mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 14:55:00 +00:00
23 lines
916 B
Plaintext
23 lines
916 B
Plaintext
CHECK_ID_extra76="7.6,7.06"
|
|
CHECK_TITLE_extra76="Ensure there are no EC2 AMIs set as Public (Not Scored) (Not part of CIS benchmark)"
|
|
CHECK_SCORED_extra76="NOT_SCORED"
|
|
CHECK_ALTERNATE_extra706="extra76"
|
|
CHECK_ALTERNATE_check76="extra76"
|
|
CHECK_ALTERNATE_check706="extra76"
|
|
|
|
extra76(){
|
|
# "Ensure there are no EC2 AMIs set as Public (Not Scored) (Not part of CIS benchmark)"
|
|
textTitle "$ID76" "$TITLE76" "NOT_SCORED" "EXTRA"
|
|
textNotice "Looking for AMIs in all regions... "
|
|
for regx in $REGIONS; do
|
|
LIST_OF_PUBLIC_AMIS=$($AWSCLI ec2 describe-images --owners self $PROFILE_OPT --region $regx --filters "Name=is-public,Values=true" --query 'Images[*].{ID:ImageId}' --output text)
|
|
if [[ $LIST_OF_PUBLIC_AMIS ]];then
|
|
for ami in $LIST_OF_PUBLIC_AMIS; do
|
|
textWarn "$regx: $ami is currently Public!" "$regx"
|
|
done
|
|
else
|
|
textOK "$regx: No Public AMIs found" "$regx"
|
|
fi
|
|
done
|
|
}
|