ghndrx/prowler
1
0
Fork 0
mirror of https://github.com/ghndrx/prowler.git synced 2026-02-10 14:55:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
ba87f437d5c7d406adac80e64535e0857e73e39a
prowler/groups
History
Nick Malcolm ba87f437d5 This check will identify IAM Policies which allow an IAM Principal (a Role or User) to escalate their privileges due to insecure STS permissions. It is AWS best practice to only use explicitly defined Resources (Role ARNs) for an sts:AssumeRole action. 
See more: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_permissions-to-switch.html#roles-usingrole-createpolicy
2020-08-20 21:08:00 +12:00
..
group1_iam
Modify group names header to clarify what is CIS only
2020-03-25 10:53:05 +01:00
group2_logging
Modify group names header to clarify what is CIS only
2020-03-25 10:53:05 +01:00
group3_monitoring
Modify group names header to clarify what is CIS only
2020-03-25 10:53:05 +01:00
group4_networking
Modify group names header to clarify what is CIS only
2020-03-25 10:53:05 +01:00
group5_cislevel1
Modify group names header to clarify what is CIS only
2020-03-25 10:53:05 +01:00
group6_cislevel2
Modify group names header to clarify what is CIS only
2020-03-25 10:53:05 +01:00
group7_extras
This check will identify IAM Policies which allow an IAM Principal (a Role or User) to escalate their privileges due to insecure STS permissions. It is AWS best practice to only use explicitly defined Resources (Role ARNs) for an sts:AssumeRole action.
2020-08-20 21:08:00 +12:00
group8_forensics
Fixed issue #308
2019-03-27 22:35:50 +00:00
group9_gdpr
Add additional GDPR checks
2020-07-24 22:26:09 +05:30
group10_hipaa
Add additional HIPAA checks
2020-07-23 19:10:17 +05:30
group11_secrets
Modify group names header to clarify what is CIS only
2020-03-25 10:53:05 +01:00
group12_apigateway
Added group12 apigateway checks
2019-05-13 17:01:45 -04:00
group13_rds
Added exttra747 RDS CloudWatch Log integration
2019-05-15 23:31:25 -04:00
group14_elasticsearch
Improvements and new checks for elasticsearch
2020-04-08 14:00:12 +02:00
group15_pci
Added group for pci-dss as reference
2020-07-13 17:33:07 +02:00
group16_trustboundaries
Fixed title in group16_trustboundaries
2020-04-14 23:57:55 +02:00
group17_internetexposed
Added group internet-exposed
2020-06-16 18:01:14 +02:00
group18_iso27001
fix typo on title group18
2020-07-24 15:18:46 +02:00
group19_eks-cis
Adding EKS checks to eks-cis and extras group
2020-08-03 08:02:21 -05:00
groupN_sample
license changes for checks
2018-04-09 15:09:30 -04:00