defsec icon indicating copy to clipboard operation
defsec copied to clipboard

feat: add support for IAM identity center permission set session duration

Open gantta opened this issue 1 year ago • 13 comments

Related to https://github.com/aquasecurity/trivy/discussions/5877

Adds new AWS service for IAM Identity Center Permission Set to address NIST CPRT SP 800-53 Release 5.1.1 AC-12

gantta avatar Jan 05 '24 15:01 gantta

could you resolve the merge conflict?

simar7 avatar Jan 05 '24 19:01 simar7

merge conflict resolved. The Meta struct is not present in my branch in the /pkg/providers/aws/aws.go file so please confirm it should remain.

gantta avatar Jan 05 '24 20:01 gantta

merge conflict resolved. The Meta struct is not present in my branch in the /pkg/providers/aws/aws.go file so please confirm it should remain.

You have to rebase on latest master branch.

simar7 avatar Jan 10 '24 23:01 simar7

rebase complete. Should be good for review now.

gantta avatar Jan 11 '24 13:01 gantta

rebase complete. Should be good for review now.

tests are still red. Could you look into it? Might have to run go mod tidy and commit changes, if any.

simar7 avatar Jan 14 '24 21:01 simar7

go mod tidy is giving the following errors:

github.com/aquasecurity/defsec/internal/adapters/cloudformation/aws/iamidentitycenter imports
        github.com/aquasecurity/defsec/pkg/scanners/cloudformation/parser: no matching versions for query "latest"
github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter tested by
        github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter.test imports
        github.com/aquasecurity/defsec/internal/adapters/terraform/tftestutil: no matching versions for query "latest"

Not sure what I can do with this at this point.

gantta avatar Jan 15 '24 12:01 gantta

go mod tidy is giving the following errors:

github.com/aquasecurity/defsec/internal/adapters/cloudformation/aws/iamidentitycenter imports
        github.com/aquasecurity/defsec/pkg/scanners/cloudformation/parser: no matching versions for query "latest"
github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter tested by
        github.com/aquasecurity/defsec/internal/adapters/terraform/aws/iamidentitycenter.test imports
        github.com/aquasecurity/defsec/internal/adapters/terraform/tftestutil: no matching versions for query "latest"

Not sure what I can do with this at this point.

Sorry about that. We're in the middle of a project restructure and you caught us. Eventually the policies should live in the new repo https://github.com/aquasecurity/trivy-policies and any adapters in this repo https://github.com/aquasecurity/trivy-iac

I'll get to your PR shortly, I might have to recreate it for you but that's fine as I realize it's probably easier for me to do so and would also help us to document how someone can contribute externally. Appreciate the patience.

simar7 avatar Jan 16 '24 04:01 simar7

@simar7 Curious if there is any ETA that can be provided on when the new PR can go in?

gantta avatar Feb 05 '24 00:02 gantta

@simar7 Curious if there is any ETA that can be provided on when the new PR can go in?

We need these two changes merged before we can merge this PR.

  1. https://github.com/aquasecurity/trivy/pull/6005
  2. https://github.com/aquasecurity/trivy/pull/6006

At the moment, I don't have an ETA for you but we'll get to it when the above are merged.

simar7 avatar Feb 07 '24 04:02 simar7

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days.

github-actions[bot] avatar Mar 08 '24 15:03 github-actions[bot]

@simar7 any updates you can provide on ETA for when we can get this PR completed?

gantta avatar Mar 09 '24 11:03 gantta

@simar7 any updates you can provide on ETA for when we can get this PR completed?

@gantta defsec and other iac ancillary repos have been merged into trivy. If you could open a PR against the trivy repo we can help you merge it. Thanks for the understanding.

simar7 avatar Mar 14 '24 17:03 simar7

moving changes to trivvy repo

gantta avatar Mar 19 '24 14:03 gantta

This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days.

github-actions[bot] avatar Apr 18 '24 15:04 github-actions[bot]