inspec 2.2.55 → 2.2.61
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +24 -8
- data/docs/resources/aide_conf.md.erb +10 -0
- data/docs/resources/apache.md.erb +10 -0
- data/docs/resources/apache_conf.md.erb +10 -0
- data/docs/resources/apt.md.erb +10 -0
- data/docs/resources/audit_policy.md.erb +10 -0
- data/docs/resources/auditd.md.erb +10 -0
- data/docs/resources/auditd_conf.md.erb +10 -0
- data/docs/resources/aws_cloudtrail_trail.md.erb +10 -0
- data/docs/resources/aws_cloudtrail_trails.md.erb +10 -0
- data/docs/resources/aws_cloudwatch_alarm.md.erb +10 -0
- data/docs/resources/aws_cloudwatch_log_metric_filter.md.erb +10 -0
- data/docs/resources/aws_config_delivery_channel.md.erb +10 -0
- data/docs/resources/aws_config_recorder.md.erb +10 -0
- data/docs/resources/aws_ec2_instance.md.erb +10 -0
- data/docs/resources/aws_ec2_instances.md.erb +10 -0
- data/docs/resources/aws_elb.md.erb +10 -0
- data/docs/resources/aws_elbs.md.erb +10 -0
- data/docs/resources/aws_flow_log.md.erb +10 -0
- data/docs/resources/aws_iam_access_key.md.erb +10 -0
- data/docs/resources/aws_iam_access_keys.md.erb +10 -0
- data/docs/resources/aws_iam_group.md.erb +10 -0
- data/docs/resources/aws_iam_groups.md.erb +10 -0
- data/docs/resources/aws_iam_password_policy.md.erb +10 -0
- data/docs/resources/aws_iam_policies.md.erb +10 -0
- data/docs/resources/aws_iam_policy.md.erb +10 -0
- data/docs/resources/aws_iam_role.md.erb +10 -0
- data/docs/resources/aws_iam_root_user.md.erb +10 -0
- data/docs/resources/aws_iam_user.md.erb +10 -0
- data/docs/resources/aws_iam_users.md.erb +10 -0
- data/docs/resources/aws_kms_key.md.erb +10 -0
- data/docs/resources/aws_kms_keys.md.erb +10 -0
- data/docs/resources/aws_rds_instance.md.erb +10 -0
- data/docs/resources/aws_route_table.md.erb +10 -0
- data/docs/resources/aws_route_tables.md.erb +10 -0
- data/docs/resources/aws_s3_bucket.md.erb +10 -0
- data/docs/resources/aws_s3_bucket_object.md.erb +10 -0
- data/docs/resources/aws_s3_buckets.md.erb +10 -0
- data/docs/resources/aws_security_group.md.erb +10 -0
- data/docs/resources/aws_security_groups.md.erb +10 -0
- data/docs/resources/aws_sns_subscription.md.erb +10 -0
- data/docs/resources/aws_sns_topic.md.erb +10 -0
- data/docs/resources/aws_sns_topics.md.erb +10 -0
- data/docs/resources/aws_subnet.md.erb +10 -0
- data/docs/resources/aws_subnets.md.erb +10 -0
- data/docs/resources/aws_vpc.md.erb +10 -0
- data/docs/resources/aws_vpcs.md.erb +10 -0
- data/docs/resources/azure_generic_resource.md.erb +10 -0
- data/docs/resources/azure_resource_group.md.erb +10 -0
- data/docs/resources/azure_virtual_machine.md.erb +10 -0
- data/docs/resources/azure_virtual_machine_data_disk.md.erb +10 -0
- data/docs/resources/bash.md.erb +10 -0
- data/docs/resources/bond.md.erb +10 -0
- data/docs/resources/bridge.md.erb +10 -0
- data/docs/resources/bsd_service.md.erb +10 -0
- data/docs/resources/chocolatey_package.md.erb +10 -0
- data/docs/resources/command.md.erb +10 -0
- data/docs/resources/cpan.md.erb +10 -0
- data/docs/resources/cran.md.erb +10 -0
- data/docs/resources/crontab.md.erb +10 -0
- data/docs/resources/csv.md.erb +10 -0
- data/docs/resources/dh_params.md.erb +10 -0
- data/docs/resources/directory.md.erb +10 -0
- data/docs/resources/docker.md.erb +21 -0
- data/docs/resources/docker_container.md.erb +10 -0
- data/docs/resources/docker_image.md.erb +10 -0
- data/docs/resources/docker_plugin.md.erb +80 -0
- data/docs/resources/docker_service.md.erb +10 -0
- data/docs/resources/elasticsearch.md.erb +10 -0
- data/docs/resources/etc_fstab.md.erb +10 -0
- data/docs/resources/etc_group.md.erb +10 -0
- data/docs/resources/etc_hosts.md.erb +10 -0
- data/docs/resources/etc_hosts_allow.md.erb +10 -0
- data/docs/resources/etc_hosts_deny.md.erb +10 -0
- data/docs/resources/file.md.erb +10 -0
- data/docs/resources/filesystem.md.erb +10 -0
- data/docs/resources/firewalld.md.erb +10 -0
- data/docs/resources/gem.md.erb +10 -0
- data/docs/resources/group.md.erb +10 -0
- data/docs/resources/grub_conf.md.erb +10 -0
- data/docs/resources/host.md.erb +10 -0
- data/docs/resources/http.md.erb +10 -0
- data/docs/resources/iis_app.md.erb +10 -0
- data/docs/resources/iis_site.md.erb +10 -0
- data/docs/resources/inetd_conf.md.erb +10 -0
- data/docs/resources/ini.md.erb +10 -0
- data/docs/resources/interface.md.erb +10 -0
- data/docs/resources/iptables.md.erb +10 -0
- data/docs/resources/json.md.erb +10 -0
- data/docs/resources/kernel_module.md.erb +10 -0
- data/docs/resources/kernel_parameter.md.erb +10 -0
- data/docs/resources/key_rsa.md.erb +10 -0
- data/docs/resources/launchd_service.md.erb +10 -0
- data/docs/resources/limits_conf.md.erb +10 -0
- data/docs/resources/login_defs.md.erb +10 -0
- data/docs/resources/mount.md.erb +10 -0
- data/docs/resources/mssql_session.md.erb +10 -0
- data/docs/resources/mysql_conf.md.erb +10 -0
- data/docs/resources/mysql_session.md.erb +10 -0
- data/docs/resources/nginx.md.erb +10 -0
- data/docs/resources/nginx_conf.md.erb +10 -0
- data/docs/resources/npm.md.erb +10 -0
- data/docs/resources/ntp_conf.md.erb +10 -0
- data/docs/resources/oneget.md.erb +10 -0
- data/docs/resources/oracledb_session.md.erb +10 -0
- data/docs/resources/os.md.erb +10 -0
- data/docs/resources/os_env.md.erb +10 -0
- data/docs/resources/package.md.erb +10 -0
- data/docs/resources/packages.md.erb +10 -0
- data/docs/resources/parse_config.md.erb +10 -0
- data/docs/resources/parse_config_file.md.erb +10 -0
- data/docs/resources/passwd.md.erb +10 -0
- data/docs/resources/pip.md.erb +10 -0
- data/docs/resources/port.md.erb +10 -0
- data/docs/resources/postgres_conf.md.erb +10 -0
- data/docs/resources/postgres_hba_conf.md.erb +10 -0
- data/docs/resources/postgres_ident_conf.md.erb +10 -0
- data/docs/resources/postgres_session.md.erb +10 -0
- data/docs/resources/powershell.md.erb +10 -0
- data/docs/resources/processes.md.erb +10 -0
