New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Updates Mondoo AWS Security with variants, remediation, docs #482

Open

scottford-io wants to merge 6 commits into main from scottford/aws-variant-v4

+3,014 −1,249

Contributor

scottford-io commented Mar 6, 2025

This PR adds the following:

✅ - Updates version to 4.0.0
✅ - Updated documentation for all checks to include rationale, risk, and more! 🚀
✅ - Moves all filters to indvidual checks to support variants 🚀
✅ - Adds Terraform HCL, Terraform Plan, and Terraform State 🚀
✅ - Adds new remediation steps for console, cli, Terraform, and Cloudformation 🚀


          Updates Mondoo AWS Security with variants, remediation, docs

d4549f4

Signed-off-by: scottford-io <[email protected]>

scottford-io requested review from tas50 and mm-weber

March 6, 2025 00:41

This comment has been minimized.

Sign in to view

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

This comment has been minimized.

Sign in to view

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

tas50 reviewed

View reviewed changes

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved

This comment has been minimized.

Sign in to view


          Adds security group checks

d99b021

Signed-off-by: scottford-io <[email protected]>

scottford-io force-pushed the scottford/aws-variant-v4 branch from e722220 to d99b021 Compare

March 6, 2025 19:51

This comment has been minimized.

Sign in to view

This comment has been minimized.

Sign in to view

This comment has been minimized.

Sign in to view


          adds type to code blocks

28561ff

Signed-off-by: scottford-io <[email protected]>

scottford-io force-pushed the scottford/aws-variant-v4 branch from ddf0c2a to 28561ff Compare

March 6, 2025 22:15

This comment has been minimized.

Sign in to view

scottford-io added 2 commits

March 6, 2025 14:17


          Updates spell check

eafdd70

Signed-off-by: scottford-io <[email protected]>


          adds filters to iam check

b7bff0c

Signed-off-by: scottford-io <[email protected]>

mm-weber requested changes

View reviewed changes

Contributor

mm-weber left a comment •

edited

Loading

Great work @scottford-io !

I'm working on that linter.
There's one asset filter that needs to go.
Other than that. ~~Heads~~Hats off to you :)

core/mondoo-aws-security.mql.yaml Outdated Show resolved Hide resolved


          Update core/mondoo-aws-security.mql.yaml

133a2b4

Co-authored-by: Manuel Weber <[email protected]>
Signed-off-by: Scott Ford <[email protected]>

Contributor Author

scottford-io commented Mar 17, 2025

@mm-weber Thanks for your help here. Do you need anything else from me?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet