Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CIS Benchmark 2.0.0 update #113

Merged
merged 254 commits into from
Dec 20, 2023
Merged

CIS Benchmark 2.0.0 update #113

merged 254 commits into from
Dec 20, 2023
This pull request is big! We’re only showing the most recent 250 commits.

Commits on Nov 9, 2023

  1. add cis tags

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    55642f6 View commit details
    Browse the repository at this point in the history

  2. Update aws-foundations-cis-1.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    e5a3d05 View commit details
    Browse the repository at this point in the history

  3. Update aws-foundations-cis-1.2.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    21914db View commit details
    Browse the repository at this point in the history

  4. Update aws-foundations-cis-1.3.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    881fbc9 View commit details
    Browse the repository at this point in the history

  5. Update aws-foundations-cis-1.4.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    0d28100 View commit details
    Browse the repository at this point in the history

  6. Update aws-foundations-cis-1.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    889d98d View commit details
    Browse the repository at this point in the history

  7. Update aws-foundations-cis-1.2.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    14bdd4d View commit details
    Browse the repository at this point in the history

  8. Update aws-foundations-cis-1.3.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    01285d0 View commit details
    Browse the repository at this point in the history

  9. Update aws-foundations-cis-1.5.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    645dcb6 View commit details
    Browse the repository at this point in the history

  10. Update aws-foundations-cis-1.8.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    c852e74 View commit details
    Browse the repository at this point in the history

  11. Update aws-foundations-cis-1.9.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    e41b12b View commit details
    Browse the repository at this point in the history

  12. Update aws-foundations-cis-1.10.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    0f20542 View commit details
    Browse the repository at this point in the history

  13. Update aws-foundations-cis-1.11.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    a59a868 View commit details
    Browse the repository at this point in the history

  14. Update aws-foundations-cis-1.12.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    daaec89 View commit details
    Browse the repository at this point in the history

  15. Update aws-foundations-cis-1.14.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    774c81b View commit details
    Browse the repository at this point in the history

  16. Update aws-foundations-cis-1.15.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    a54f5c6 View commit details
    Browse the repository at this point in the history

  17. Update aws-foundations-cis-1.16.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    c516e04 View commit details
    Browse the repository at this point in the history

  18. Update aws-foundations-cis-1.17.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    c1f44c2 View commit details
    Browse the repository at this point in the history

  19. Update aws-foundations-cis-1.18.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    ac3d416 View commit details
    Browse the repository at this point in the history

  20. Update aws-foundations-cis-3.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    80dd77e View commit details
    Browse the repository at this point in the history

  21. Update aws-foundations-cis-3.2.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    41b4a7b View commit details
    Browse the repository at this point in the history

  22. Update aws-foundations-cis-3.3.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    ed7b83d View commit details
    Browse the repository at this point in the history

  23. Update aws-foundations-cis-3.4.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    59c0df9 View commit details
    Browse the repository at this point in the history

  24. Update aws-foundations-cis-3.5.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    3abc253 View commit details
    Browse the repository at this point in the history

  25. Update aws-foundations-cis-3.6.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    a1e89c6 View commit details
    Browse the repository at this point in the history

  26. Update aws-foundations-cis-3.7.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    bffa059 View commit details
    Browse the repository at this point in the history

  27. Update aws-foundations-cis-3.8.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    1c1663e View commit details
    Browse the repository at this point in the history

  28. Update aws-foundations-cis-3.9.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    eabb77f View commit details
    Browse the repository at this point in the history

  29. Update aws-foundations-cis-4.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    5759c85 View commit details
    Browse the repository at this point in the history

  30. Update aws-foundations-cis-4.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    229e5de View commit details
    Browse the repository at this point in the history

  31. Update aws-foundations-cis-4.2.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    7ce5591 View commit details
    Browse the repository at this point in the history

  32. Update aws-foundations-cis-4.3.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    f292afe View commit details
    Browse the repository at this point in the history

