cartography 0.115.0__py3-none-any.whl → 0.116.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of cartography might be problematic. Click here for more details.

Files changed (28) hide show
  1. cartography/_version.py +2 -2
  2. cartography/client/core/tx.py +1 -1
  3. cartography/intel/aws/ecr_image_layers.py +664 -0
  4. cartography/intel/aws/resources.py +2 -0
  5. cartography/intel/azure/__init__.py +8 -0
  6. cartography/intel/azure/resource_groups.py +82 -0
  7. cartography/models/aws/ecr/image.py +21 -0
  8. cartography/models/aws/ecr/image_layer.py +107 -0
  9. cartography/models/azure/resource_groups.py +52 -0
  10. cartography/rules/README.md +1 -0
  11. cartography/rules/__init__.py +0 -0
  12. cartography/rules/cli.py +342 -0
  13. cartography/rules/data/__init__.py +0 -0
  14. cartography/rules/data/frameworks/__init__.py +12 -0
  15. cartography/rules/data/frameworks/mitre_attack/__init__.py +14 -0
  16. cartography/rules/data/frameworks/mitre_attack/requirements/__init__.py +0 -0
  17. cartography/rules/data/frameworks/mitre_attack/requirements/t1190_exploit_public_facing_application/__init__.py +135 -0
  18. cartography/rules/formatters.py +46 -0
  19. cartography/rules/runners.py +338 -0
  20. cartography/rules/spec/__init__.py +0 -0
  21. cartography/rules/spec/model.py +88 -0
  22. cartography/rules/spec/result.py +46 -0
  23. {cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/METADATA +18 -4
  24. {cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/RECORD +28 -11
  25. {cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/entry_points.txt +1 -0
  26. {cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/WHEEL +0 -0
  27. {cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/licenses/LICENSE +0 -0
  28. {cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/top_level.txt +0 -0
{cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.4
2
2
  Name: cartography
3
- Version: 0.115.0
3
+ Version: 0.116.0
4
4
  Summary: Explore assets and their relationships across your technical infrastructure.
5
5
  Maintainer: Cartography Contributors
6
6
  License-Expression: Apache-2.0
@@ -23,9 +23,11 @@ Description-Content-Type: text/markdown
23
23
  License-File: LICENSE
24
24
  Requires-Dist: backoff>=2.1.2
25
25
  Requires-Dist: boto3>=1.15.1
26
+ Requires-Dist: aioboto3>=13.0.0
27
+ Requires-Dist: httpx>=0.24.0
26
28
  Requires-Dist: botocore>=1.18.1
27
29
  Requires-Dist: dnspython>=1.15.0
28
- Requires-Dist: neo4j>=5.28.2
30
+ Requires-Dist: neo4j<6.0.0,>=5.28.2
29
31
  Requires-Dist: policyuniverse>=1.1.0.0
30
32
  Requires-Dist: google-api-python-client>=1.7.8
31
33
  Requires-Dist: google-auth>=2.37.0
@@ -58,6 +60,7 @@ Requires-Dist: duo-client
58
60
  Requires-Dist: cloudflare<5.0.0,>=4.1.0
59
61
  Requires-Dist: scaleway>=2.9.0
60
62
  Requires-Dist: google-cloud-resource-manager>=1.14.2
63
+ Requires-Dist: typer>=0.9.0
61
64
  Dynamic: license-file
62
65
 
63
66
  ![Cartography](docs/root/images/logo-horizontal.png)
@@ -84,7 +87,7 @@ You can learn more about the story behind Cartography in our [presentation at BS
84
87
 
85
88
  ## Supported platforms
86
89
  - [Airbyte](https://cartography-cncf.github.io/cartography/modules/airbyte/index.html) - Organization, Workspace, User, Source, Destination, Connection, Tag, Stream
