mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
92e1f17a80
json-asff mode outputs JSON, similar to the standard 'json' mode with one check per line, but in AWS Security Finding Format - used by AWS Security Hub Currently uses a generic Type, Resources and ProductArn value, but sets the Id to a unique value that includes the details of the message, in order to separate out checks that run against multiple resources and output one result per resource per check. This ensures that findings can be updated, should the resource move in or out of compliance securityhub mode generates the ASFF JSON and then passes it to an 'aws securityhub batch-import-findings' call, once per resource per check. Output to the screen is similar to the standard mode, but prints whether or not the finding was submitted successfully Fixes #524
73 lines
2.2 KiB
Bash
73 lines
2.2 KiB
Bash
#!/usr/bin/env bash
|
||
|
||
# Prowler - the handy cloud security tool (copyright 2018) by Toni de la Fuente
|
||
#
|
||
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
||
# use this file except in compliance with the License. You may obtain a copy
|
||
# of the License at http://www.apache.org/licenses/LICENSE-2.0
|
||
#
|
||
# Unless required by applicable law or agreed to in writing, software distributed
|
||
# under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
|
||
# CONDITIONS OF ANY KIND, either express or implied. See the License for the
|
||
# specific language governing permissions and limitations under the License.
|
||
|
||
if [[ "$MODE" != "mono" && "$MODE" != "text" && "$MODE" != "csv" && "$MODE" != "json" && "$MODE" != "json-asff" && "$MODE" != "securityhub" ]]; then
|
||
echo ""
|
||
echo "$OPTRED ERROR!$OPTNORMAL Invalid output mode. Choose text, mono, csv, json, json-asff or securityhub."
|
||
usage
|
||
EXITCODE=1
|
||
exit $EXITCODE
|
||
fi
|
||
|
||
if [[ "$MODE" == "mono" || "$MODE" == "csv" || "$MODE" == "json" || "$MODE" == "json-asff" ]]; then
|
||
MONOCHROME=1
|
||
fi
|
||
|
||
if [[ $MONOCHROME -eq 1 ]]; then
|
||
# Colors
|
||
NORMAL=''
|
||
WARNING='' # Bad (red)
|
||
SECTION='' # Section (yellow)
|
||
NOTICE='' # Notice (yellow)
|
||
OK='' # Ok (green)
|
||
BAD='' # Bad (red)
|
||
CYAN=''
|
||
BLUE=''
|
||
BROWN=''
|
||
DARKGRAY=''
|
||
GRAY=''
|
||
GREEN=''
|
||
MAGENTA=''
|
||
PURPLE=''
|
||
RED=''
|
||
YELLOW=''
|
||
WHITE=''
|
||
else
|
||
# Colors
|
||
# NOTE: Your editor may NOT show the 0x1b / escape character left of the '['
|
||
NORMAL="[0;39m"
|
||
WARNING="[1;33m" # Bad (red)
|
||
SECTION="[1;33m" # Section (yellow)
|
||
NOTICE="[1;33m" # Notice (yellow)
|
||
OK="[1;32m" # Ok (green)
|
||
BAD="[1;31m" # Bad (red)
|
||
CYAN="[0;36m"
|
||
BLUE="[0;34m"
|
||
BROWN="[0;33m"
|
||
DARKGRAY="[0;30m"
|
||
GRAY="[0;37m"
|
||
GREEN="[1;32m"
|
||
MAGENTA="[1;35m"
|
||
PURPLE="[0;35m"
|
||
RED="[1;31m"
|
||
YELLOW="[1;33m"
|
||
WHITE="[1;37m"
|
||
fi
|
||
|
||
printColorsCode(){
|
||
if [[ $MONOCHROME -eq 0 ]]; then
|
||
echo -e "\n$NORMAL Colors code for results: "
|
||
echo -e "$NOTICE INFO (Information)$NORMAL,$OK PASS (Recommended value)$NORMAL, $BAD FAIL (Fix required)$NORMAL, $PURPLE Not Scored $NORMAL"
|
||
fi
|
||
}
|