Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

prowler v3 #484

Draft
wants to merge 2 commits into
base: master
Choose a base branch
from
Draft

prowler v3 #484

wants to merge 2 commits into from

Conversation

jesusfcr
Copy link
Contributor

@jesusfcr jesusfcr commented Oct 17, 2023

  • Allow prowler check without assume role svc
  • Upgrade to prowler 3

Prowler removed -g and added --compliance and now allow many more.

prowler aws --list-compliance
- cisa_aws
- soc2_aws
- cis_1.4_aws
- cis_1.5_aws
- mitre_attack_aws
- gdpr_aws
- aws_foundational_security_best_practices_aws
- iso27001_2013_aws
- hipaa_aws
- cis_2.0_aws
- gxp_21_cfr_part_11_aws
- aws_well_architected_framework_security_pillar_aws
- gxp_eu_annex_11_aws
- nist_800_171_revision_2_aws
- nist_800_53_revision_4_aws
- nist_800_53_revision_5_aws
- ens_rd2022_aws
- nist_csf_1.1_aws
- aws_well_architected_framework_reliability_pillar_aws
- aws_audit_manager_control_tower_guardrails_aws
- rbi_cyber_security_framework_aws
- ffiec_aws
- pci_3.2.1_aws
- fedramp_moderate_revision_4_aws
- fedramp_low_revision_4_aws

Also the CIS level is not available as a parameter or json output. This PR loads an internal json file to allow infer the level.

TBD if we are going to extend the check to allow all the compliance supported by prowler or restrict to cis cis_2.0_aws.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant