aws_recon 0.5.23 → 0.5.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 16ecfd7450fa61b8b8f1cc82db74c2e7b1e3efc3b1c7daf083545711c52f3b60
-  data.tar.gz: f23e6e0b17d2bf3bfe8c630b40fa075723269f043624db6fa464697a81469547
+  metadata.gz: ff3d14f71d26d19cfee5137ed0257d5b2c620a00fd378dd2f289411451abeb3b
+  data.tar.gz: 118f02623ca139db1bd4da2a6425534b1f896b59ac464e21985519fb3527a09c
 SHA512:
-  metadata.gz: 0426ef57a308f85ef9b26c25bbb92d07cb5b1b8204a85b5cc94e1d13982efc5d68f8eaa16f476a8a1af174016942e38544e9cd36a7b0c9be2b69a0bfd7242618
-  data.tar.gz: e21daf50ee294ce7b17b9bb70499fd536a7f584cbf65e5eb387d770ffe0e40afeefe737509a3e9ce292532575d58d03ab621d45d627dcb582a489fc863cc361b
+  metadata.gz: b98e02e9fc9258cc70e9c91a12260795cec288c9e442a711c039841608ad0eaa37ebcf74fa6f1b4112fc163230bae1a879e40e5cb5a79d4a620b069f6c1d94bf
+  data.tar.gz: 7e08840e1604decccc201b6e327aceedac4dcf37c6b306bac3868750c5d69c72144f6fbd1a12f7ab291fb7eea0e9e01196d02c3eda4a106102054e6c7204f652

data/lib/aws_recon/aws_recon.rb

@@ -63,6 +63,10 @@ module AwsRecon
 
       # add resources to resources array for output to file
       @resources.concat(collection) if @options.output_file
+    rescue Aws::Errors::ServiceError => e
+      raise if @options.quit_on_exception
+
+      puts "Ignoring exception: '#{e.message}'\n"
     end
 
     #

data/lib/aws_recon/collectors/ecr.rb

@@ -23,6 +23,25 @@ class ECR < Mapper
         struct.policy = @client
                         .get_repository_policy({ repository_name: repo.repository_name }).policy_text.parse_policy
 
+        struct.images = []
+        #
+        # describe images
+        #
+        @client.list_images( {repository_name: repo.repository_name}).image_ids.each_with_index do | image, page |
+          log(response.context.operation_name, 'list_images', page)
+          image_hash = image.to_h
+          # 
+          # describe image scan results
+          #
+          result = @client.describe_image_scan_findings({ repository_name: repo.repository_name, image_id: { image_digest: image.image_digest, image_tag: image.image_tag } })
+          image_hash["image_scan_status"] = result.image_scan_status.to_h
+          image_hash["image_scan_findings"] = result.image_scan_findings.to_h
+
+          rescue Aws::ECR::Errors::ScanNotFoundException => e
+            # No scan result for this image. No action needed
+          ensure
+            struct.images << image_hash
+        end
       rescue Aws::ECR::Errors::ServiceError => e
         log_error(e.code)
 
@@ -40,7 +59,8 @@ class ECR < Mapper
   # not an error
   def suppressed_errors
     %w[
-      RepositoryPolicyNotFoundException
-    ]
+      RepositoryPolicyNotFoundException,
+      ScanNotFoundException
+      ]
   end
 end

data/lib/aws_recon/collectors/emr.rb

@@ -46,6 +46,22 @@ class EMR < Mapper
       end
     end
 
+    #
+    # list_security_configurations
+    #
+    @client.list_security_configurations.each_with_index do |response, page|
+      log(response.context.operation_name, page)
+
+      response.security_configurations.each do |security_configuration|
+        log(response.context.operation_name, security_configuration.name)
+
+        struct = OpenStruct.new(@client.describe_security_configuration({ name: security_configuration.name }).security_configuration.parse_policy)
+        struct.type = 'security_configuration'
+        struct.arn = "arn:aws:emr:#{@region}:#{@account}:security-configuration/#{security_configuration.name}" # no true ARN
+        resources.push(struct.to_h)
+      end
+    end
+
     resources
   end
 

data/lib/aws_recon/version.rb

@@ -1,3 +1,3 @@
 module AwsRecon
-  VERSION = "0.5.23"
+  VERSION = "0.5.26"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws_recon
 version: !ruby/object:Gem::Version
-  version: 0.5.23
+  version: 0.5.26
 platform: ruby
 authors:
 - Josh Larsen
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-02-19 00:00:00.000000000 Z
+date: 2022-03-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk