prowler icon indicating copy to clipboard operation
prowler copied to clipboard

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness....

Results 454 prowler issues
Sort by recently updated
recently updated
newest added

### Context Migrate from prowler 2.X to prowler 3 for checks regarding password policy, which are: - providers/aws/services/iam/iam_password_policy_lowercase - providers/aws/services/iam/iam_password_policy_minimum_length_14 - providers/aws/services/iam/iam_password_policy_number - providers/aws/services/iam/iam_password_policy_reuse_24 - providers/aws/services/iam/iam_password_policy_symbol - providers/aws/services/iam/iam_password_policy_uppercase Since it...

Hi @toniblyx, Please can you help me with the following: 1 - I am running a Prowler scan locally, using the following script (image 1) in one account, across 5...

bug
status/awaiting-reponse
severity/medium

### Description This PR updates the regions for AWS services. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the Apache...

status/waiting-for-revision
severity/low

### Context Add S3 service and checks. *Pending S3Control and s3_bucket_public_access tests* ### Description - Add all s3 tests. - Add the following checks: checkName | oldCheck -- | --...

no-merge
work-in-progress

### Context We have to migrate the Prowler v2 checks to the v3. ### Description - AppStream 2.0 Service - appstream_fleet_default_internet_access_disabled | extra7193 - appstream_fleet_maximum_session_duration | extra7190 - appstream_fleet_session_disconnect_timeout |...

### Description Update Prowler permissions with the latest IAM actions required. ### License By submitting this pull request, I confirm that my contribution is made under the terms of the...

### Context check_extra7145 does the same as check_extra798 and can therefore be deleted ### Description Even the implementations of both checks are almost identical. The only differences are: 1. slightly...

status/awaiting-reponse
severity/low

### Context This minor change addresses the issue in #1290 where Prowler fails to run with a group argument and no exclusions supplied. ### Description The issue could be related...

status/awaiting-reponse
severity/medium

**What happened?** A clear and concise description of what the bug is or what is not working as expected **How to reproduce it** Steps to reproduce the behavior: 1. What...

bug
status/needs-triage

**What happened?** I have a user with the console password disabled and this user is failing a check with "User prowler has Console Password enabled but MFA disabled". **How to...

bug
status/needs-triage