- data/docs/resources/rabbitmq_config.md.erb +10 -0
- data/docs/resources/registry_key.md.erb +38 -2
- data/docs/resources/runit_service.md.erb +10 -0
- data/docs/resources/security_policy.md.erb +10 -0
- data/docs/resources/service.md.erb +10 -0
- data/docs/resources/shadow.md.erb +10 -0
- data/docs/resources/ssh_config.md.erb +10 -0
- data/docs/resources/sshd_config.md.erb +10 -0
- data/docs/resources/ssl.md.erb +10 -0
- data/docs/resources/sys_info.md.erb +10 -0
- data/docs/resources/systemd_service.md.erb +10 -0
- data/docs/resources/sysv_service.md.erb +10 -0
- data/docs/resources/upstart_service.md.erb +10 -0
- data/docs/resources/user.md.erb +10 -0
- data/docs/resources/users.md.erb +10 -0
- data/docs/resources/vbscript.md.erb +10 -0
- data/docs/resources/virtualization.md.erb +10 -0
- data/docs/resources/windows_feature.md.erb +10 -0
- data/docs/resources/windows_hotfix.md.erb +10 -0
- data/docs/resources/windows_task.md.erb +10 -0
- data/docs/resources/wmi.md.erb +10 -0
- data/docs/resources/x509_certificate.md.erb +10 -0
- data/docs/resources/xinetd_conf.md.erb +10 -0
- data/docs/resources/xml.md.erb +10 -0
- data/docs/resources/yaml.md.erb +10 -0
- data/docs/resources/yum.md.erb +10 -0
- data/docs/resources/zfs_dataset.md.erb +10 -0
- data/docs/resources/zfs_pool.md.erb +10 -0
- data/lib/inspec/base_cli.rb +2 -2
- data/lib/inspec/cli.rb +3 -2
- data/lib/inspec/resource.rb +2 -0
- data/lib/inspec/runner.rb +2 -4
- data/lib/inspec/version.rb +1 -1
- data/lib/resource_support/aws.rb +1 -0
- data/lib/resources/aws/aws_ecs_cluster.rb +84 -0
- data/lib/resources/aws/aws_route_table.rb +3 -3
- data/lib/resources/docker.rb +34 -0
- data/lib/resources/docker_plugin.rb +63 -0
- data/lib/resources/iis_app_pool.rb +116 -0
- metadata +6 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: d165544705d8d7d1532d3490b651106922bd12a39bcd086dea86dfa184830939
|
|
4
|
+
data.tar.gz: bdb0c2273998ad9dd3bf2846755fa60db0522713f8937f31922a26ba52e98391
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 0547572d06d433e4c32f68006300aac09a5b37d85110d501a4a4fb73c966c1faec898e078e7ad5f7f69ef2fac034f94881fcb4c4b8a5fb54f8a0fc6c2c0a6817
|
|
7
|
+
data.tar.gz: a1d656a0ebd2288ecdbf4f8060bededba27a6af94d17fe0643f803456739370b1399f4ed7ccd3fac9fd48181b65d5f3d7d89467e0166db42a097fbb48cb1d806
|
data/CHANGELOG.md
CHANGED
|
@@ -1,20 +1,37 @@
|
|
|
1
1
|
# Change Log
|
|
2
2
|
<!-- usage documentation: http://expeditor-docs.es.chef.io/configuration/changelog/ -->
|
|
3
|
-
<!-- latest_release 2.2.
|
|
4
|
-
## [v2.2.
|
|
3
|
+
<!-- latest_release 2.2.61 -->
|
|
4
|
+
## [v2.2.61](https://github.com/inspec/inspec/tree/v2.2.61) (2018-08-09)
|
|
5
5
|
|
|
6
|
-
####
|
|
7
|
-
-
|
|
6
|
+
#### New Resources
|
|
7
|
+
- add iis_app_pool resource [#2400](https://github.com/inspec/inspec/pull/2400) ([strocknar](https://github.com/strocknar))
|
|
8
8
|
<!-- latest_release -->
|
|
9
9
|
|
|
10
|
-
<!-- release_rollup since=2.2.
