Skip to content

Releases: prowler-cloud/prowler

Prowler 3.16.6 - Back in the Village

30 May 16:46
@sergargar sergargar
3.16.6
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
fbe6a30
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 3.16.6 - Back in the Village

What's Changed

Fixes

Chores

  • chore(backport): put latest changes of v4 to v3 by @sergargar in #4144
    • chore(aws): Add failed_checks to track (#4018)
    • feat(rds): Add AWS RDS clusters to transport encryption check (#4028)
    • fix(gcp): handle projects API Call error (#4055)
    • fix(doc): mapping of extra748 and add extra74 (#4059)
    • chore(IAM): Improve IAM checks for Azure (#4061)
    • chore(regions_update): Changes in regions for AWS services. (#4071)
    • chore(slack): change Slack channel name env variable (#4080)
    • fix(rds): solve ParameterValue KeyError (#4085)
    • fix(opensearch): handle non existing SAMLOptions in domain (#4086)
    • fix(rds): ParameterValue MySQL and MariaDB RDS Instances (#4116)
    • chore(regions_update): Changes in regions for AWS services. (#4126)
    • chore(cloudformation): Update related URL (#4134)
    • chore(vpc): add scan unused services logic to VPC checks (#4137)
    • fix(allowlist): return False if something fails (#4140)
    • fix(outputs): fill compliance field for outputs (#4054)
    • chore(ec2): add scan unused services logic to SG check (#4138)

Dependencies

  • chore(deps): bump azure-mgmt-resource from 23.0.1 to 23.1.1 by @dependabot in #3998
  • chore(deps): bump microsoft-kiota-abstractions from 1.3.2 to 1.3.3 by @dependabot in #4097
  • chore(deps-dev): bump coverage from 7.5.1 to 7.5.2 by @dependabot in #4099
  • chore(deps-dev): bump moto from 5.0.7 to 5.0.8 by @dependabot in #4100
  • chore(deps): bump boto3 from 1.34.105 to 1.34.109 by @dependabot in #4101
  • chore(deps-dev): bump docker from 7.0.0 to 7.1.0 by @dependabot in #4102
  • chore(deps): bump google-api-python-client from 2.129.0 to 2.130.0 by @dependabot in #4098
  • chore(deps): bump botocore from 1.34.109 to 1.34.113 by @dependabot in #4103
  • chore(deps): bump azure-mgmt-network from 25.3.0 to 25.4.0 by @dependabot in #4105

Full Changelog: 3.16.5...3.16.6

Contributors

jfagoagas, dependabot, and sergargar
Assets 2

Prowler 4.2.1 - 2 Minutes to Midnight

29 May 18:28
@sergargar sergargar
4.2.1
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
f93b36e
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.2.1 - 2 Minutes to Midnight Latest
Latest

What's Changed

Fixes

Chores

Full Changelog: 4.2.0...4.2.1

Contributors

jfagoagas and sergargar
Assets 2

Prowler 4.2.0 - 2 Minutes to Midnight

28 May 16:59
@sergargar sergargar
4.2.0
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
37e2c1f
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.2.0 - 2 Minutes to Midnight

The blind men shout,
"Let the creatures out! We'll show the unbelievers"

Here we have Prowler 4.2.0 - 2 Minutes to Midnight 🚀 bringing a new look for Prowler with this Iron Maiden song.

New features to highlight in this version

🥳 New Prowler logo
This version comes with a new look of Prowler thanks to the new logo:
Prowler_Black

💪🏼 55 New AWS checks
Prowler is improving its AWS coverage by including 55 new checks for Kafka, Lightsail, Storage Gateway, DynamoDB, Cognito, EC2, EventBridge, SNS and RDS.
Special thanks to our external contributors @madereddy, @rieck-srlabs and @Davidm4r for doing new checks 🙌
See all the new available checks with prowler aws --list-checks

📝 HTML output is back!
We have listened you and as our community is always first, we brought our HTML back 😄
Get it again with prowler <provider> -M/--output-formats html

✍️ Custom Checks Metadata
Now you can override the all the metadata fields from a check using the --custom-checks-metadata-file custom_checks_metadata.yaml flag.

