Pepe Fagoaga

### Context We need to include shared libs in separate files and folders. ### Description - Move Security Hub integration to a separate file - Move Security Groups and Network...

### Context We have to migrate the Prowler v2 checks to the v3. ### Description - AppStream 2.0 Service - appstream_fleet_default_internet_access_disabled | extra7193 - appstream_fleet_maximum_session_duration | extra7190 - appstream_fleet_session_disconnect_timeout |...

### Description Update Prowler permissions with the latest IAM actions required. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the...

Review ec2_networkacl_allow_ingress_any_port

1

### Discussed in https://github.com/prowler-cloud/prowler/discussions/2716 Originally posted by **NMuee** August 11, 2023 Hi Prowler Team, I have NACL with ALL port 0.0.0.0 ALLOW However, I do have some rules that DENY...

chore(global_provider): Move methods to class as static

11

### Description Improve code organisation making the `set_global_provider` and `get_global_provider` `@staticmethod`. This implies renaming a lot of code, which is already done and removes a file. ### License By submitting...

feat(internet-exposed): New public exposed checks

1

### Context Thanks to @abant07 for this work! 👏 Fixes https://github.com/prowler-cloud/prowler/issues/3237 ### Description New checks: - awslambda_function_not_directly_publicly_accessible_via_elbv2 - ec2_instance_not_directly_publicly_accessible_via_elb - ec2_instance_not_directly_publicly_accessible_via_elbv2 To-Do: - [ ] Verify ALB/ELB and Instance/Lambda security...

Check failing due to IAM Roles created by AWS Control Tower and AFT with AdministratorAccess policy

3

### Discussed in https://github.com/prowler-cloud/prowler/discussions/3809 Originally posted by @dmkim22-lguplus April 18, 2024 Hello, IAM Roles created by AWS Control Tower and AFT (Account Factory for Terraform) have AdministratorAccess policy attached, and...

# Deprecations from v3 ## General - `Allowlist` now is called `Mutelist`. - The `--quiet` option has been deprecated, now use the `--status` flag to select the finding's status you...

fix(mutelist): Handle exceptions before match

1

### Description Handle a case when the exceptions where matching before the real mutelist match. ### License By submitting this pull request, I confirm that my contribution is made under...

chore(regions_update): Changes in regions for AWS services.

1

### Description This PR updates the regions for AWS services. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the Apache...