ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 23:05:05 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
79e02ce074fdc6e16e650f0adc125bcbacc4f156
prowler/checks
History
Samuel Dugo 573fa46aac Fixed AccessDeniedException on extra730 
When executing Prowler using a specific profile (in my case to assume a role) , check_extra730 returns:

"An error occurred (AccessDeniedException) when calling the DescribeCertificate operation: User: [ASSUMED_ROLE_ARN] is not authorized to perform: acm:DescribeCertificate on resource: [RESOURCE_ARN]"

This is because line 28 did not contain  the following parameters: "$PROFILE_OPT --region $regx" .
2018-12-05 11:35:44 +01:00
..
check11
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check12
Improved username filtering for check12
2018-09-05 11:09:03 +01:00
check13
fix(check13): should not pass if user never logged in
2018-10-17 10:16:49 +02:00
check14
Take age of access key 2 from correct column
2018-09-20 16:18:19 +02:00
check15
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check16
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check17
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check18
fix mismatched check_type
2018-04-24 21:12:25 -07:00
check19
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check21
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check22
mark Level 2 checks as such
2018-04-24 21:09:46 -07:00
check23
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check24
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check25
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check26
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check27
fixed and improved check27
2018-07-26 21:44:59 -04:00
check28
fixed check28 issue #209
2018-04-30 12:24:10 -04:00
check29
Updated check29 to validate against FlowLogId which is valid for both CloudWatch and s3 destinations
2018-11-14 14:19:44 -08:00
check31
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check32
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check33
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check34
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check35
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check36
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check37
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check38
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check39
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check41
mark Level 2 checks as such
2018-04-24 21:09:46 -07:00
check42
mark Level 2 checks as such
2018-04-24 21:09:46 -07:00
check43
Modified checks and documentation to reflect changes in CIS_Benchmark_v1.2.0(05-23-2018)
2018-08-15 09:16:27 -06:00
check44
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check110
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check111
Fixed Bash test.
2018-08-10 11:21:51 +01:00
check112
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check113
mark Level 1 checks as such
2018-04-24 21:02:41 -07:00
check114
mark Level 2 checks as such
2018-04-24 21:09:46 -07:00
check115
Issue #230
2018-08-14 10:11:44 -04:00
check116
Added managed to output
2018-09-11 23:06:00 -05:00
check117
Fixed as SCORED
2018-08-15 15:48:58 -04:00
check118
Fixed as SCORED
2018-08-15 15:48:39 -04:00
check119
Modified checks and documentation to reflect changes in CIS_Benchmark_v1.2.0(05-23-2018)
2018-08-15 09:16:27 -06:00
check120
Modified checks and documentation to reflect changes in CIS_Benchmark_v1.2.0(05-23-2018)
2018-08-15 09:16:27 -06:00
check121
Modified checks and documentation to reflect changes in CIS_Benchmark_v1.2.0(05-23-2018)
2018-08-15 09:16:27 -06:00
check122
Accelerate check 122 (scope local, 1 less API call by policy)
2018-10-19 13:43:37 +02:00
check310
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check311
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check312
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check313
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check314
Fix issue with CLOUDWATCH_LOGGROUP_REGION possibly returning multiple duplicate regions
2018-06-01 09:35:08 -05:00
check_extra71
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra72
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra73
Added extra739 ELB logging and typos
2018-11-19 22:55:29 -05:00
check_extra74
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra75
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra76
fixed checkID in check_extra76
2018-09-21 09:45:22 -04:00
check_extra77
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra78
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra79
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra710
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra711
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra712
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra713
Use awscli query instead of cut for Extra 7.13
2018-10-02 12:20:42 +02:00
check_extra714
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra715
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra716
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra717
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra718
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra719
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra720
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra721
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra722
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra723
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra724
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra725
Fixed test for no S3 buckets and moved code. Changed method to run through the trails list file.
2018-08-28 16:52:31 +01:00
check_extra726
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra727
Fixed issue #247
2018-09-24 22:27:34 -04:00
check_extra728
Fix extra727 and extra728 #221
2018-06-13 14:18:22 -07:00
check_extra729
mark Extra checks as such
2018-04-24 21:19:42 -07:00
check_extra730
Fixed AccessDeniedException on extra730
2018-12-05 11:35:44 +01:00
check_extra731
Added check extra731 SNS topics Public
2018-10-31 22:23:41 -04:00
check_extra732
Added check extra732 Cloudfront CDN Geo restrictions
2018-10-31 22:45:59 -04:00
check_extra733
Add check extra733 SAML Provider STS
2018-10-31 23:09:24 -04:00
check_extra734
Improved extra734 checking enforce policy
2018-11-06 00:17:00 -05:00
check_extra735
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra736
Added extra736 check exposed KMS keys
2018-11-07 23:27:58 -05:00
check_extra737
Added extra737 KMS keys rotation
2018-11-07 23:37:06 -05:00
check_extra738
Added extra738 CloudFront HTTPS
2018-11-08 20:21:46 -05:00
check_extra739
Added extra739 ELB logging and typos
2018-11-19 22:55:29 -05:00
check_extra740
Added extra740 EBS snapshots are encrypted and HIPAA
2018-11-19 23:22:18 -05:00
check_sample
add EXTRA level marker to sample check
2018-04-24 21:10:10 -07:00