|
|
11
|
-
### Changes since 2.2.
|
|
10
|
+
<!-- release_rollup since=2.2.55 -->
|
|
11
|
+
### Changes since 2.2.55 release
|
|
12
|
+
|
|
13
|
+
#### New Resources
|
|
14
|
+
- add iis_app_pool resource [#2400](https://github.com/inspec/inspec/pull/2400) ([strocknar](https://github.com/strocknar)) <!-- 2.2.61 -->
|
|
15
|
+
- Add new resource: aws_ecs_cluster [#3213](https://github.com/inspec/inspec/pull/3213) ([meringu](https://github.com/meringu)) <!-- 2.2.60 -->
|
|
12
16
|
|
|
13
17
|
#### Enhancements
|
|
14
|
-
-
|
|
18
|
+
- Adding docker plugin support [#3074](https://github.com/inspec/inspec/pull/3074) ([frezbo](https://github.com/frezbo)) <!-- 2.2.58 -->
|
|
19
|
+
|
|
20
|
+
#### Bug Fixes
|
|
21
|
+
- Error cleanly if a reporter errors while rendering [#3280](https://github.com/inspec/inspec/pull/3280) ([jquick](https://github.com/jquick)) <!-- 2.2.59 -->
|
|
22
|
+
- Add support in aws_route_table to allow 17 hexadecimal characters [#3277](https://github.com/inspec/inspec/pull/3277) ([kchistova](https://github.com/kchistova)) <!-- 2.2.57 -->
|
|
23
|
+
|
|
24
|
+
#### Merged Pull Requests
|
|
25
|
+
- Enable inspec archive, check, and json to run as unpriveleged user [#3263](https://github.com/inspec/inspec/pull/3263) ([phiggins](https://github.com/phiggins)) <!-- 2.2.56 -->
|
|
15
26
|
<!-- release_rollup -->
|
|
16
27
|
|
|
17
28
|
<!-- latest_stable_release -->
|
|
29
|
+
## [v2.2.55](https://github.com/inspec/inspec/tree/v2.2.55) (2018-08-03)
|
|
30
|
+
|
|
31
|
+
#### Enhancements
|
|
32
|
+
- Add a merged json report for A2 [#3261](https://github.com/inspec/inspec/pull/3261) ([jquick](https://github.com/jquick))
|
|
33
|
+
<!-- latest_stable_release -->
|
|
34
|
+
|
|
18
35
|
## [v2.2.54](https://github.com/inspec/inspec/tree/v2.2.54) (2018-08-02)
|
|
19
36
|
|
|
20
37
|
#### Enhancements
|
|
@@ -24,7 +41,6 @@
|
|
|
24
41
|
|
|
25
42
|
#### Merged Pull Requests
|
|
26
43
|
- Ability to render contrib resource pack docs on main website [#3184](https://github.com/inspec/inspec/pull/3184) ([clintoncwolfe](https://github.com/clintoncwolfe))
|
|
27
|
-
<!-- latest_stable_release -->
|
|
28
44
|
|
|
29
45
|
## [v2.2.50](https://github.com/inspec/inspec/tree/v2.2.50) (2018-07-26)
|
|
30
46
|
|
|
@@ -9,6 +9,16 @@ Use the `aide_conf` InSpec audit resource to test the rules established for the
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v1.37.6 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
An `aide_conf` resource block can be used to determine if the selection lines contain one (or more) directories whose files should be added to the aide database:
|
|
@@ -11,6 +11,16 @@ Use the `apache` InSpec audit resource to test the state of the Apache server on
|
|
|
11
11
|
|
|
12
12
|
<br>
|
|
13
13
|
|
|
14
|
+
## Availability
|
|
15
|
+
|
|
16
|
+
### Installation
|
|
17
|
+
|
|
18
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
19
|
+
|
|
20
|
+
### Version
|
|
21
|
+
|
|
22
|
+
This resource first became available in v1.51.15 of InSpec.
