Fennerr

Implement a new check for RDS to require encrypted connections

1

**Is your feature request related to a problem? Please describe.** The default DB parameter groups for RDS has the rds.force_ssl parameter set to 0. This parameter can be set to...

Chunk up outputs for really large environments in multiple parts

3

**Is your feature request related to a problem? Please describe.** Firefox is struggling to load the HTML report for a very large environment. It has been going for ~10min and...

Implement a new check for secrets in CloudWatch Logs

2

**Is your feature request related to a problem? Please describe.** Suggestion to implement a new check that performs the same secrets detection done for ECS task definitions/lambda code etc, but...

Context Improved UI for prowler 4.0 Currently only supports the AWS provider. Description Switched from using alive_progress bar to using Rich to display the UI I wanted to implement the...

[Bug]: Logic error when using trust_account_ids in the config file

2

### Steps to Reproduce I took a look at the logic, and there seems to be 2 different bugs. One in vpc_endpoint_connections_trust_boundaries.py logic, and one in the is_account_only_allowed_in_condition logic _Disclaimer...

AWS account security questions have been deprecated

4

### Steps to Reproduce Not actually a bug, but not a feature request either. AWS is deprecating security questions for accounts, so the check should be removed https://github.com/prowler-cloud/prowler/tree/master/prowler/providers/aws/services/account/account_security_questions_are_registered_in_the_aws_account https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-security-challenge.html ###...

Remove S3 KMS check, since its enabed by default, and cant be disabled

2

### Steps to Reproduce Here is the check: https://github.com/prowler-cloud/prowler/blob/master/prowler/providers/aws/services/s3/s3_bucket_kms_encryption/s3_bucket_kms_encryption.py Here is the documentation: https://docs.aws.amazon.com/AmazonS3/latest/userguide/default-encryption-faq.html Here is the relevant part of the documentation: ``` Can I disable encryption for the new...

Implement more secrets checks

3

### New feature motivation Similar to the secrets checks for the other services (lambda/ec2/ecs/etc), more checks can be implemented ### Solution Proposed Elastic Beanstalk: * Configuration files (.ebextensions) used for...

### Context Improved UI for prowler 4.0 Currently only supports the AWS provider. ### Description Switched from using alive_progress bar to using Rich to display the UI I wanted to...

Allow secrets to be output when explicitly asked for using a flag

3

### New feature motivation There are use cases when it would be useful for the secret values to be output to the file It would help consultants whom have limited...