aws_recon 0.5.19 → 0.5.23

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4ad9424a430c12245df3339fbc2356755911e011b3535e64023ea407dfac9e5b
-  data.tar.gz: df268326477fe481c0e81bd40cb28322a00fd3e21f9151334ef93e93c6e1bf33
+  metadata.gz: 16ecfd7450fa61b8b8f1cc82db74c2e7b1e3efc3b1c7daf083545711c52f3b60
+  data.tar.gz: f23e6e0b17d2bf3bfe8c630b40fa075723269f043624db6fa464697a81469547
 SHA512:
-  metadata.gz: c1a16352d62d9c48a19b7e30b4b263a94c9cece99e05abbebfc88eaac54384748b6626e4b35514153797bab09b5a967910602d8805a3bedfc93005811dd58cc7
-  data.tar.gz: 89e8f6630f7486ea8f4aecfc50f19143fe5e0caa6d0e0de77d15f63b1a8bdbbb1b7ecb84810713eeb5ce3610976d11556bb40928914db9d68b9e260a22c04ae9
+  metadata.gz: 0426ef57a308f85ef9b26c25bbb92d07cb5b1b8204a85b5cc94e1d13982efc5d68f8eaa16f476a8a1af174016942e38544e9cd36a7b0c9be2b69a0bfd7242618
+  data.tar.gz: e21daf50ee294ce7b17b9bb70499fd536a7f584cbf65e5eb387d770ffe0e40afeefe737509a3e9ce292532575d58d03ab621d45d627dcb582a489fc863cc361b

data/aws_recon.gemspec

@@ -23,7 +23,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'aws-sdk', '~> 3.0'
+  spec.add_dependency 'aws-sdk', '~> 3.1'
   spec.add_dependency 'parallel', '~> 1.20.1'
 
   spec.add_development_dependency 'bundler', '~> 2.2.17'

data/lib/aws_recon/collectors/ec2.rb

@@ -98,7 +98,10 @@ class EC2 < Mapper
           struct.type = 'vpc'
           struct.arn = "arn:aws:ec2:#{@region}:#{@account}:vpc/#{vpc.vpc_id}" # no true ARN
           struct.flow_logs = @client
-                             .describe_flow_logs({ filter: [{ name: 'resource-id', values: [vpc.vpc_id] }] })
+                             .describe_flow_logs({ filter: [{
+                                                   name: 'resource-id',
+                                                   values: [vpc.vpc_id]
+                                                 }] })
                              .flow_logs.first.to_h
 
           resources.push(struct.to_h)
@@ -337,19 +340,33 @@ class EC2 < Mapper
       #
       # describe_managed_prefix_lists
       #
-      @client.describe_managed_prefix_lists.each_with_index do |response, page|
-        log(response.context.operation_name, page)
+      begin
+        @client.describe_managed_prefix_lists.each_with_index do |response, page|
+          log(response.context.operation_name, page)
 
-        response.prefix_lists.each do |list|
-          struct = OpenStruct.new(list.to_h)
-          struct.type = 'prefix_list'
-          struct.arn = list.prefix_list_arn
+          response.prefix_lists.each do |list|
+            struct = OpenStruct.new(list.to_h)
+            struct.type = 'prefix_list'
+            struct.arn = list.prefix_list_arn
 
-          resources.push(struct.to_h)
+            resources.push(struct.to_h)
+          end
         end
+      rescue Aws::EC2::Errors::ServiceError => e
+        log_error(e.code)
+
+        raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
       end
     end
 
     resources
   end
+
+  private
+
+  def suppressed_errors
+    %w[
+      InvalidAction
+    ]
+  end
 end

data/lib/aws_recon/collectors/organizations.rb

@@ -13,13 +13,19 @@ class Organizations < Mapper
     #
     # describe_organization
     #
-    @client.describe_organization.each do |response|
-      log(response.context.operation_name)
+    begin
+      @client.describe_organization.each do |response|
+        log(response.context.operation_name)
 
-      struct = OpenStruct.new(response.organization.to_h)
-      struct.type = 'organization'
+        struct = OpenStruct.new(response.organization.to_h)
+        struct.type = 'organization'
 
-      resources.push(struct.to_h)
+        resources.push(struct.to_h)
+      end
+    rescue Aws::Organizations::Errors::ServiceError => e
+      log_error(e.code)
+
+      raise e unless suppressed_errors.include?(e.code) && !@options.quit_on_exception
     end
 
     #
@@ -66,6 +72,7 @@ class Organizations < Mapper
   def suppressed_errors
     %w[
       AccessDeniedException
+      AWSOrganizationsNotInUseException
     ]
   end
 end

data/lib/aws_recon/collectors/s3.rb

@@ -53,7 +53,8 @@ class S3 < Mapper
           { func: 'get_bucket_tagging', key: 'tagging', field: nil },
           { func: 'get_bucket_logging', key: 'logging', field: 'logging_enabled' },
           { func: 'get_bucket_versioning', key: 'versioning', field: nil },
-          { func: 'get_bucket_website', key: 'website', field: nil }
+          { func: 'get_bucket_website', key: 'website', field: nil },
+          { func: 'get_bucket_ownership_controls', key: 'ownership_controls', field: 'ownership_controls' }
         ]
 
         operations.each do |operation|
@@ -96,6 +97,7 @@ class S3 < Mapper
       ReplicationConfigurationNotFoundError
       NoSuchPublicAccessBlockConfiguration
       ObjectLockConfigurationNotFoundError
+      OwnershipControlsNotFoundError
     ]
   end
 end

data/lib/aws_recon/services.yaml

@@ -93,9 +93,6 @@
   alias: cloudwatchlogs
 - name: Kafka
   alias: kafka
-  excluded_regions:
-    - af-south-1
-    - ap-northeast-3
 - name: SecretsManager
   alias: secretsmanager
 - name: SecurityHub
@@ -141,8 +138,6 @@
   alias: servicequotas
 - name: Transfer
   alias: transfer
-  excluded_regions:
-    - ap-northeast-3
 - name: DirectConnect
   alias: directconnect
 - name: DirectoryService

data/lib/aws_recon/version.rb

@@ -1,3 +1,3 @@
 module AwsRecon
-  VERSION = "0.5.19"
+  VERSION = "0.5.23"
 end

data/readme.md

@@ -37,6 +37,7 @@ AWS Recon handles collection from large accounts by taking advantage of automati
 - [Pinterest](https://www.pinterest.com/)
 - [HackerOne](https://www.hackerone.com/)
 - [MuleSoft](https://www.mulesoft.com/)
+- [Slack](https://slack.com/)
 - [Drata](https://drata.com/)
 
 > ** usage does not imply endorsement

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws_recon
 version: !ruby/object:Gem::Version
-  version: 0.5.19
+  version: 0.5.23
 platform: ruby
 authors:
 - Josh Larsen
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-09-27 00:00:00.000000000 Z
+date: 2022-02-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk
@@ -17,14 +17,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.0'
+        version: '3.1'
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -277,7 +277,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.3
+rubygems_version: 3.0.8
 signing_key:
 specification_version: 4
 summary: A multi-threaded AWS security-focused inventory collection tool.