chore(awslambda): Enhance function public access check called from other resource #4679
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
github-actions
bot
added
the
provider/aws
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
...bda/awslambda_function_not_publicly_accessible/awslambda_function_not_publicly_accessible.py
Fixed
Show fixed
Hide fixed
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #4679 +/- ##
==========================================
+ Coverage 89.09% 89.13% +0.04%
==========================================
Files 913 921 +8
Lines 27913 28156 +243
==========================================
+ Hits 24869 25098 +229
- Misses 3044 3058 +14 ☔ View full report in Codecov by Sentry. |
|
You can check the documentation for this PR here -> Prowler Documentation |
puchy22
force-pushed
the
PRWLR-4354-enhance-aws-lambda-public-access-check
branch
from
a75e605
to
d50c5c2
Compare
…354-enhance-aws-lambda-public-access-check
|
You can check the documentation for this PR here -> Prowler Documentation |
|
You can check the documentation for this PR here -> Prowler Documentation |
puchy22
changed the title
sergargar
reviewed
Aug 16, 2024
...bda/awslambda_function_not_publicly_accessible/awslambda_function_not_publicly_accessible.py
Outdated
Show resolved
Hide resolved
...bda/awslambda_function_not_publicly_accessible/awslambda_function_not_publicly_accessible.py
Fixed
Show fixed
Hide fixed
sergargar
reviewed
Aug 16, 2024
...bda/awslambda_function_not_publicly_accessible/awslambda_function_not_publicly_accessible.py
Outdated
Show resolved
Hide resolved
sergargar
reviewed
Aug 16, 2024
...da_function_not_publicly_accessible/awslambda_function_not_publicly_accessible.metadata.json
Outdated
Show resolved
Hide resolved
...bda/awslambda_function_not_publicly_accessible/awslambda_function_not_publicly_accessible.py
Dismissed
Show dismissed
Hide dismissed
sergargar
deleted the
PRWLR-4354-enhance-aws-lambda-public-access-check
branch
github-actions
bot
added
the
was-backported
💚 All backports created successfully
Questions ?Please refer to the Backport tool documentation and see the Github Action logs for details |
sergargar
pushed a commit
that referenced
this pull request
Aug 19, 2024
…her resource (#4679) Co-authored-by: Sergio Garcia <[email protected]> (cherry picked from commit 5cc9554)
sergargar
pushed a commit
that referenced
this pull request
Aug 19, 2024
…her resource (#4679) Co-authored-by: Sergio Garcia <[email protected]> (cherry picked from commit 5cc9554)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Context
Include the scenario where a function is exposed via other AWS resources (ALB and API Gateway). For now check only ensures that policies were not permissive in general cases, now it checks that it cannot be invoked by other resources.
Description
Checklist
License
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.