ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-11 07:15:15 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
20b8b1eb1f8d2c83ae075bab267e377a7d8207fb
prowler/checks
History
Barrie Bremner 75e5de9c37 Accept current most restrictive TLSv1.2-only ALB security policy as secure 
The `ELBSecurityPolicy-FS-1-2-Res-2020-10` policy is the most
restrictive TLS v1.2 only SSL/TLS security policy available, and is a
subset of the already accepted `ELBSecurityPolicy-FS-1-2-Res-2019-08`
policy - this commit adds `ELBSecurityPolicy-FS-1-2-Res-2020-10` to
the list of acceptable "secure" security policies.

`ELBSecurityPolicy-FS-1-2-Res-2020-10` has a very limited set of
ciphers, is TLS v1.2 only and supports Forward Secrecy.

Current SSL Labs tests gives it an "A" rating for another source of
confirmation.
2020-12-24 16:52:01 +00:00
..
check11
severity+security_hub
2020-09-03 08:04:13 +02:00
check12
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check13
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check14
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check15
fix(severity): missing check
2020-09-03 08:23:17 +02:00
check16
severity+security_hub
2020-09-03 08:04:13 +02:00
check17
severity+security_hub
2020-09-03 08:04:13 +02:00
check18
severity+security_hub
2020-09-03 08:04:13 +02:00
check19
severity+security_hub
2020-09-03 08:04:13 +02:00
check21
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check22
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check23
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check24
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check25
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check26
severity+security_hub
2020-09-03 08:04:13 +02:00
check27
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check28
severity+security_hub
2020-09-03 08:04:13 +02:00
check29
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check31
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check32
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check33
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check34
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check35
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check36
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check37
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check38
severity+security_hub
2020-09-03 08:04:13 +02:00
check39
severity+security_hub
2020-09-03 08:04:13 +02:00
check41
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check42
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check43
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check44
severity+security_hub
2020-09-03 08:04:13 +02:00
check110
severity+security_hub
2020-09-03 08:04:13 +02:00
check111
severity+security_hub
2020-09-03 08:04:13 +02:00
check112
severity+security_hub
2020-09-03 08:04:13 +02:00
check113
severity+security_hub
2020-09-03 08:04:13 +02:00
check114
severity+security_hub
2020-09-03 08:04:13 +02:00
check115
severity+security_hub
2020-09-03 08:04:13 +02:00
check116
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check117
severity+security_hub
2020-09-03 08:04:13 +02:00
check118
severity+security_hub
2020-09-03 08:04:13 +02:00
check119
adapt check119 to exclude instances shutting down
2020-11-18 13:25:28 +01:00
check120
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check121
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check122
severity+security_hub
2020-09-03 08:04:13 +02:00
check310
severity+security_hub
2020-09-03 08:04:13 +02:00
check311
severity+security_hub
2020-09-03 08:04:13 +02:00
check312
severity+security_hub
2020-09-03 08:04:13 +02:00
check313
severity+security_hub
2020-09-03 08:04:13 +02:00
check314
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra71
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra72
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra73
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra74
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra75
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra76
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra77
Fix error handling for SubscriptionRequiredException in extra77
2020-12-17 16:52:18 +01:00
check_extra78
Fix check for public rds instances
2020-10-26 11:39:37 -07:00
check_extra79
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra710
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra711
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra712
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra713
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra714
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra715
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra716
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra717
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra718
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra719
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra720
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra721
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra722
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra723
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra724
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra725
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra726
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra727
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra728
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra729
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra730
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra731
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra732
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra733
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra734
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra735
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra736
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra737
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra738
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra739
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra740
