mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-11 15:25:10 +00:00
84 lines
3.5 KiB
Bash
84 lines
3.5 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Prowler - the handy cloud security tool (copyright 2020) by Toni de la Fuente
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
|
# use this file except in compliance with the License. You may obtain a copy
|
|
# of the License at http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software distributed
|
|
# under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
|
|
# CONDITIONS OF ANY KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations under the License.
|
|
|
|
GROUP_ID[23]='ens'
|
|
GROUP_NUMBER[23]='23.0'
|
|
GROUP_TITLE[23]='ENS Esquema Nacional de Seguridad security checks - [ens] *****'
|
|
GROUP_RUN_BY_DEFAULT[23]='N' # run it when execute_all is called
|
|
GROUP_CHECKS[23]='extra733,extra7123,check13,check14,check121,extra7100,check120,check116,extra7124,check12,extra7125,check14,check13,check21,check25,extra7127,check35,check24,check31,check36,check32,check33,check34,check22,extra71,check23,check23,check27,check37,extra736,check28,extra713,check21,check29,extra793,extra792,extra764,extra738,check43,extra74,extra710,extra75,check41,check42,extra749,extra750,extra751,extra752,extra753,extra754,extra755,extra7128,extra729,extra761,extra740,extra735,extra734,extra728,extra781,extra773,extra744,extra7126,extra7129'
|
|
|
|
# ENS Control ID for AWS;Prowler checks that apply
|
|
# ens-op.acc.1.aws.iam.1;extra733
|
|
# ens-op.acc.1.aws.iam.2;extra7123
|
|
# ens-op.acc.1.aws.iam.3;check13
|
|
# ens-op.acc.1.aws.iam.4;check14
|
|
# ens-op.acc.1.aws.iam.5;check121
|
|
# ens-op.acc.2.aws.iam.1;extra7100
|
|
# ens-op.acc.1.aws.iam.4;check120
|
|
# ens-op.acc.3.aws.iam.1;check116
|
|
# ens-op.acc.4.aws.sys.1;extra7124
|
|
# ens-op.acc.5.aws.iam.1;check12
|
|
# ens-op.acc.5.aws.iam.2;extra7125
|
|
# ens-op.acc.5.aws.iam.3;check14
|
|
# ens-op.acc.5.aws.iam.4;check13
|
|
# ens-op.acc.7.aws.iam.1;check21
|
|
# ens-op.exp.1.aws.cfg.1;check25
|
|
# ens-op.exp.1.aws.sys.1;extra7127
|
|
# ens-op.exp.4.aws.sys.1;extra7127
|
|
# ens-op.exp.8.aws.trail.1;check35
|
|
# ens-op.exp.8.aws.cw.1;check24
|
|
# ens-op.exp.8.aws.trail.2;check31
|
|
# ens-op.exp.8.aws.trail.3;check36
|
|
# ens-op.exp.8.aws.trail.4;check32
|
|
# ens-op.exp.8.aws.trail.5;check33
|
|
# ens-op.exp.8.aws.trail.6;check34
|
|
# ens-op.exp.10.aws.trail.1;check22
|
|
# ens-op.exp.10.aws.trail.2;extra71
|
|
# ens-op.exp.10.aws.trail.3;check23
|
|
# ens-op.exp.10.aws.trail.4;check23
|
|
# ens-op.exp.10.aws.trail.5;check27
|
|
# ens-op.exp.11.aws.kms.1;check37
|
|
# ens-op.exp.11.aws.kms.2;extra736*
|
|
# ens-op.exp.11.aws.kms.3;check28
|
|
# ens-op.mon.1.aws.duty.1;extra713
|
|
# ens-op.mon.1.aws.trail.1;check21
|
|
# ens-op.mon.1.aws.flow.1;check29
|
|
# ens-mp.com.2.aws.elb.1;extra793
|
|
# ens-mp.com.2.aws.elb.2;extra792
|
|
# ens-mp.com.2.aws.s3.1;extra764
|
|
# ens-mp.com.2.aws.front.1;extra738
|
|
# ens-mp.com.4.aws.sg.1;check43
|
|
# ens-mp.com.4.aws.sg.2;extra74
|
|
# ens-mp.com.4.aws.vpc.1;extra710
|
|
# ens-mp.com.4.aws.sg.3;extra75
|
|
# ens-mp.com.4.aws.sg.4;check41
|
|
# ens-mp.com.4.aws.sg.5;check42
|
|
# ens-mp.com.4.aws.sg.6;extra749
|
|
# ens-mp.com.4.aws.sg.7;extra750
|
|
# ens-mp.com.4.aws.sg.8;extra751
|
|
# ens-mp.com.4.aws.sg.9;extra752
|
|
# ens-mp.com.4.aws.sg.10;extra753
|
|
# ens-mp.com.4.aws.sg.11;extra754
|
|
# ens-mp.com.4.aws.sg.12;extra755
|
|
# ens-mp.info.3.aws.dyndb.1;extra7128
|
|
# ens-mp.info.3.aws.ebs.1;extra729
|
|
# ens-mp.info.3.aws.ebs.2;extra761
|
|
# ens-mp.info.3.aws.ebs.3;extra740
|
|
# ens-mp.info.3.aws.rds.1;extra735
|
|
# ens-mp.info.3.s3.1;extra734
|
|
# ens-mp.info.3.sns.1;extra728
|
|
# ens-mp.info.3.aws.au.1;extra781
|
|
# ens-mp.s.2.aws.waf.1;extra773
|
|
# ens-mp.s.2.aws.waf.2;extra744
|
|
# ens-mp.s.2.aws.waf.3;extra7129
|