Prowler 4.2.2__tar.gz → 4.2.3__tar.gz

{prowler-4.2.2 → prowler-4.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: prowler
-Version: 4.2.2
+Version: 4.2.3
 Summary: Prowler is an Open Source security tool to perform AWS, GCP and Azure security best practices assessments, audits, incident response, continuous monitoring, hardening and forensics readiness. It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, AWS Well-Architected Framework Security Pillar, AWS Foundational Technical Review (FTR), ENS (Spanish National Security Scheme) and your custom security frameworks.
 License: Apache-2.0
 Author: Toni de la Fuente
@@ -124,7 +124,7 @@ It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, Fe
 
 | Provider | Checks | Services | [Compliance Frameworks](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/compliance/) | [Categories](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/misc/#categories) |
 |---|---|---|---|---|
-| AWS | 359 | 66 -> `prowler aws --list-services` | 28 -> `prowler aws --list-compliance` | 7 -> `prowler aws --list-categories` |
+| AWS | 360 | 66 -> `prowler aws --list-services` | 28 -> `prowler aws --list-compliance` | 7 -> `prowler aws --list-categories` |
 | GCP | 77 | 13 -> `prowler gcp --list-services` | 1 -> `prowler gcp --list-compliance` | 2 -> `prowler gcp --list-categories`|
 | Azure | 127 | 16 -> `prowler azure --list-services` | 2 -> `prowler azure --list-compliance` | 2 -> `prowler azure --list-categories` |
 | Kubernetes | 83 | 7 -> `prowler kubernetes --list-services` | 1 -> `prowler kubernetes --list-compliance` | 7 -> `prowler kubernetes --list-categories` |

{prowler-4.2.2 → prowler-4.2.3}/README.md

@@ -60,7 +60,7 @@ It contains hundreds of controls covering CIS, NIST 800, NIST CSF, CISA, RBI, Fe
 
 | Provider | Checks | Services | [Compliance Frameworks](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/compliance/) | [Categories](https://docs.prowler.com/projects/prowler-open-source/en/latest/tutorials/misc/#categories) |
 |---|---|---|---|---|
-| AWS | 359 | 66 -> `prowler aws --list-services` | 28 -> `prowler aws --list-compliance` | 7 -> `prowler aws --list-categories` |
+| AWS | 360 | 66 -> `prowler aws --list-services` | 28 -> `prowler aws --list-compliance` | 7 -> `prowler aws --list-categories` |
 | GCP | 77 | 13 -> `prowler gcp --list-services` | 1 -> `prowler gcp --list-compliance` | 2 -> `prowler gcp --list-categories`|
 | Azure | 127 | 16 -> `prowler azure --list-services` | 2 -> `prowler azure --list-compliance` | 2 -> `prowler azure --list-categories` |
 | Kubernetes | 83 | 7 -> `prowler kubernetes --list-services` | 1 -> `prowler kubernetes --list-compliance` | 7 -> `prowler kubernetes --list-categories` |

{prowler-4.2.2 → prowler-4.2.3}/prowler/config/config.py

@@ -11,7 +11,7 @@ from prowler.lib.logger import logger
 
 timestamp = datetime.today()
 timestamp_utc = datetime.now(timezone.utc).replace(tzinfo=timezone.utc)
-prowler_version = "4.2.2"
+prowler_version = "4.2.3"
 html_logo_url = "https://github.com/prowler-cloud/prowler/"
 square_logo_img = "https://prowler.com/wp-content/uploads/logo-html.png"
 aws_logo = "https://user-images.githubusercontent.com/38561120/235953920-3e3fba08-0795-41dc-b480-9bea57db9f2e.png"