|
|
23
|
+
|
|
14
24
|
## Syntax
|
|
15
25
|
|
|
16
26
|
An `apache` InSpec audit resource block declares settings that should be tested:
|
|
@@ -9,6 +9,16 @@ Use the `apache_conf` InSpec audit resource to test the configuration settings f
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v1.0.0 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
An `apache_conf` InSpec audit resource block declares configuration settings that should be tested:
|
data/docs/resources/apt.md.erb
CHANGED
|
@@ -9,6 +9,16 @@ Use the `apt` InSpec audit resource to verify Apt repositories on the Debian and
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v1.0.0 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
An `apt` resource block tests the contents of Apt and PPA repositories:
|
|
@@ -9,6 +9,16 @@ Use the `audit_policy` InSpec audit resource to test auditing policies on the Wi
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v1.0.0 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
An `audit_policy` resource block declares a parameter that belongs to an audit policy category or subcategory:
|
|
@@ -9,6 +9,16 @@ Use the `auditd` InSpec audit resource to test the rules for logging that exist
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v1.38.8 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
An `auditd` resource block declares one (or more) rules to be tested, and then what that rule should do:
|
|
@@ -9,6 +9,16 @@ Use the `auditd_conf` InSpec audit resource to test the configuration settings f
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v1.0.0 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
A `auditd_conf` resource block declares configuration settings that should be tested:
|
|
@@ -13,6 +13,16 @@ Each AWS Cloudtrail Trail is uniquely identified by its `trail_name` or `trail_a
|
|
|
13
13
|
|
|
14
14
|
<br>
|
|
15
15
|
|
|
16
|
+
## Availability
|
|
17
|
+
|
|
18
|
+
### Installation
|
|
19
|
+
|
|
20
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
21
|
+
|
|
22
|
+
### Version
|
|
23
|
+
|
|
24
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
25
|
+
|
|
16
26
|
## Syntax
|
|
17
27
|
|
|
18
28
|
An `aws_cloudtrail_trail` resource block identifies a trail by `trail_name`.
|
|
@@ -13,6 +13,16 @@ Each AWS CloudTrail Trails is uniquely identified by its trail name or trail arn
|
|
|
13
13
|
|
|
14
14
|
<br>
|
|
15
15
|
|
|
16
|
+
## Availability
|
|
17
|
+
|
|
18
|
+
### Installation
|
|
19
|
+
|
|
20
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
21
|
+
|
|
22
|
+
### Version
|
|
23
|
+
|
|
24
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
25
|
+
|
|
16
26
|
## Syntax
|
|
17
27
|
|
|
18
28
|
An `aws_cloudtrail_trails` resource block collects a group of CloudTrail Trails and then tests that group.
|
|
@@ -11,6 +11,16 @@ Cloudwatch Alarms are currently identified using the metric name and metric name
|
|
|
11
11
|
|
|
12
12
|
<br>
|
|
13
13
|
|
|
14
|
+
## Availability
|
|
15
|
+
|
|
16
|
+
### Installation
|
|
17
|
+
|
|
18
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
19
|
+
|
|
20
|
+
### Version
|
|
21
|
+
|
|
22
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
23
|
+
|
|
14
24
|
## Syntax
|
|
15
25
|
|
|
16
26
|
An `aws_cloudwatch_alarm` resource block searches for a Cloudwatch Alarm, specified by several search options. If more than one Alarm matches, an error occurs.
