mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 23:05:05 +00:00
24 lines
1.1 KiB
Plaintext
24 lines
1.1 KiB
Plaintext
CHECK_ID_extra711="7.11"
|
|
CHECK_TITLE_extra711="Check for Publicly Accessible Redshift Clusters (Not Scored) (Not part of CIS benchmark)"
|
|
CHECK_SCORED_extra711="NOT_SCORED"
|
|
CHECK_ALTERNATE_extra711="extra711"
|
|
CHECK_ALTERNATE_check711="extra711"
|
|
|
|
extra711(){
|
|
# "Check for Publicly Accessible Redshift Clusters (Not Scored) (Not part of CIS benchmark)"
|
|
textTitle "$ID711" "$TITLE711" "NOT_SCORED" "EXTRA"
|
|
textNotice "Looking for Reshift clusters in all regions... "
|
|
for regx in $REGIONS; do
|
|
LIST_OF_PUBLIC_REDSHIFT_CLUSTERS=$($AWSCLI redshift describe-clusters $PROFILE_OPT --region $regx --query 'Clusters[?PubliclyAccessible == `true`].[ClusterIdentifier,Endpoint.Address]' --output text)
|
|
if [[ $LIST_OF_PUBLIC_REDSHIFT_CLUSTERS ]];then
|
|
while read -r cluster;do
|
|
CLUSTER_ID=$(echo $cluster | awk '{ print $1; }')
|
|
CLUSTER_ENDPOINT=$(echo $cluster | awk '{ print $2; }')
|
|
textWarn "$regx: Cluster: $CLUSTER_ID at Endpoint: $CLUSTER_ENDPOINT is publicly accessible!" "$regx"
|
|
done <<< "$LIST_OF_PUBLIC_REDSHIFT_CLUSTERS"
|
|
else
|
|
textOK "$regx: no Publicly Accessible Redshift Clusters found" "$regx"
|
|
fi
|
|
done
|
|
}
|