{prowler-4.2.2 → prowler-4.2.3}/prowler/lib/outputs/html/html.py

@@ -135,18 +135,20 @@ def add_html_header(file_descriptor, provider):
 def fill_html(file_descriptor, finding):
     try:
         row_class = "p-3 mb-2 bg-success-custom"
-        finding.status = finding.status.split(".")[0]
+        finding_status = finding.status
+        # Change the status of the finding if it's muted
+        if finding.muted:
+            finding_status = f"MUTED ({finding.status})"
+            row_class = "table-warning"
         if finding.status == "MANUAL":
             row_class = "table-info"
         elif finding.status == "FAIL":
             row_class = "table-danger"
-        elif finding.status == "WARNING":
-            row_class = "table-warning"
 
         file_descriptor.write(
             f"""
                 <tr class="{row_class}">
-                    <td>{finding.status}</td>
+                    <td>{finding_status}</td>
                     <td>{finding.severity.split(".")[0]}</td>
                     <td>{finding.service_name}</td>
                     <td>{finding.region.lower()}</td>

{prowler-4.2.2 → prowler-4.2.3}/prowler/providers/aws/services/elasticache/elasticache_service.py

@@ -101,5 +101,5 @@ class Cluster(BaseModel):
     arn: str
     region: str
     cache_subnet_group_id: Optional[str]
-    subnets: Optional[list]
+    subnets: list = []
     tags: Optional[list]

{prowler-4.2.2 → prowler-4.2.3}/prowler/providers/aws/services/glue/glue_service.py

@@ -1,5 +1,6 @@
 from typing import Optional
 
+from botocore.exceptions import ClientError
 from pydantic import BaseModel
 
 from prowler.lib.logger import logger
@@ -72,6 +73,18 @@ class Glue(AWSService):
                                 region=regional_client.region,
                             )
                         )
+        except ClientError as error:
+            # Check if the operation is not supported in the region
+            if error.response["Error"]["Message"].startswith(
+                "Operation is not supported"
+            ):
+                logger.warning(
+                    f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                )
+            else:
+                logger.error(
+                    f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                )
         except Exception as error:
             logger.error(
                 f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"

{prowler-4.2.2 → prowler-4.2.3}/prowler/providers/aws/services/rds/rds_service.py

@@ -266,15 +266,19 @@ class RDS(AWSService):
                             DBClusterParameterGroupName=cluster.parameter_group
                         ):
                             for parameter in page["Parameters"]:
-                                if parameter["ParameterName"] == "rds.force_ssl":
-                                    cluster.force_ssl = parameter["ParameterValue"]
                                 if (
-                                    parameter["ParameterName"]
-                                    == "require_secure_transport"
+                                    "ParameterValue" in parameter
+                                    and "ParameterName" in parameter
                                 ):
-                                    cluster.require_secure_transport = parameter[
-                                        "ParameterValue"
-                                    ]
+                                    if parameter["ParameterName"] == "rds.force_ssl":
+                                        cluster.force_ssl = parameter["ParameterValue"]
+                                    if (
+                                        parameter["ParameterName"]
+                                        == "require_secure_transport"
+                                    ):
+                                        cluster.require_secure_transport = parameter[
+                                            "ParameterValue"
+                                        ]
                     except ClientError as error:
                         if (
                             error.response["Error"]["Code"]

{prowler-4.2.2 → prowler-4.2.3}/prowler/providers/aws/services/s3/s3_service.py

@@ -84,10 +84,23 @@ class S3(AWSService):
                         logger.warning(
                             f"{bucket['Name']} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                         )
+                    else:
+                        logger.error(
+                            f"{bucket['Name']} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                        )
                 except Exception as error:
                     logger.error(
                         f"{bucket['Name']} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
                     )
+        except ClientError as error:
+            if error.response["Error"]["Code"] == "NotSignedUp":
+                logger.warning(
+                    f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                )
+            else:
+                logger.error(
+                    f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                )
         except Exception as error:
             logger.error(
                 f"{error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"

{prowler-4.2.2 → prowler-4.2.3}/pyproject.toml

@@ -23,7 +23,7 @@ packages = [
   {include = "dashboard"}
 ]
 readme = "README.md"
-version = "4.2.2"
+version = "4.2.3"
 
 [tool.poetry.dependencies]
 alive-progress = "3.1.5"