|
|
@@ -11,6 +11,16 @@ A Log Metric Filter (LMF) is an AWS resource that observes log traffic, looks fo
|
|
|
11
11
|
|
|
12
12
|
<br>
|
|
13
13
|
|
|
14
|
+
## Availability
|
|
15
|
+
|
|
16
|
+
### Installation
|
|
17
|
+
|
|
18
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
19
|
+
|
|
20
|
+
### Version
|
|
21
|
+
|
|
22
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
23
|
+
|
|
14
24
|
## Syntax
|
|
15
25
|
|
|
16
26
|
An `aws_cloudwatch_log_metric_filter` resource block searches for an LMF, specified by several search options. If more than one log metric filter matches, an error occurs.
|
|
@@ -13,6 +13,16 @@ As of April 2018, each AWS region may have only one Delivery Channel.
|
|
|
13
13
|
|
|
14
14
|
<br>
|
|
15
15
|
|
|
16
|
+
## Availability
|
|
17
|
+
|
|
18
|
+
### Installation
|
|
19
|
+
|
|
20
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
21
|
+
|
|
22
|
+
### Version
|
|
23
|
+
|
|
24
|
+
This resource first became available in v2.1.21 of InSpec.
|
|
25
|
+
|
|
16
26
|
## Resource Parameters
|
|
17
27
|
|
|
18
28
|
An `aws_config_delivery_channel` resource block declares the tests for a single AWS Config Delivery Channel.
|
|
@@ -12,6 +12,16 @@ As of April 2018, you are only permitted one configuration recorder per region.
|
|
|
12
12
|
|
|
13
13
|
<br>
|
|
14
14
|
|
|
15
|
+
## Availability
|
|
16
|
+
|
|
17
|
+
### Installation
|
|
18
|
+
|
|
19
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
20
|
+
|
|
21
|
+
### Version
|
|
22
|
+
|
|
23
|
+
This resource first became available in v2.0.32 of InSpec.
|
|
24
|
+
|
|
15
25
|
## Resource Parameters
|
|
16
26
|
|
|
17
27
|
An `aws_config_recorder` resource block declares the tests for a single AWS configuration recorder.
|
|
@@ -9,6 +9,16 @@ Use the `aws_ec2_instance` InSpec audit resource to test properties of a single
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
An `aws_ec2_instance` resource block declares the tests for a single AWS EC2 instance by either name or id.
|
|
@@ -13,6 +13,16 @@ Each EC2 instance is uniquely identified by its ID.
|
|
|
13
13
|
|
|
14
14
|
<br>
|
|
15
15
|
|
|
16
|
+
## Availability
|
|
17
|
+
|
|
18
|
+
### Installation
|
|
19
|
+
|
|
20
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
21
|
+
|
|
22
|
+
### Version
|
|
23
|
+
|
|
24
|
+
This resource first became available in v2.1.72 of InSpec.
|
|
25
|
+
|
|
16
26
|
## Syntax
|
|
17
27
|
|
|
18
28
|
An `aws_ec2_instances` resource block collects a group of EC2 Instances and then tests that group.
|
|
@@ -11,6 +11,16 @@ To audit ELBs in bulk or to search, use `aws_elbs` (plural).
|
|
|
11
11
|
|
|
12
12
|
<br>
|
|
13
13
|
|
|
14
|
+
## Availability
|
|
15
|
+
|
|
16
|
+
### Installation
|
|
17
|
+
|
|
18
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
19
|
+
|
|
20
|
+
### Version
|
|
21
|
+
|
|
22
|
+
This resource first became available in v2.2.10 of InSpec.
|
|
23
|
+
|
|
14
24
|
## Resource Parameters
|
|
15
25
|
|
|
16
26
|
An `aws_elb` resource block declares the tests for a single AWS ELB by ELB name.
|
|
@@ -11,6 +11,16 @@ To audit a specific ELB in detail when its name is known, use `aws_elb` (singula
|
|
|
11
11
|
|
|
12
12
|
<br>
|
|
13
13
|
|
|
14
|
+
## Availability
|
|
15
|
+
|
|
16
|
+
### Installation
|
|
17
|
+
|
|
18
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
19
|
+
|
|
20
|
+
### Version
|
|
21
|
+
|
|
22
|
+
This resource first became available in v2.2.10 of InSpec.