reworked check740 to consider all snapshots, use JMESPath query, and to limit its output according to max-items
2020-12-10 09:27:43 -05:00
check_extra741
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra742
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra743
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra744
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra745
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra746
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra747
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra748
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra749
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra750
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra751
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra752
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra753
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra754
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra755
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra756
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra757
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra758
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra759
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra760
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra761
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra762
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra763
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra764
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra765
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra767
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra768
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra769
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra770
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra771
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra772
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra773
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra774
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra775
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra776
Fix issue in extra776 when ECR Scanning imageDigest @adamcanzuk
2020-12-14 12:59:19 +01:00
check_extra777
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra778
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra779
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra780
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra781
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra782
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra783
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra784
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra785
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra786
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra787
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra788
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra789
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra790
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra791
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra792
Accept current most restrictive TLSv1.2-only ALB security policy as secure
2020-12-24 16:52:01 +00:00
check_extra793
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra794
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra795
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra796
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra797
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra798
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra799
severity+security_hub
2020-09-03 08:04:13 +02:00
check_extra7100
New RC6 including ENS as a new compliance type all formats
2020-12-01 10:03:59 +01:00
check_extra7101
Added new check [extra7101] Check if Amazon Elasticsearch Service (ES) domains have audit logging enabled
2020-09-18 18:44:01 +02:00
check_extra7102
Add sleep to extra7102 to avoid Shodan API limits
2020-12-17 15:27:00 +01:00
check_extra7103
Fix extra7103 parser error
2020-11-03 13:44:24 +01:00
check_extra7104
New group for Sagemaker with 10 new controls
2020-10-06 16:40:19 +02:00
check_extra7105
New group for Sagemaker with 10 new controls
2020-10-06 16:40:19 +02:00
check_extra7106
New group for Sagemaker with 10 new controls
2020-10-06 16:40:19 +02:00
check_extra7107
Fix check_extra7107 condition
2020-10-20 13:20:15 +02:00
check_extra7108
Fix extra7108 parser error
2020-11-03 13:33:51 +01:00
check_extra7109
New group for Sagemaker with 10 new controls
2020-10-06 16:40:19 +02:00
check_extra7110
fix extra7110 title
2020-10-20 13:30:26 +02:00
check_extra7111
Fix extra7111 parser error
2020-11-03 13:48:39 +01:00
check_extra7112
New group for Sagemaker with 10 new controls
2020-10-06 16:40:19 +02:00
check_extra7113
Add extra7113: Check RDS deletion protection
2020-10-08 17:18:56 +05:30
check_extra7114
Glue grup 2 corrections
2020-11-16 18:29:16 +01:00
check_extra7115
Some corrections for glue related checks
2020-11-16 17:51:53 +01:00
check_extra7116
Fixed extra7116 extra7117 outputs and added to extras
2020-11-18 13:31:20 +01:00
check_extra7117
Fixed extra7116 extra7117 outputs and added to extras
2020-11-18 13:31:20 +01:00
check_extra7118
Some corrections for glue related checks
2020-11-16 17:51:53 +01:00
check_extra7119
Glue grup 2 corrections
2020-11-16 18:29:16 +01:00
check_extra7120
Some corrections for glue related checks
2020-11-16 17:51:53 +01:00
check_extra7121
Glue grup 2 corrections
2020-11-16 18:29:16 +01:00
check_extra7122
Some corrections for glue related checks
2020-11-16 17:51:53 +01:00
check_extra7123
New 7 checks required for ENS
2020-12-01 09:55:20 +01:00
check_extra7124
New 7 checks required for ENS
2020-12-01 09:55:20 +01:00
check_extra7125
New 7 checks required for ENS
2020-12-01 09:55:20 +01:00
check_extra7126
New 7 checks required for ENS
2020-12-01 09:55:20 +01:00
check_extra7127
New 7 checks required for ENS
2020-12-01 09:55:20 +01:00
check_extra7128
New 7 checks required for ENS
2020-12-01 09:55:20 +01:00
check_extra7129
New 7 checks required for ENS
2020-12-01 09:55:20 +01:00
check_sample
cleanup: working
2020-09-03 08:08:11 +02:00