prowler
prowler copied to clipboard
fix(refresh): Use AWS_Audit_Info
Context
The assume_role function expects the AWS_Audit_Info object as parameter, currently the AWS_Assume_Role object is sent.
Description
Currently when the session is refreshed the following error is thrown:
2022-12-25 17:33:35,036 [File: aws_provider.py:99] [Module: aws_provider] CRITICAL: AttributeError -- 'AWS_Assume_Role' object has no attribute 'original_session'
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Hello @marinpurgar, thanks for this PR. We will review it as soon as we can.
Out of curiosity, how big in terms of number of resources is the account you are scanning with Prowler v3? Run prowler --quick-inventory
to get the numbers if you like.
The biggest account has 100+ CloudFormation Stacks, 30+ CloudWatch Alarms, 50+ S3 Buckets, 50+ SNS Topics. But the resources which aren't in the quick inventory and which take a lot of time (from what I can see in the output and debug logs) are ECS Clusters / Services / Task Definitions and ECRs.
Thanks for the info, our quick inventory uses the AWS resourcegroupstagging API and it is not fully complete so far, we can add those ECS related services manually to the inventory.
I understand that with the given number of resources your scan takes more than 60 minutes?
@marinpurgar we have added a workaround for this issue here https://github.com/prowler-cloud/prowler/pull/1636 it was needed to change a few more things, please check it out and test it if you want. Regarding @toniblyx question, your execution lasts more than 1h ?
Hi @marinpurgar we have merged https://github.com/prowler-cloud/prowler/pull/1636 please check it from master
branch.
Closing this