|
|
23
|
+
|
|
14
24
|
## Syntax
|
|
15
25
|
|
|
16
26
|
An `aws_elb` resource block uses an optional filter to select a group of ELBs and then tests that group.
|
|
@@ -7,6 +7,16 @@ platform: aws
|
|
|
7
7
|
|
|
8
8
|
Use the `aws_flow_log` InSpec audit resource to test properties of a single Flow Log.
|
|
9
9
|
|
|
10
|
+
## Availability
|
|
11
|
+
|
|
12
|
+
### Installation
|
|
13
|
+
|
|
14
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
15
|
+
|
|
16
|
+
### Version
|
|
17
|
+
|
|
18
|
+
This resource first became available in v2.2.10 of InSpec.
|
|
19
|
+
|
|
10
20
|
## Syntax
|
|
11
21
|
|
|
12
22
|
describe aws_flow_log('fl-9c718cf5') do
|
|
@@ -9,6 +9,16 @@ Use the `aws_iam_access_key` InSpec audit resource to test properties of a singl
|
|
|
9
9
|
|
|
10
10
|
<br>
|
|
11
11
|
|
|
12
|
+
## Availability
|
|
13
|
+
|
|
14
|
+
### Installation
|
|
15
|
+
|
|
16
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
17
|
+
|
|
18
|
+
### Version
|
|
19
|
+
|
|
20
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
21
|
+
|
|
12
22
|
## Syntax
|
|
13
23
|
|
|
14
24
|
An `aws_iam_access_key` resource block declares the tests for a single AWS IAM access key. An access key is uniquely identified by its access key id.
|
|
@@ -14,6 +14,16 @@ Access Keys are closely related to AWS User resources. Use this resource to perf
|
|
|
14
14
|
|
|
15
15
|
<br>
|
|
16
16
|
|
|
17
|
+
## Availability
|
|
18
|
+
|
|
19
|
+
### Installation
|
|
20
|
+
|
|
21
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
22
|
+
|
|
23
|
+
### Version
|
|
24
|
+
|
|
25
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
26
|
+
|
|
17
27
|
## Syntax
|
|
18
28
|
|
|
19
29
|
An `aws_iam_access_keys` resource block uses an optional filter to select a group of access keys and then tests that group.
|
|
@@ -11,6 +11,16 @@ To test properties of multiple or all groups, use the `aws_iam_groups` resource.
|
|
|
11
11
|
|
|
12
12
|
<br>
|
|
13
13
|
|
|
14
|
+
## Availability
|
|
15
|
+
|
|
16
|
+
### Installation
|
|
17
|
+
|
|
18
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
19
|
+
|
|
20
|
+
### Version
|
|
21
|
+
|
|
22
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
23
|
+
|
|
14
24
|
## Syntax
|
|
15
25
|
|
|
16
26
|
An `aws_iam_group` resource block identifies a group by group name.
|
|
@@ -11,6 +11,16 @@ To test properties of a single group, use the `aws_iam_group` resource.
|
|
|
11
11
|
|
|
12
12
|
<br>
|
|
13
13
|
|
|
14
|
+
## Availability
|
|
15
|
+
|
|
16
|
+
### Installation
|
|
17
|
+
|
|
18
|
+
This resource is distributed along with InSpec itself. You can use it automatically.
|
|
19
|
+
|
|
20
|
+
### Version
|
|
21
|
+
|
|
22
|
+
This resource first became available in v2.0.16 of InSpec.
|
|
23
|
+
|
|
14
24
|
## Syntax
|
|
15
25
|
|
|
16
26
|
An `aws_iam_groups` resource block uses an optional filter to select a collection of IAM groups and then tests that collection.
|