87
- - [Amazon Web Services](https://cartography-cncf.github.io/cartography/modules/aws/index.html) - ACM, API Gateway, CloudWatch, CodeBuild, Config, Cognito, EC2, ECS, ECR, EFS, Elasticsearch, Elastic Kubernetes Service (EKS), DynamoDB, Glue, GuardDuty, IAM, Inspector, KMS, Lambda, RDS, Redshift, Route53, S3, Secrets Manager(Secret Versions), Security Hub, SNS, SQS, SSM, STS, Tags
90
+ - [Amazon Web Services](https://cartography-cncf.github.io/cartography/modules/aws/index.html) - ACM, API Gateway, CloudWatch, CodeBuild, Config, Cognito, EC2, ECS, ECR (including image layers), EFS, Elasticsearch, Elastic Kubernetes Service (EKS), DynamoDB, Glue, GuardDuty, IAM, Inspector, KMS, Lambda, RDS, Redshift, Route53, S3, Secrets Manager(Secret Versions), Security Hub, SNS, SQS, SSM, STS, Tags
88
91
  - [Anthropic](https://cartography-cncf.github.io/cartography/modules/anthropic/index.html) - Organization, ApiKey, User, Workspace
89
92
  - [BigFix](https://cartography-cncf.github.io/cartography/modules/bigfix/index.html) - Computers
90
93
  - [Cloudflare](https://cartography-cncf.github.io/cartography/modules/cloudflare/index.html) - Account, Role, Member, Zone, DNSRecord
@@ -98,7 +101,7 @@ You can learn more about the story behind Cartography in our [presentation at BS
98
101
  - [Keycloak](https://cartography-cncf.github.io/cartography/modules/keycloak/index.html) - Realms, Users, Groups, Roles, Scopes, Clients, IdentityProviders, Authentication Flows, Authentication Executions, Organizations, Organization Domains
99
102
  - [Kubernetes](https://cartography-cncf.github.io/cartography/modules/kubernetes/index.html) - Cluster, Namespace, Service, Pod, Container, ServiceAccount, Role, RoleBinding, ClusterRole, ClusterRoleBinding, OIDCProvider
100
103
  - [Lastpass](https://cartography-cncf.github.io/cartography/modules/lastpass/index.html) - users
101
- - [Microsoft Azure](https://cartography-cncf.github.io/cartography/modules/azure/index.html) - App Service, CosmosDB, Functions, Logic Apps, SQL, Storage, Virtual Machine
104
+ - [Microsoft Azure](https://cartography-cncf.github.io/cartography/modules/azure/index.html) - App Service, CosmosDB, Functions, Logic Apps, Resource Group, SQL, Storage, Virtual Machine
102
105
  - [Microsoft Entra ID](https://cartography-cncf.github.io/cartography/modules/entra/index.html) - Users, Groups, Applications, OUs, App Roles, federation to AWS Identity Center
103
106
  - [NIST CVE](https://cartography-cncf.github.io/cartography/modules/cve/index.html) - Common Vulnerabilities and Exposures (CVE) data from NIST database
104
107
  - [Okta](https://cartography-cncf.github.io/cartography/modules/okta/index.html) - users, groups, organizations, roles, applications, factors, trusted origins, reply URIs, federation to AWS roles, federation to AWS Identity Center
@@ -145,6 +148,17 @@ When you are ready to try it in production, read [here](https://cartography-cncf
145
148
 
146
149
  ## Usage
147
150
 
151
+ ### Running rules
152
+
153
+ You can check your environment against common security frameworks using the `cartography-rules` command.
154
+
155
+ ```bash
156
+ cartography-rules run all
157
+ ```
158
+
159