  33. Update aws-foundations-cis-4.4.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    d271b78 View commit details
    Browse the repository at this point in the history

  34. Update aws-foundations-cis-4.5.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    508a9fa View commit details
    Browse the repository at this point in the history

  35. Update aws-foundations-cis-4.6.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    9a8f724 View commit details
    Browse the repository at this point in the history

  36. Update aws-foundations-cis-4.7.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    f236bff View commit details
    Browse the repository at this point in the history

  37. Update aws-foundations-cis-4.8.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    12a2bee View commit details
    Browse the repository at this point in the history

  38. Update aws-foundations-cis-4.9.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    ca1e757 View commit details
    Browse the repository at this point in the history

  39. Update aws-foundations-cis-4.10.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    a4c399d View commit details
    Browse the repository at this point in the history

  40. Update aws-foundations-cis-4.11.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    58d2d21 View commit details
    Browse the repository at this point in the history

  41. Update aws-foundations-cis-4.12.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    9b2a07c View commit details
    Browse the repository at this point in the history

  42. Update aws-foundations-cis-4.13.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    a579b0d View commit details
    Browse the repository at this point in the history

  43. Update aws-foundations-cis-4.14.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    94716fc View commit details
    Browse the repository at this point in the history

  44. Update aws-foundations-cis-4.15.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    3acac09 View commit details
    Browse the repository at this point in the history

  45. Update aws-foundations-cis-4.16.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    dfc5857 View commit details
    Browse the repository at this point in the history

  46. Update aws-foundations-cis-5.4.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    8056d41 View commit details
    Browse the repository at this point in the history

  47. Update aws-foundations-cis-5.5.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    fa2f7ef View commit details
    Browse the repository at this point in the history

  48. Update aws-foundations-cis-1.6.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    fb23d8e View commit details
    Browse the repository at this point in the history

  49. Update aws-foundations-cis-1.7.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    f0dad0f View commit details
    Browse the repository at this point in the history

  50. Update aws-foundations-cis-1.13.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    10efeea View commit details
    Browse the repository at this point in the history

  51. Update aws-foundations-cis-1.19.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    343329b View commit details
    Browse the repository at this point in the history

  52. Update aws-foundations-cis-1.20.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    eaf2bf3 View commit details
    Browse the repository at this point in the history

  53. Update aws-foundations-cis-1.21.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    1e9a3e7 View commit details
    Browse the repository at this point in the history

  54. Update aws-foundations-cis-1.22.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    0ad7386 View commit details
    Browse the repository at this point in the history

  55. Update aws-foundations-cis-2.1.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    d788acc View commit details
    Browse the repository at this point in the history

  56. Update aws-foundations-cis-2.1.2.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    94b142d View commit details
    Browse the repository at this point in the history

  57. Update aws-foundations-cis-2.1.3.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    7eb34dc View commit details
    Browse the repository at this point in the history

  58. Update aws-foundations-cis-2.1.4.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    9707ff0 View commit details
    Browse the repository at this point in the history

  59. Update aws-foundations-cis-2.2.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    d0b2212 View commit details
    Browse the repository at this point in the history

  60. Update aws-foundations-cis-2.3.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    c74a51f View commit details
    Browse the repository at this point in the history

  61. Update aws-foundations-cis-2.3.2.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    cc61dc5 View commit details
    Browse the repository at this point in the history

  62. Update aws-foundations-cis-2.3.3.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    69154b8 View commit details
    Browse the repository at this point in the history

  63. Update aws-foundations-cis-2.4.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    4fbe0de View commit details
    Browse the repository at this point in the history

  64. Update aws-foundations-cis-3.10.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    8364485 View commit details
    Browse the repository at this point in the history

  65. Update aws-foundations-cis-3.11.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    02f7fda View commit details
    Browse the repository at this point in the history

  66. Update aws-foundations-cis-5.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    cfd26ad View commit details
    Browse the repository at this point in the history

