" in cluster
|
|
and cluster["AllowVersionUpgrade"]
|
|
):
|
|
cluster_to_append.allow_version_upgrade = True
|
|
self.clusters.append(cluster_to_append)
|
|
except Exception as error:
|
|
logger.error(
|
|
f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
|
|
)
|
|
|
|
def __describe_logging_status__(self, regional_clients):
|
|
logger.info("Redshift - describing logging status...")
|
|
try:
|
|
for cluster in self.clusters:
|
|
regional_client = regional_clients[cluster.region]
|
|
cluster_attributes = regional_client.describe_logging_status(
|
|
ClusterIdentifier=cluster.id
|
|
)
|
|
if (
|
|
"LoggingEnabled" in cluster_attributes
|
|
and cluster_attributes["LoggingEnabled"]
|
|
):
|
|
cluster.logging_enabled = True
|
|
if "BucketName" in cluster_attributes:
|
|
cluster.bucket = cluster_attributes["BucketName"]
|
|
|
|
except Exception as error:
|
|
logger.error(
|
|
f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
|
|
)
|
|
|
|
def __describe_cluster_snapshots__(self, regional_clients):
|
|
logger.info("Redshift - describing logging status...")
|
|
try:
|
|
for cluster in self.clusters:
|
|
regional_client = regional_clients[cluster.region]
|
|
cluster_snapshots = regional_client.describe_cluster_snapshots(
|
|
ClusterIdentifier=cluster.id
|
|
)
|
|
if "Snapshots" in cluster_snapshots and cluster_snapshots["Snapshots"]:
|
|
cluster.cluster_snapshots = True
|
|
|
|
except Exception as error:
|
|
logger.error(
|
|
f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
|
|
)
|
|
|
|
|
|
class Cluster(BaseModel):
|
|
id: str
|
|
arn: str = ""
|
|
region: str
|
|
public_access: bool = None
|
|
endpoint_address: str = None
|
|
allow_version_upgrade: bool = None
|
|
logging_enabled: bool = None
|
|
bucket: str = None
|
|
cluster_snapshots: bool = None
|