+ See [the rules docs](https://cartography-cncf.github.io/cartography/usage/rules.html) for more detail.
160
+
161
+
148
162
  ### Querying the database directly
149
163
 
150
164
  ![poweruser.png](docs/root/images/poweruser.png)
{cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/RECORD RENAMED
@@ -1,6 +1,6 @@
1
1
  cartography/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
2
2
  cartography/__main__.py,sha256=y5iqUrj4BmqZfjeDT-9balzpXeMARgHeIedRMRI1gr8,100
3
- cartography/_version.py,sha256=On7q8Is0CTJSaa4-E0b2lpHrXvHfAGoMDY1Mt15hyLw,708
3
+ cartography/_version.py,sha256=UyCCo7yEanWo6lAqTYUWLAtTqraSdY_8IX6Aoh-0RbU,708
4
4
  cartography/cli.py,sha256=RWwzYDSXALApsGxK5-iVdbEwK3HFvXs7yEB8u7HbsN0,49456
5
5
  cartography/config.py,sha256=aXOnUZP4JoOhTGu3wM--eEZ0HAR24W2ux3LmLp_410Q,18591
6
6
  cartography/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -12,7 +12,7 @@ cartography/client/aws/__init__.py,sha256=Zj7nX21QQELwPLZlpldm_22IiXZ1VFsEFQbWX_
12
12
  cartography/client/aws/ecr.py,sha256=04IXnuEAauyO5Mx9Wmt79WdUnYDhYsk2QSOnwE5_BeM,1664
13
13
  cartography/client/aws/iam.py,sha256=dYsGikc36DEsSeR2XVOVFFUDwuU9yWj_EVkpgVYCFgM,1293
14
14
  cartography/client/core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
15
- cartography/client/core/tx.py,sha256=l7gM9F8UsuX52SW_R_bdRLxawyIV3C8zFOaRicNQRZM,13839
15
+ cartography/client/core/tx.py,sha256=3s8bzJC_HgoHYawmbv2JNRJz_cdtocgBbNAtFutxiv0,13835
16
16
  cartography/data/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
17
17
  cartography/data/indexes.cypher,sha256=J2iwuStx4MdoM_qrL1HwFx5rU_Fxt3BTY3wRNwU6DTE,20273
18
18
  cartography/data/permission_relationships.yaml,sha256=RuKGGc_3ZUQ7ag0MssB8k_zaonCkVM5E8I_svBWTmGc,969
@@ -142,6 +142,7 @@ cartography/intel/aws/cognito.py,sha256=9eV2M5aHiDJoyAIp4Py5xaoSYgj-298iih-qO6F6
142
142
  cartography/intel/aws/config.py,sha256=BTnDb0f67t6yFvJmDM1k-JF5rdfibDl96F8NNdmPhs0,7776
143
143
  cartography/intel/aws/dynamodb.py,sha256=VvvjeUgi1ZrqY9flXIQnfhhaSVSEqXXHW6T9917VLBk,5728
144
144
  cartography/intel/aws/ecr.py,sha256=S58gOOe81BcQHc2VqM5PMJ_pvghpQNRf5-rrX2Up3ew,7238
145
+ cartography/intel/aws/ecr_image_layers.py,sha256=9F5NIbX_-HFV2_lkYkNM8ODHSjL6hR7YqqZSm_xNU_M,22057
145
146
  cartography/intel/aws/ecs.py,sha256=NiKtSMtwW5BvQ1C48gSXXQtOQpTisL3xx4JdNBDujVA,14391
146
147
  cartography/intel/aws/efs.py,sha256=6ZvFmVHLfZlyo8xx2dlRsC1IoVOpBOtsij_AdFczkDo,7884
147
148
  cartography/intel/aws/eks.py,sha256=bPItyEj5q0nSDltJrr0S5MIrTPV0fK3xkqF6EV8fcqA,3759
@@ -162,7 +163,7 @@ cartography/intel/aws/permission_relationships.py,sha256=_OlIJaMP7t_zNM2S2x_yUWn
162
163
  cartography/intel/aws/rds.py,sha256=BfMe0Hm1PKNBf2USGWdFUr4yqWF-ULnUEdX9A0l2AP0,19534
163
164
  cartography/intel/aws/redshift.py,sha256=XQytnHnmKnHbJkOJ5jo06BYBIP4T9b2bObbR9yJdEp0,7263
164
165
  cartography/intel/aws/resourcegroupstaggingapi.py,sha256=TkMlUKLrRBWAyeUu-cHKce7TFkwBnWV_Im8DONgnLGU,12852
165
- cartography/intel/aws/resources.py,sha256=FVVmPFlnYR-y-CykhaFUzg_ZHmS_mJxS84RAMCvwBbM,4460
166
+ cartography/intel/aws/resources.py,sha256=xlis4Tck1KHegrLQ5hgY9boZypOm2zGV1uebsQ7qGqA,4538
166
167
  cartography/intel/aws/route53.py,sha256=fqnSSW3HK6j5yCdMOSkmt41vAONWZU-E9JLfywmupQ4,16042
167
168
  cartography/intel/aws/s3.py,sha256=-j-CGYWPYhSAiNbdhrDuOyftAKGY9218bA-9u5xj0ME,37048
168
169