  67. Update aws-foundations-cis-5.1.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    e6b4337 View commit details
    Browse the repository at this point in the history

  68. Update aws-foundations-cis-5.2.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    e163d50 View commit details
    Browse the repository at this point in the history

  69. Update aws-foundations-cis-5.3.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    09d247d View commit details
    Browse the repository at this point in the history

  70. Update aws-foundations-cis-5.6.rb

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    d7decfe View commit details
    Browse the repository at this point in the history

  71. initial 2.0 commit

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    18ac59c View commit details
    Browse the repository at this point in the history

  72. delete old 1.2 controls

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    e74efba View commit details
    Browse the repository at this point in the history

  73. Update inspec.yml

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    0cb53b3 View commit details
    Browse the repository at this point in the history

  74. Update inspec.yml

    @ejaronne
    ejaronne authored Nov 9, 2023
    Configuration menu
    Copy the full SHA
    247c475 View commit details
    Browse the repository at this point in the history

Commits on Nov 10, 2023

  1. added a simple worklfow for testing the profile 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    08a1eb8 View commit details
    Browse the repository at this point in the history

  2. moved the Gemfile to the correct location 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    f101eff View commit details
    Browse the repository at this point in the history

  3. fixed bug in Gemfile and .gemrc 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    1adbb39 View commit details
    Browse the repository at this point in the history

  4. removed yq for now 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    f6c4dac View commit details
    Browse the repository at this point in the history

  5. added an inspec vendor prior to the check 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    07c7824 View commit details
    Browse the repository at this point in the history

  6. added a bit more debuging on our inspec env 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    0bbc704 View commit details
    Browse the repository at this point in the history

  7. fixed inspec exec exit code, added quotes to display file names 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    df0f931 View commit details
    Browse the repository at this point in the history

  8. added a blank inputs and added it to the workflow 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    cd12ff0 View commit details
    Browse the repository at this point in the history

  9. fixed inputs 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    e942323 View commit details
    Browse the repository at this point in the history

  10. Update inspec.yml 

    set default value to null for user-defined inputs.
    @ejaronne
    ejaronne authored Nov 10, 2023
    Configuration menu
    Copy the full SHA
    6e16db4 View commit details
    Browse the repository at this point in the history

  11. fixed tyop in the input variable 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 10, 2023
    Configuration menu
    Copy the full SHA
    6d1b02d View commit details
    Browse the repository at this point in the history

  12. Update README.md

    @ejaronne
    ejaronne authored Nov 10, 2023
    Configuration menu
    Copy the full SHA
    6198f47 View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2023

  1. ran cookstyle -a and added skip messages for controls without code yet 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 11, 2023
    Configuration menu
    Copy the full SHA
    2a56937 View commit details
    Browse the repository at this point in the history

  2. added enhanced-outcomes for easier review 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 11, 2023
    Configuration menu
    Copy the full SHA
    b1f521e View commit details
    Browse the repository at this point in the history

Commits on Nov 13, 2023

  1. Fixes and Updates to Resources from the Resource Pack 

    * broke out the AWS Account Resources into seperate
- aws_primary_contact
- aws_billing_contact
- aws_operations_contact
- aws_security_contact

* updates 1.1 and 1.2 per the resource changes

* linted profile with 'cookstyle -A ...'

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 13, 2023
    Configuration menu
    Copy the full SHA
    6b174e8 View commit details
    Browse the repository at this point in the history

  2. fixed depends, linted with rufo 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 13, 2023
    Configuration menu
    Copy the full SHA
    26197f1 View commit details
    Browse the repository at this point in the history

  3. Fixed profile error and typo 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 13, 2023
    Configuration menu
    Copy the full SHA
    1c693fe View commit details
    Browse the repository at this point in the history

  4. updated the threshold while I am fixing a bug with a resource or two 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 13, 2023
    Configuration menu
    Copy the full SHA
    d31b355 View commit details
    Browse the repository at this point in the history

