mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 06:45:08 +00:00
e52ab12696
* fix(audit info): Common data structure for current audit * fix(iam): iam session audit fixed * feat(aws_session): Include else block Co-authored-by: Pepe Fagoaga <pepe@verica.io>
119 lines
4.7 KiB
Python
119 lines
4.7 KiB
Python
import json
|
|
import threading
|
|
import urllib.request
|
|
|
|
from config.config import aws_services_json_file, aws_services_json_url
|
|
from lib.logger import logger
|
|
from lib.utils.utils import open_file, parse_json_file
|
|
from providers.aws.aws_provider import current_audit_info
|
|
|
|
|
|
################## EC2
|
|
class EC2:
|
|
def __init__(self, audit_info):
|
|
self.service = "ec2"
|
|
self.session = audit_info.audit_session
|
|
self.audited_account = audit_info.audited_account
|
|
self.regional_clients = self.__generate_regional_clients__(
|
|
self.service, audit_info
|
|
)
|
|
self.__threading_call__(self.__describe_snapshots__)
|
|
|
|
def __get_session__(self):
|
|
return self.session
|
|
|
|
def __generate_regional_clients__(self, service, audit_info):
|
|
regional_clients = []
|
|
try: # Try to get the list online
|
|
with urllib.request.urlopen(aws_services_json_url) as url:
|
|
data = json.loads(url.read().decode())
|
|
except:
|
|
# Get the list locally
|
|
f = open_file(aws_services_json_file)
|
|
data = parse_json_file(f)
|
|
|
|
for att in data["prices"]:
|
|
if (
|
|
audit_info.audited_regions
|
|
): # Check for input aws audit_info.audited_regions
|
|
if (
|
|
service in att["id"].split(":")[0]
|
|
and att["attributes"]["aws:region"] in audit_info.audited_regions
|
|
): # Check if service has this region
|
|
region = att["attributes"]["aws:region"]
|
|
regional_client = audit_info.audit_session.client(
|
|
service, region_name=region
|
|
)
|
|
regional_client.region = region
|
|
regional_clients.append(regional_client)
|
|
else:
|
|
if audit_info.audited_partition in "aws":
|
|
if (
|
|
service in att["id"].split(":")[0]
|
|
and "gov" not in att["attributes"]["aws:region"]
|
|
and "cn" not in att["attributes"]["aws:region"]
|
|
):
|
|
region = att["attributes"]["aws:region"]
|
|
regional_client = audit_info.audit_session.client(
|
|
service, region_name=region
|
|
)
|
|
regional_client.region = region
|
|
regional_clients.append(regional_client)
|
|
elif audit_info.audited_partition in "cn":
|
|
if (
|
|
service in att["id"].split(":")[0]
|
|
and "cn" in att["attributes"]["aws:region"]
|
|
):
|
|
region = att["attributes"]["aws:region"]
|
|
regional_client = audit_info.audit_session.client(
|
|
service, region_name=region
|
|
)
|
|
regional_client.region = region
|
|
regional_clients.append(regional_client)
|
|
elif audit_info.audited_partition in "gov":
|
|
if (
|
|
service in att["id"].split(":")[0]
|
|
and "gov" in att["attributes"]["aws:region"]
|
|
):
|
|
region = att["attributes"]["aws:region"]
|
|
regional_client = audit_info.audit_session.client(
|
|
service, region_name=region
|
|
)
|
|
regional_client.region = region
|
|
regional_clients.append(regional_client)
|
|
|
|
return regional_clients
|
|
|
|
def __threading_call__(self, call):
|
|
threads = []
|
|
for regional_client in self.regional_clients:
|
|
threads.append(
|
|
threading.Thread(
|
|
target=call, args=(regional_client, self.audited_account)
|
|
)
|
|
)
|
|
for t in threads:
|
|
t.start()
|
|
for t in threads:
|
|
t.join()
|
|
|
|
def __describe_snapshots__(self, regional_client, audited_account):
|
|
logger.info("EC2 - Describing Snapshots...")
|
|
try:
|
|
describe_snapshots_paginator = regional_client.get_paginator(
|
|
"describe_snapshots"
|
|
)
|
|
snapshots = []
|
|
for page in describe_snapshots_paginator.paginate(
|
|
OwnerIds=[audited_account]
|
|
):
|
|
for snapshot in page["Snapshots"]:
|
|
snapshots.append(snapshot)
|
|
except Exception as error:
|
|
logger.error(f"{error.__class__.__name__} -- {error}")
|
|
else:
|
|
regional_client.snapshots = snapshots
|
|
|
|
|
|
ec2_client = EC2(current_audit_info)
|