prowler
https://github.com/prowler-cloud/prowler
Python
Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuous monitoring, security assessments & audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST C
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported1 Subscribers
Add a CodeTriage badge to prowler
Help out
- Issues
- feat(bedrock): add bedrock_guardrail_iam_condition_enforcement_enabled check
- EC2 security group fixers revoke the whole ingress rule, not just 0.0.0.0/0 and ::/0
- Azure VM inventory stops when optional SDK security flags are null
- IAM password policy fixers fail with ParamValidationError when the policy is missing or has unset fields
- sqs_queues_not_publicly_accessible fixer replaces the whole queue policy
- `aks_network_policy_enabled` passes AKS clusters without a network policy
- cloudtrail_multi_region_enabled fixer creates a trail but never starts logging
- fix(ec2): revoke only 0.0.0.0/0 and ::/0 in security group fixers
- fix(sdk): retain Azure VMs with nullable security flags
- fix(iam): omit unset fields in password policy fixers
- Docs
- Python not yet supported