  5. Removed Pipeline Steps while in development 

    * removed creating profile.json
* removed inspec-plugin-list

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 13, 2023
    Configuration menu
    Copy the full SHA
    3148038 View commit details
    Browse the repository at this point in the history

Commits on Nov 14, 2023

  1. fixed slow controls 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 14, 2023
    Configuration menu
    Copy the full SHA
    5e2f97b View commit details
    Browse the repository at this point in the history

  2. fixed branch name on worklfow 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 14, 2023
    Configuration menu
    Copy the full SHA
    5ac3318 View commit details
    Browse the repository at this point in the history

  3. added chef lisense key for testing 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 14, 2023
    Configuration menu
    Copy the full SHA
    f1f246c View commit details
    Browse the repository at this point in the history

Commits on Nov 18, 2023

  1. updated controls for account given resource changes 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 18, 2023
    Configuration menu
    Copy the full SHA
    99c603e View commit details
    Browse the repository at this point in the history

  2. added senstive to the first two controls 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 18, 2023
    Configuration menu
    Copy the full SHA
    db9dda0 View commit details
    Browse the repository at this point in the history

Commits on Nov 19, 2023

  1. marked MFA data sensitive 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 19, 2023
    Configuration menu
    Copy the full SHA
    49e9d45 View commit details
    Browse the repository at this point in the history

  2. added tests for 5.6 and added aws docs reference 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 19, 2023
    Configuration menu
    Copy the full SHA
    f0b5f7a View commit details
    Browse the repository at this point in the history

  3. Simplified controls, added tests, fixed inputs 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 19, 2023
    Configuration menu
    Copy the full SHA
    dd94025 View commit details
    Browse the repository at this point in the history

Commits on Nov 20, 2023

  1. clarifying manual check in 1.3 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    e154996 View commit details
    Browse the repository at this point in the history

  2. creating .gitignore 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    32dad63 View commit details
    Browse the repository at this point in the history

  3. finishing 1.13 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    95ee852 View commit details
    Browse the repository at this point in the history

  4. 1.7 -- expect syntax still has ugly fail messages 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    a0a797b View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2023

  1. fixed inspec.yml, split out 1.7 into multiple 'it' blocks for clarity 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    9f99e86 View commit details
    Browse the repository at this point in the history

  2. updating 1.18 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    21d83ac View commit details
    Browse the repository at this point in the history

  3. fixing 1.7 when no input is set 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    f251c30 View commit details
    Browse the repository at this point in the history

  4. adding 1.19 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    1d0f30c View commit details
    Browse the repository at this point in the history

  5. adding test to define what the aws_iam_access_analyzer should be able… 

    … to do

Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    d94f9c8 View commit details
    Browse the repository at this point in the history

  6. commenting out control that doesnt have a resource yet to keep pipeli… 

    …ne working

Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    17a9cd8 View commit details
    Browse the repository at this point in the history

  7. adding 1.21 as manual review because it requires knowing if each IAM … 

    …role represents an individual person or not, which isn't something AWS knows

Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    71252e2 View commit details
    Browse the repository at this point in the history

  8. added 1.22 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    0640d4d View commit details
    Browse the repository at this point in the history

  9. adding disable_slow_controls caveat to 1.7 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    4a170b4 View commit details
    Browse the repository at this point in the history

  10. adding 1.6 -- basically a repeat of 1.5 but with an added check on wh… 

    …at type of mfa device is in use

Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    3d06b04 View commit details
    Browse the repository at this point in the history

Commits on Nov 22, 2023

  1. adding new input to catch the case of a third party data management tool 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    28ae11e View commit details
    Browse the repository at this point in the history

  2. psuedocode for 2.1.3 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    b2fc743 View commit details
    Browse the repository at this point in the history

  3. updates for 1.20 and a few others 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    cf359b3 View commit details
    Browse the repository at this point in the history

  4. psuedocode for 2.1.1 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    156697c View commit details
    Browse the repository at this point in the history

  5. fixing missing block end 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    a7a00d7 View commit details
    Browse the repository at this point in the history

  6. using existing aws_s3_bucket resource to do 2.1.1 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 22, 2023
    Configuration menu
    Copy the full SHA
    dc78165 View commit details
    Browse the repository at this point in the history

Commits on Nov 23, 2023

  1. Mostly Done on 1.20 with some polish still needed 

    - updated aws_region(s) plural and signle resource to include opt_in
  data
- updated docs for aws_regions(s)
- added the ability for the aws_iam_access_analyzer resource to accept
  its `region` param
- TODO: fix aws_iam_access_analyzer param error checking with the
  addition of the new second `region`

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    2309be7 View commit details
    Browse the repository at this point in the history

  2. Linting with rubocop 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    419a01c View commit details
    Browse the repository at this point in the history

Commits on Nov 24, 2023

  1. Updates to Gemfile and Linting 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 24, 2023
    Configuration menu
    Copy the full SHA
    f244135 View commit details
    Browse the repository at this point in the history

Commits on Nov 26, 2023

  1. CIS 2.1.1 

    - worked out most of the logical states
- sitll need to work out if we only have a list of passing buckets and
  want to list buckets that were skipped but don't want to 'fail' the
control overall.
- needs to be peer reviewed by 'other than author'

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 26, 2023
    Configuration menu
    Copy the full SHA
    2801dc6 View commit details
    Browse the repository at this point in the history

  2. added review question 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 26, 2023
    Configuration menu
    Copy the full SHA
    d5d54ac View commit details
    Browse the repository at this point in the history

  3. added exempt KMS key list and added to 3.8 

    Fixes #109

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 26, 2023
    Configuration menu
    Copy the full SHA
    3964178 View commit details
    Browse the repository at this point in the history

  4. added exempt KMS key list and added to 3.8 

    Fixes #109

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 26, 2023
    Configuration menu
    Copy the full SHA
    ad515a1 View commit details
    Browse the repository at this point in the history

Commits on Nov 27, 2023

  1. clarifying the Not Applicable statement a bit 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 27, 2023
    Configuration menu
    Copy the full SHA
    302bdd2 View commit details
    Browse the repository at this point in the history

  2. adding control for 2.1.2, borrowing pattern from 2.1.2 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 27, 2023
    Configuration menu
    Copy the full SHA
    53ae46e View commit details
    Browse the repository at this point in the history

  3. rewriting 5.5 to use only_if instead of if/else 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 27, 2023
    Configuration menu
    Copy the full SHA
    799d94d View commit details
    Browse the repository at this point in the history

Commits on Nov 28, 2023

  1. adding psuedocode for 2.1.4 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 28, 2023
    Configuration menu
    Copy the full SHA
    6a6874e View commit details
    Browse the repository at this point in the history

  2. first pass for 2.3.1 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 28, 2023
    Configuration menu
    Copy the full SHA
    de5a022 View commit details
    Browse the repository at this point in the history

  3. removing redundant test step from 2.3.1, adding 2.3.2 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 28, 2023
    Configuration menu
    Copy the full SHA
    b6a1261 View commit details
    Browse the repository at this point in the history

  4. commenting out 2.1.4 until it gets resource support so the pipeline w… 

    …orks

Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 28, 2023
    Configuration menu
    Copy the full SHA
    0ff816f View commit details
    Browse the repository at this point in the history

Commits on Nov 29, 2023

  1. updating Gemfile to unpin InSpec and add aws-sdk-analyzer and train-k… 

    …ubernetes

Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    acde81e View commit details
    Browse the repository at this point in the history

  2. adding 2.3.3 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    66a9c9d View commit details
    Browse the repository at this point in the history

  3. adding 2.4.1, modeled after the s3 bucket control code 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    ef0f732 View commit details
    Browse the repository at this point in the history

  4. adding exempt and single rds inputs, fixing some bad references in 2.4.1 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    a8697c2 View commit details
    Browse the repository at this point in the history