See more in https://docs.prowler.cloud/en/latest/tutorials/custom-checks-metadata/

🔧 Other issues and bug fixes solved for all the cloud providers

Features

  • feat(aws): Add new kafka service by @puchy22 in #4001
  • feat(aws): Lightsail new service and checks by @puchy22 in #3919
  • feat(aws): New Storage Gateway FileShare KMS CMK Check by @madereddy in #4082
  • feat(aws): new dynamodb_table_cross_account_access check by @sergargar in #3932
  • feat(cognito): Add new checks related with cognito service by @pedrooot in #3898
  • feat(compliance): Update RBI compliance framework by @pedrooot in #4026
  • feat(custom-checks-metadata): add new fields by @pedrooot in #3976
  • feat(dashboard): add idgrupocontrol description in compliance page for ens by @pedrooot in #3910
  • feat(dashboard): add more fields to dashboard overview component by @pedrooot in #4084
  • feat(dashboard): Improve table overview by @pedrooot in #4015
  • feat(dashboard): Multiple changes in compliance page by @pedrooot in #4051
  • feat(ec2): Add 2 new checks + fixers related with EC2 service by @pedrooot in #3827
  • feat(ec2): add EC2 Security group check to verify if at least one port is opened by @sergargar in #3962
  • feat(ec2): New EC2 AWS check (#852) by @rieck-srlabs in #4076
  • feat(ec2): add checks for EC2 instances with exposed ports to the internet by @sergargar in #4029
  • feat(eventbridge): add EventBridge checks by @sergargar in #4020
  • feat(json-ocsf): Add new fields for py-ocsf 0.1.0 by @pedrooot in #3853
  • feat(Kafka): New Kafka AWS checks by @puchy22 in #4021
  • feat(kubernetes): Handle empty --kubeconfig-file by @pedrooot in #3980
  • feat(logo): add new Prowler logo! by @sergargar in #4090
  • feat(output): Add HTML outputs to Prowler by @pedrooot in #4005
  • feat(rds): Add AWS RDS clusters to transport encryption check by @madereddy in #4028
  • feat(rds): Add RDS certificate expiration check by @madereddy in #4002
  • feat(sns): sns topics no http subscriptions by @Davidm4r in #4095

Fixes

Chores

  • chore(aws): Add failed_checks to track by @kagahd in #4018
  • chore(aws): cleanup aws test cases and standardize checks by @madereddy in #4053
  • chore(aws): cleanup aws test cases by @madereddy in #4049
  • chore(check): global_provider is not needed here by @jfagoagas in #3828
  • chore(CLI): start working on CLI by @pedrooot in #4067
  • chore(compliance): change security group any port check by @sergargar in #4019
  • chore(docs): remove unnecessary line by @sergargar in #3933
  • chore(docs): solve some issues by @sergargar in #3868
  • chore(docs): update BridgeCrew links in metadata to our local docs link by @sergargar in #3858
  • chore(docs): add mapping of CSV headers with providers by @sergargar in #4118
  • chore(docs): Update docs related with the Prowler Dashboard by @pedrooot in #4113
  • chore(execute_checks): remove mutelist since it is within the provider by @jfagoagas in #4052
  • chore(gcp): handle list projects API call errors by @sergargar in #3849
  • chore(get_tagged_resources): Add return value type hint by @mlmerchant in #3860
  • chore(global_provider): Move methods to class as static by @jfagoagas in #3896
  • chore(IAM): Improve IAM checks for Azure by @puchy22 in #4061
  • chore(issue-template): Modify issue template to add logs by @pedrooot in #3924
  • chore(labeler): Add cli label by @jfagoagas in #4069
  • chore(logo): resize logo in README and update favicon and architecture by @sergargar in #4092
  • chore(logo-dashboard): update logo in dashboard by @pedrooot in #4088
  • chore(logo-html): update html logo by @pedrooot in #4089
  • chore(mitre azure): add mapping to mitre for azure provider by @n4ch04 in #3857
  • chore(mitre gcp): add mitre mapping for gcp by @n4ch04 in #3899
  • chore(mutelist): improve default AWS mutelist with ControlTower by @sergargar in #3904
  • ch...
Read more

Contributors

seizans, toniblyx, and 15 other contributors
Assets 2

Prowler 3.16.5 - Back in the Village

21 May 17:44
@sergargar sergargar
3.16.5
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
7a290e7
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 3.16.5 - Back in the Village

What's Changed

Chores

  • chore(backport): include latest changes of v4 in v3 by @sergargar in #4027
    • fix(rds): add ReadReplicaSourceDBInstanceIdentifier to db_instance (#3912)
    • feat(ec2): add EC2 Security group check to verify if at least one port is open (#3962)
    • chore(regions_update): Changes in regions for AWS services. (#3965)
    • chore(rds): support more AWS RDS DB Instance engines in encryption check (#3968)
    • chore(regions_update): Changes in regions for AWS services. (#3971)
    • chore(deps): remove mrestazure deprecated (#3974)
    • chore(regions_update): Changes in regions for AWS services. (#4009)
    • fix(elasticache): make previous comprobations for subnet (#4014)
    • chore(regions_update): Changes in regions for AWS services. (#4017)
    • chore(compliance): change security group any port check. (#4019)
    • chore(regions_update): Changes in regions for AWS services. (#4023)
  • chore(safety-v3): ignore pip vulnerability by @sergargar in #4008

Dependencies

Full Changelog: 3.16.4...3.16.5

Contributors

dependabot and sergargar
Assets 2

Prowler 3.16.4 - Back in the Village

08 May 10:20
@sergargar sergargar
3.16.4
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
0f2dfd3
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 3.16.4 - Back in the Village

What's Changed

Chores

  • chore(v3): backport latest v4 changes by @sergargar in #3916

    • test(gcp): Add new services tests to GCP (#3796)
    • fix(aws): not show findings when AccessDenieds (#3803)
    • fix(metadata): remove semicolons from metadata texts (#3830)
    • chore(regions_update): Changes in regions for AWS services. (#3848)
    • chore(gcp): handle list projects API call errors (#3849)
    • chore(regions_update): Changes in regions for AWS services. (#3855)
    • fix(KeyError): handle CacheSubnetGroupName keyError (#3856)
    • chore(docs): update BridgeCrew links in metadata to our local docs li…
    • chore(regions_update): Changes in regions for AWS services. (#3862)
    • fix(efs): check all public conditions (#3872)
    • docs(unit-testing): Add GCP services documentation (#3901)
    • fix(vpc): solve subnet route key error (#3902)
    • fix(vpc): solve AWS principal key error (#3903)
    • fix(ec2): handle non-existing private ip (#3906)
    • chore(regions_update): Changes in regions for AWS services. (#3908)
    • test(gcp): Add Compute client the project_ids parameter (#3918)
    • chore(regions_update): Changes in regions for AWS services. (#3915)
    • fix(efs): change public EFS check metadata (#3917)
    • chore(regions_update): Changes in regions for AWS services. (#3929)

  • chore(backport): Add latest changes by @jfagoagas in #3960

    • chore(regions_update): Changes in regions for AWS services. (#3957)
    • fix(s3): Handle if regional client is present (#3959)

Fixes

  • fix(aws): Extend opensearch_service_domains_use_cognito_authentication_for_kibana with SAML by @kagahd in #3861
  • fix(html): Produce valid HTML output in Prowler v3 by @rieck-srlabs in #3863

Dependencies

Full Changelog: 3.16.3...3.16.4

Contributors

jfagoagas, kagahd, and 3 other contributors
Assets 2

Prowler 3.16.3 - Back in the Village

24 Apr 08:59
@sergargar sergargar
3.16.3
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
3521514
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 3.16.3 - Back in the Village

What's Changed

Fixes

Chores

Full Changelog: 3.16.2...3.16.3

Contributors

mlmerchant, jfagoagas, and 4 other contributors
Assets 2

Prowler 4.1.0 - Aces High

19 Apr 06:44
@jfagoagas jfagoagas
4.1.0
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
ebf9be3
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.1.0 - Aces High

There goes the siren that warns of the air raid
There comes the sound of the guns sending flak
Out for the scramble we've got to get airborne
Got to get up for the coming attack

Here we have Prowler 4.1.0 Aces High 🚀 ready to help you improve your Cloud security with this Iron Maiden song.

New features to highlight in this version

🖊️ GCP flags to list, exclude/include Project IDs

  • Now the --project-ids flag allows you to use *, as a prefix or suffix, to include the project ids you want to scan.
  • The --list-project-ids allows you to copy and paste values and know the accessible projects to be scanned with the provided crendentials.
  • The --excluded-project-ids flag allows you to exclude the projects to be scanned and it also accepts *.

