-
Notifications
You must be signed in to change notification settings - Fork 1.7k
feat(compliance): add new Prowler Threat Score Compliance Framework #7603
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat(compliance): add new Prowler Threat Score Compliance Framework #7603
Conversation
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## master #7603 +/- ##
==========================================
- Coverage 78.53% 75.33% -3.20%
==========================================
Files 135 69 -66
Lines 6438 4412 -2026
==========================================
- Hits 5056 3324 -1732
+ Misses 1382 1088 -294
Flags with carried forward coverage won't be shown. Click here to find out more.
🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please @pedrooot, add the changelog.
Also, change the colors of the summary table to use the same ones as the rest of compliance frameworks and remove the duplicate table:
It has to be like:
Done @MrCloudSec thanks for the heads up! |
…e-compliance-for-aws
…7603) Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
…7603) Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
…7603) Co-authored-by: MrCloudSec <hello@mistercloudsec.com>
Description
This PR adds new
Prowler ThreatScore Compliance
, this compliance is divided in 4 main pillars and the regarding sub-pillars. In this compliance, each requirement has aLevelOfRisk
from 1 to 5 depending on the quantity of damage could create the misconfiguration from the requirement.Pillars:
1. Identity and Access Management
2. Attack Surface
3. Forensic Readiness
4. Encryption
Sub-Pillars:
1.1 Authentication
1.2 Authorization
1.3 Privilege Escalation Prevention
2.1 Network
2.2 Storage
2.3 Application
3.1 Logging
3.2 Retention
3.3 Monitoring
4.1 In-Transit
4.2 At-Rest
Output Samples - CLI:

Output Samples - Dashboard:

Checklist
API
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.