  cartography/intel/aws/s3accountpublicaccessblock.py,sha256=XkqHnbj9ODRcc7Rbl4swi03qvw_T-7Bnx3BHpTmlxio,4688
@@ -196,12 +197,13 @@ cartography/intel/aws/ec2/vpc_peerings.py,sha256=bP-qWHmSEoPMiOa3cumcyAQHvVO_Ifb
196
197
  cartography/intel/aws/util/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
197
198
  cartography/intel/aws/util/arns.py,sha256=Hwg_Lnf9ZNRTI-oEXU182S9ejOTy2-ggm2RKIxV5lGc,549
198
199
  cartography/intel/aws/util/common.py,sha256=iiwqBiD65iSrS3LbnnBLBMkyV8BrXBEscI5TMxcAdXA,1817
199
- cartography/intel/azure/__init__.py,sha256=wpu17oRK2kpydLDIRhpNDWgzADc8Ni35IJ0QtNppZP4,4863
200
+ cartography/intel/azure/__init__.py,sha256=vfOLNY0iTh_9ySB7Hc_gnBsoPPDi3qYGDJmJEUkKE0Y,5045
200
201
  cartography/intel/azure/app_service.py,sha256=w68zkBhpJvy21K1_trg_ouOsQpWAj8W3mtlkiPrZUEg,3262
201
202
  cartography/intel/azure/compute.py,sha256=Tg_vdK0MBpjZYaiihkpWsdUCFgdtZbhpDuV2tXAggbg,9139
202
203
  cartography/intel/azure/cosmosdb.py,sha256=HqpGJwusE_FG6X_ZgpnBpt2h0hGA-zrKZ6PLvhbALwg,43591
203
204
  cartography/intel/azure/functions.py,sha256=SVvfZTblZHGig3Kxr-jXALBuHts7Z0kfXBpjOvqvriY,3797
204
205
  cartography/intel/azure/logic_apps.py,sha256=0IawsxfSbI1wNncXoODeJnLPO0G4Qunr6zGGiU8rmdA,3203
206
+ cartography/intel/azure/resource_groups.py,sha256=Dx2lOiH6TvKGCA_1kLpIL8DGrhRh74xkIcVhhnXV2xc,2573
205
207
  cartography/intel/azure/sql.py,sha256=VJ7tXKn23MnXCd2P_b5Sq9xJBHfGwS6z5-xxHN_5EeU,34289
206
208
  cartography/intel/azure/storage.py,sha256=yItkgGAnWDQAmtytOeC8NxJVgwd8DT0gkFYw-rFiGi4,28639
207
209
  cartography/intel/azure/subscription.py,sha256=eEWLrre4vRc4Pkfr0sc6Uc_ZOiIgVlkTQ7OR4C-Kghc,3509
@@ -433,7 +435,8 @@ cartography/models/aws/ec2/vpc.py,sha256=7pJ-FzkoPKxUcdFlBSHbvGr2bQoujeACUS1BRsJ
433
435
  cartography/models/aws/ec2/vpc_cidr.py,sha256=8DMZZKjIbgrUpet-ojQEM-5Nlo81EPUbrdOkYerUPv4,4072
434
436
  cartography/models/aws/ec2/vpc_peering.py,sha256=fg4AgK-OqUitjp4Vohwei4XmxyRb-Bur3hQcIZhFo7A,6067
435
437
  cartography/models/aws/ecr/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
436
- cartography/models/aws/ecr/image.py,sha256=8atk1Z13BgUOcAq3uIK-sJ9gDxwcmeCIk7x1PW9B4BE,1753
438
+ cartography/models/aws/ecr/image.py,sha256=O4ZzimbzrAibGLVBlxbQsfmI7MP4Bda59ic8C_XLQus,2591
439
+ cartography/models/aws/ecr/image_layer.py,sha256=HKAEPbFHWcG2qvaFx7Tv9qJIBfLAH5htsjB2FXaExto,4100
437
440
  cartography/models/aws/ecr/repository.py,sha256=goItMJ3XnLSSk8FCMvgCpWCSsleTqdNzUT_Asvw8Yhk,2908
438
441
  cartography/models/aws/ecr/repository_image.py,sha256=p_uV3rImyWMYl9DdLU7mpHI74xRuBd4cJvJI5wutBeM,3883
439
442
  cartography/models/aws/ecs/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -524,6 +527,7 @@ cartography/models/azure/app_service.py,sha256=BL9SYYxdvUcQ4l2UbB49HIKSMNMBxznrx
524
527
  cartography/models/azure/function_app.py,sha256=u3yBo1r4K3AG3XGHd6aZWTi8g0SuYsA2TtZThF0JJTc,2274
525
528
  cartography/models/azure/logic_apps.py,sha256=LF8Tnk2e4d67Neax9tX0CqsuInYyT07rXrTQvHuidy8,2245
526
529
  cartography/models/azure/principal.py,sha256=OAFzIdE1daD6IbNuAvZWLqrvhZ5Eoo1N1o4kxSvj0xk,1727
530
+ cartography/models/azure/resource_groups.py,sha256=K2D_WEu47mE1U0bYa4CLZMb45-A6gcmZ5OPZPKmzYas,2093
527
531
  cartography/models/azure/tenant.py,sha256=d0KzBXaKuXogd-TGk3wqSyAwotG8ZcidUbgoULUjOEY,644
528
532
  cartography/models/bigfix/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
529
533
  cartography/models/bigfix/bigfix_computer.py,sha256=ep96YTcXXEJEIvHt3KZBYt5LaA4INRu7Awl_uiyWdFE,3552
@@ -662,9 +666,22 @@ cartography/models/trivy/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZ
662
666
  cartography/models/trivy/findings.py,sha256=SgI_h1aRyR20uAHvuXIZ1T6r4IZJt6SVhxRaF2bTsm0,3085
663
667
  cartography/models/trivy/fix.py,sha256=ho9ENVl9HSXqyggyCwR6ilkOBKDxpQ7rGibo_j21NA4,2587
664
668
  cartography/models/trivy/package.py,sha256=IwO1RZZ-MFRtNbt8Cq6YFl6fdNJMFmULnJkkK8Q4rL4,2809
665
- cartography-0.115.0.dist-info/licenses/LICENSE,sha256=kvLEBRYaQ1RvUni6y7Ti9uHeooqnjPoo6n_-0JO1ETc,11351
666
- cartography-0.115.0.dist-info/METADATA,sha256=IbfNc_7rPgdvjpvT2qRbOcGrLQrFGlLuWzJq34ejaag,13580
667
- cartography-0.115.0.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
668
- cartography-0.115.0.dist-info/entry_points.txt,sha256=GVIAWD0o0_K077qMA_k1oZU4v-M0a8GLKGJR8tZ-qH8,112
669
- cartography-0.115.0.dist-info/top_level.txt,sha256=BHqsNJQiI6Q72DeypC1IINQJE59SLhU4nllbQjgJi9g,12
670
- cartography-0.115.0.dist-info/RECORD,,
669
+ cartography/rules/README.md,sha256=DVRncSbZTokRRs6u5S6ihD-EmmivjBPMo_Le3_Zqg2A,146
670
+ cartography/rules/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
671
+ cartography/rules/cli.py,sha256=jKo3IC0s6O8XzFta34x4qQXzGU0i1laoJbhKahdTZZ4,10367
672
+ cartography/rules/formatters.py,sha256=oK-avVv7pygDGnqIZGSUekwIUolnN8qQJAkwmLAZMSo,1765
673
+ cartography/rules/runners.py,sha256=_jV1Lw7axOpwmFUeOci8YNOm7317clC3ttHSkVOdVNg,11448
674
+ cartography/rules/data/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
675
+ cartography/rules/data/frameworks/__init__.py,sha256=w1x_8ClDjtYH2Q9QKgF_7unlDtw03lhe_TCKrbf3qcQ,298
676
+ cartography/rules/data/frameworks/mitre_attack/__init__.py,sha256=BFPNIyFpA0cKDsCAu-bDKmrexAFPS-uzRcR7XoTYjGs,488
677
+ cartography/rules/data/frameworks/mitre_attack/requirements/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
678
+ cartography/rules/data/frameworks/mitre_attack/requirements/t1190_exploit_public_facing_application/__init__.py,sha256=LQBG_nFllgLl4i7OkRGfqYI2mTCmFnRg9Ha5E3mkekw,5522
679
+ cartography/rules/spec/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
680
+ cartography/rules/spec/model.py,sha256=rS2lwenbfTaGZz65OzLJJbHhNQ9ICohl1ubESbzxjn4,2452
681
+ cartography/rules/spec/result.py,sha256=6FaLWzjpSgslxR-b8VOep8HTTX8447J_PK6wtuxxKT0,921
682
+ cartography-0.116.0.dist-info/licenses/LICENSE,sha256=kvLEBRYaQ1RvUni6y7Ti9uHeooqnjPoo6n_-0JO1ETc,11351
683
+ cartography-0.116.0.dist-info/METADATA,sha256=SAnrqYXpjUz-6IPv5ECeMPTTAp0GSC6ZZUugVVBSuVU,13986
684
+ cartography-0.116.0.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
685
+ cartography-0.116.0.dist-info/entry_points.txt,sha256=r2C7h1ciRgXFnCmMApcev5dFOzI7g2aExPMYuLIxM3E,159
686
+ cartography-0.116.0.dist-info/top_level.txt,sha256=BHqsNJQiI6Q72DeypC1IINQJE59SLhU4nllbQjgJi9g,12
687
+ cartography-0.116.0.dist-info/RECORD,,
{cartography-0.115.0.dist-info → cartography-0.116.0.dist-info}/entry_points.txt RENAMED
@@ -1,3 +1,4 @@
1
1
  [console_scripts]
2
2
  cartography = cartography.cli:main
3
3
  cartography-detectdrift = cartography.driftdetect.cli:main
4
+ cartography-rules = cartography.rules.cli:main