🔨 13 new fixers (remediations) for AWS

  • We have included 13 new fixers for services like Access Analyzer, CloudTrail, GuardDuty, KMS, Security Hub and IAM. You can get all the available fixers with prowler aws --list-fixers then go per check to remediate the failed findings by prowler aws --check guardduty_is_enabled --fixer.
  • Some of those fixers are configurable using the fixer_config.yaml file present in the prowler/config folder. You can read more about the fixer and how to configure it here

📘 New fields for the OCSF Detection Finding

  • We have included the check_id, compliance and all the Prowler check's metadata within the OCSF Detection Finding that Prowler generates in the .ocsf.json output file. You can read more about this finding format here.

🔧 Other issues and bug fixes solved for all the cloud providers

Features

  • feat(gcp): improve Google Projects scan customization by @sergargar in #3741

Fixes

Chores

Dependencies

Documentation

  • docs(dashboard): Indicate how to change port by @jfagoagas in #3729
  • docs(dashboard): format list by @jfagoagas in #3732
  • docs: readme points to docs.prowler.com to learn everything by @jfagoagas in #3707
  • chore(docs): Support toggle light/dark mode by @puchy22 in #3744
  • docs(outputs): update docs for v4 outputs by @pedrooot in #3734
  • docs(threat-detection): Add threat-detection docs by @pedrooot in #3757
  • docs(compliance): Change images for compliance by @pedrooot in #3760
  • docs(devel-guide): Adding some improves and clarifications to developer guide by @puchy22 in #3749
  • docs(devel-guide): Add provider section and remove audit_info section by @puchy22 in #3756
  • docs(unit-testing): Update the unit testing section by @puchy22 in #3764
  • docs(developer guide): fix broken link by @mlmerchant in #3799
  • docs(ocsf): Add missing fields to the example by @jfagoagas in #3816

New Contributors

Full Changelog: 4.0.1...4.1.0

Contributors

mlmerchant, jfagoagas, and 5 other contributors
Assets 2

Prowler 3.16.2 - Back in the Village

15 Apr 08:10
@jfagoagas jfagoagas
3.16.2
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
51136fe
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 3.16.2 - Back in the Village

What's Changed

Fixes

  • fix(aws_lambda): Update obsolete lambda runtimes for v3 by @pedrooot in #3736
  • fix(wafv2): Handle WAFNonexistentItemException v3 by @pedrooot in #3762

Chores

Full Changelog: 3.16.1...3.16.2

Contributors

jfagoagas, dependabot, and 4 other contributors
Assets 2

Prowler 4.0.1 - The Trooper

09 Apr 10:27
@sergargar sergargar
4.0.1
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
5e52ed8
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 4.0.1 - The Trooper

What's Changed

Fixes

Chores

Documentation

Dependencies

Full Changelog: 4.0.0...4.0.1

Contributors

jfagoagas, dependabot, and 4 other contributors
Assets 2

Prowler 3.16.1 - Back in the Village

09 Apr 10:37
@sergargar sergargar
3.16.1
This tag was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
5508043
This commit was signed with the committer’s verified signature.
sergargar Sergio Garcia
GPG key ID: 8E4745A2F6F806A7
Learn about vigilant mode.
Compare
Choose a tag to compare
Prowler 3.16.1 - Back in the Village

What's Changed

Fixes

Chores

Docs

  • docs(poetry): Add poetry command to install doc dependencies by @puchy22 in #3664
  • docs(azure): test services in Azure added by @Hugo966 in #3649

Builds

  • build(deps): bump msgraph-sdk from 1.1.0 to 1.2.0 by @dependabot in #3605
  • chore(deps): bump google-api-python-client from 2.124.0 to 2.125.0 by @dependabot in #3695
  • chore(deps): bump pydantic from 1.10.14 to 1.10.15 by @dependabot in #3716
  • chore(deps): bump trufflesecurity/trufflehog from 3.71.2 to 3.72.0 by @dependabot in #3694
  • chore(deps-dev): bump moto from 5.0.4 to 5.0.5 by @dependabot in #3696

Full Changelog: 3.16.0...3.16.1

Contributors

jfagoagas, dependabot, and 5 other contributors
Assets 2