Code

ADA-CP-AWS 1.0: first 13 rules#1687

Code

Open

rdegraaf wants to merge 34 commits intonccgroup:developnccgroup/ScoutSuite:developfrom rdegraaf:ada-cp-awsrdegraaf/ScoutSuite:ada-cp-awsCopy head branch name to clipboard

+2,628-44

Commits

Commits on Jul 9, 2024

• Added additional permissions required for ADA-CP.

  rdegraaf-ncc3

  committed
  e94b322

  Copy full SHA for e94b322

Commits on Jul 15, 2024

• Corrected errors in the minimal AWS permission policy.

  rdegraaf-ncc3

  committed
  e141947

  Copy full SHA for e141947

• Removed a redundant entry from the minimal AWS permission policy.

  rdegraaf-ncc3

  committed
  e2b5606

  Copy full SHA for e2b5606

Commits on Jul 16, 2024

• Added a rule for Lambda runtime deprecation.

  Show description for 6585ac0
  rdegraaf-ncc3

  committed
  6585ac0

  Copy full SHA for 6585ac0

• Unit test for the new AWS lambda deprecation rule.

  Show description for 3f54434
  rdegraaf-ncc3

  committed
  3f54434

  Copy full SHA for 3f54434

• New ruleset for ADA-CP.

  Show description for 25adc04
  rdegraaf-ncc3

  committed
  25adc04

  Copy full SHA for 25adc04

Commits on Jul 17, 2024

• Fixed ruleset merging in processing engine unit tests.

  rdegraaf-ncc3

  committed
  98decc4

  Copy full SHA for 98decc4

• Fixed the AWS rule "iam-no-support-role".

  Show description for 39d994c
  rdegraaf-ncc3

  committed
  39d994c

  Copy full SHA for 39d994c

• Added compliance details to the AWS deprecated Lambda runtime rule.

  rdegraaf-ncc3

  committed
  ba6e33c

  Copy full SHA for ba6e33c

• Facade and resources for AWS Accounts contact details.

  rdegraaf-ncc3

  committed
  c9d4e2e

  Copy full SHA for c9d4e2e

• Rules and partial for AWS account contacts.

  rdegraaf-ncc3

  committed
  eb55a2c

  Copy full SHA for eb55a2c

Commits on Jul 22, 2024

• Rule for ADA-CP 0.7 2.7.2 "Do not setup access keys during initial user setup for all IAM users that have a console password"

  Show description for 56e9f5a
  rdegraaf-ncc3

  committed
  56e9f5a

  Copy full SHA for 56e9f5a

• Added the esisting rule "Root Account Has Active Keys" to ADA-CP ruleset.

  rdegraaf-ncc3

  committed
  a3ecaa1

  Copy full SHA for a3ecaa1

Commits on Jul 25, 2024

• Added a descriptive comment to "IAM Access Keys Provisioned At Creation For Users With Passwords"

  rdegraaf-ncc3

  committed
  9ed3794

  Copy full SHA for 9ed3794

Commits on Dec 19, 2024

• Added links to the ADA-CP spec for all rules currently in the ADA-CP ruleset.

  rdegraaf-ncc3

  committed
  e07a093

  Copy full SHA for e07a093

• Rule for ADA-CP 2.7.3 "Ensure IAM policies that allow full "*:*" administrative privileges are not attached"

  Show description for b4b7d9a
  rdegraaf-ncc3

  committed
  b4b7d9a

  Copy full SHA for b4b7d9a

• Rule for ADA-CP 2.7.1 "Ensure no 'root' user account access key exists"

  Show description for 26b95fa
  rdegraaf-ncc3

  committed
  26b95fa

  Copy full SHA for 26b95fa

• Updated ADA-CP links to the v1.0 branch from the dev branch.

  rdegraaf-ncc3

  committed
  13c6330

  Copy full SHA for 13c6330

• Rule for ADA-CP 2.8.2 "Ensure IAM password policy requires minimum length of 14 or greater"

  Show description for 9a226aa
  rdegraaf-ncc3

  committed
  9a226aa

  Copy full SHA for 9a226aa

• Rules for ADA-CP 2.8.3, 2.8.4.

  Show description for 9307cc0
  rdegraaf-ncc3

  committed
  9307cc0

  Copy full SHA for 9307cc0

• Rule for ADA-CP 2.9.1 "Ensure IAM password policy prevents password reuse"

  Show description for b7d24ca
  rdegraaf-ncc3

  committed
  b7d24ca

  Copy full SHA for b7d24ca

Commits on Dec 20, 2024

• AWS IAM Account Summary

  Show description for 3b54713
  rdegraaf-ncc3

  committed
  3b54713

  Copy full SHA for 3b54713

• Fixed unit tests relating to AWS IAM password policies.

  rdegraaf-ncc3

  committed
  e634ae6

  Copy full SHA for e634ae6

• Added rule references to the ADA-CP-1.0 ruleset.

  rdegraaf-ncc3

  committed
  69eeb3a

  Copy full SHA for 69eeb3a

• Reverting changes to this rule that is no longer used for ADA-CP.

  rdegraaf-ncc3

  committed
  365ce5e

  Copy full SHA for 365ce5e

• iam-admin-policy-attached: better way to detect aws-managed policies

  Show description for 64da479
  rdegraaf-ncc3

  committed
  64da479

  Copy full SHA for 64da479

• Added unit tests for all checks in ADA-CP-AWS that lack them.

  Show description for 590a77c
  rdegraaf-ncc3

  committed
  590a77c

  Copy full SHA for 590a77c

Commits on Dec 30, 2024

• Fixed syntax error in dev-requirements.txt

  rdegraaf-ncc3

  committed
  6568f10

  Copy full SHA for 6568f10

• Fixed time for unit tests.

  Show description for da105df
  rdegraaf-ncc3

  committed
  da105df

  Copy full SHA for da105df

• Rule for ADA-CP 2.10.1 "Ensure credentials unused for 45 days or greater are disabled"

  Show description for 98a801e
  rdegraaf-ncc3

  committed
  98a801e

  Copy full SHA for 98a801e

Commits on Dec 31, 2024

• iam-unused-credentials-not-disabled-or-rotated: added CIS 2.0 compliance

  rdegraaf-ncc3

  committed
  8c05476

  Copy full SHA for 8c05476

• Rule for ADA-CP 2.11.1 Eliminate use of the 'root' user for administrative and daily tasks

  Show description for 21e8645
  rdegraaf-ncc3

  committed
  21e8645

  Copy full SHA for 21e8645

• Corrected the identifier for the Lambda runtime "nodejs18.x"

  rdegraaf-ncc3

  committed
  cd3fe2c

  Copy full SHA for cd3fe2c

• Merge remote-tracking branch 'upstream/develop' into ada-cp-aws

  rdegraaf-ncc3

  committed
  578ce0c

  Copy full SHA for 578ce0c