mirror of
https://github.com/ghndrx/prowler.git
synced 2026-02-10 06:45:08 +00:00
eb914d03ce
Co-authored-by: Pepe Fagoaga <pepe@verica.io> Co-authored-by: sergargar <sergio@verica.io>
91 lines
3.3 KiB
Python
91 lines
3.3 KiB
Python
import threading
|
|
from dataclasses import dataclass
|
|
|
|
from lib.logger import logger
|
|
from providers.aws.aws_provider import current_audit_info, generate_regional_clients
|
|
|
|
|
|
################## S3
|
|
class S3:
|
|
def __init__(self, audit_info):
|
|
self.service = "s3"
|
|
self.session = audit_info.audit_session
|
|
self.client = self.session.client(self.service)
|
|
self.audited_account = audit_info.audited_account
|
|
self.regional_clients = generate_regional_clients(self.service, audit_info)
|
|
self.buckets = self.__list_buckets__()
|
|
self.__threading_call__(self.__get_bucket_versioning__)
|
|
self.__threading_call__(self.__get_bucket_logging__)
|
|
|
|
def __get_session__(self):
|
|
return self.session
|
|
|
|
def __threading_call__(self, call):
|
|
threads = []
|
|
for bucket in self.buckets:
|
|
threads.append(threading.Thread(target=call, args=(bucket,)))
|
|
for t in threads:
|
|
t.start()
|
|
for t in threads:
|
|
t.join()
|
|
|
|
def __list_buckets__(self):
|
|
logger.info("S3 - Listing buckets...")
|
|
try:
|
|
buckets = []
|
|
list_buckets = self.client.list_buckets()
|
|
for bucket in list_buckets["Buckets"]:
|
|
bucket_region = self.client.get_bucket_location(Bucket=bucket["Name"])[
|
|
"LocationConstraint"
|
|
]
|
|
if not bucket_region: # If us-east-1, bucket_region is none
|
|
bucket_region = "us-east-1"
|
|
# Check if there are filter regions
|
|
if current_audit_info.audited_regions:
|
|
if bucket_region in current_audit_info.audited_regions:
|
|
buckets.append(Bucket(bucket["Name"], bucket_region))
|
|
else:
|
|
buckets.append(Bucket(bucket["Name"], bucket_region))
|
|
return buckets
|
|
except Exception as error:
|
|
logger.error(f"{bucket_region} -- {error.__class__.__name__}: {error}")
|
|
|
|
def __get_bucket_versioning__(self, bucket):
|
|
logger.info("S3 - Get buckets versioning...")
|
|
try:
|
|
regional_client = self.regional_clients[bucket.region]
|
|
bucket_versioning = regional_client.get_bucket_versioning(
|
|
Bucket=bucket.name
|
|
)
|
|
if "Status" in bucket_versioning:
|
|
if "Enabled" == bucket_versioning["Status"]:
|
|
bucket.versioning = True
|
|
except Exception as error:
|
|
logger.error(f"{bucket.region} -- {error.__class__.__name__}: {error}")
|
|
|
|
def __get_bucket_logging__(self, bucket):
|
|
logger.info("S3 - Get buckets logging...")
|
|
try:
|
|
regional_client = self.regional_clients[bucket.region]
|
|
bucket_logging = regional_client.get_bucket_logging(Bucket=bucket.name)
|
|
if "LoggingEnabled" in bucket_logging:
|
|
bucket.logging = True
|
|
except Exception as error:
|
|
logger.error(
|
|
f"{regional_client.region} -- {error.__class__.__name__}: {error}"
|
|
)
|
|
|
|
|
|
@dataclass
|
|
class Bucket:
|
|
name: str
|
|
versioning: bool
|
|
logging: bool
|
|
region: str
|
|
|
|
def __init__(self, name, region):
|
|
self.name = name
|
|
self.versioning = False
|
|
self.logging = False
|
|
self.region = region
|