Files
prowler/checks/check_extra76
Toni de la Fuente a2806ad86b populated checks
2018-03-23 10:05:20 -04:00

22 lines
809 B
Plaintext

CHECK_ID_check_extra76=""
CHECK_TITLE_check_extra76=""
CHECK_SCORED_check_extra76=""
CHECK_TYPE_check_extra76=""
CHECK_ALTERNATE_check_extra76="check_extra76"
extra76(){
# "Ensure there are no EC2 AMIs set as Public (Not Scored) (Not part of CIS benchmark)"
textTitle "$ID76" "$TITLE76" "NOT_SCORED" "EXTRA"
textNotice "Looking for AMIs in all regions... "
for regx in $REGIONS; do
LIST_OF_PUBLIC_AMIS=$($AWSCLI ec2 describe-images --owners self $PROFILE_OPT --region $regx --filters "Name=is-public,Values=true" --query 'Images[*].{ID:ImageId}' --output text)
if [[ $LIST_OF_PUBLIC_AMIS ]];then
for ami in $LIST_OF_PUBLIC_AMIS; do
textWarn "$regx: $ami is currently Public!" "$regx"
done
else
textOK "$regx: No Public AMIs found" "$regx"
fi
done
}