  5. updated RDS controls to use the same robust pattern as EFS and S3 checks 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    3b806e1 View commit details
    Browse the repository at this point in the history

  6. fixing typos in RDS controls 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    ad47859 View commit details
    Browse the repository at this point in the history

  7. putting a floor on InSpec version, fixing typo on 2.3.x 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    ae50bc5 View commit details
    Browse the repository at this point in the history

  8. ensuring exempt rds instances not included in list of fails 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    beb3b96 View commit details
    Browse the repository at this point in the history

  9. debugging 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 29, 2023
    Configuration menu
    Copy the full SHA
    f7b81bd View commit details
    Browse the repository at this point in the history

Commits on Nov 30, 2023

  1. - Worked around the broken plural resource until we fix 

    - Fixed the shared inputs so that we were actually passing empty arrays and not arrays with two quotes

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 30, 2023
    Configuration menu
    Copy the full SHA
    041700c View commit details
    Browse the repository at this point in the history

  2. added workaround for 2.3.2 and 2.3.2 for now 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 30, 2023
    Configuration menu
    Copy the full SHA
    a77bc1e View commit details
    Browse the repository at this point in the history

  3. moved to only_if with impact to get past strackstrace error 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Nov 30, 2023
    Configuration menu
    Copy the full SHA
    0ac985e View commit details
    Browse the repository at this point in the history

Commits on Dec 1, 2023

  1. Refactored 1.20 

    - Only make one call to the api
- calulated in scope and exempt regions
- used those for processing and evaluation

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    ce3fac2 View commit details
    Browse the repository at this point in the history

  2. yamllint inspec.yml 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    d7b803e View commit details
    Browse the repository at this point in the history

  3. adding 4.16 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    3e07417 View commit details
    Browse the repository at this point in the history

  4. added 3.10 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    3fbd1df View commit details
    Browse the repository at this point in the history

  5. adding 3.11, updating 3.10 to indicate that one is supposed to be tes… 

    …ting writes vs. reads

Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    412fccd View commit details
    Browse the repository at this point in the history

  6. working on output to end-user 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    d8caebe View commit details
    Browse the repository at this point in the history

  7. updated feedback to end user to be a bit more clear 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    555a418 View commit details
    Browse the repository at this point in the history

  8. updated syntax of 4.16 to use the expect syntax 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    fb6484f View commit details
    Browse the repository at this point in the history

  9. updated syntax of 4.16 to use the expect syntax 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    b07608f View commit details
    Browse the repository at this point in the history

  10. updated syntax of 4.16 to use the expect syntax 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    290d760 View commit details
    Browse the repository at this point in the history

  11. fixed broken reference links 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    3634dc0 View commit details
    Browse the repository at this point in the history

  12. fixed broken reference links 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 1, 2023
    Configuration menu
    Copy the full SHA
    2f530db View commit details
    Browse the repository at this point in the history

Commits on Dec 3, 2023

  1. should have a working 2.1.4 but could be improved by expect perhaps 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 3, 2023
    Configuration menu
    Copy the full SHA
    86226e3 View commit details
    Browse the repository at this point in the history

  2. trying to see if a bundle install will help for a bit while we are us… 

    …ing external gem resources

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 3, 2023
    Configuration menu
    Copy the full SHA
    88c8f04 View commit details
    Browse the repository at this point in the history

  3. adding missing bundle exec to the inspec exec 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 3, 2023
    Configuration menu
    Copy the full SHA
    de4481c View commit details
    Browse the repository at this point in the history

Commits on Dec 4, 2023

  1. start of table to track progress 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 4, 2023
    Configuration menu
    Copy the full SHA
    02d3cfd View commit details
    Browse the repository at this point in the history

  2. filled out status table 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 4, 2023
    Configuration menu
    Copy the full SHA
    28cb880 View commit details
    Browse the repository at this point in the history

  3. moved status table 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 4, 2023
    Configuration menu
    Copy the full SHA
    2c4a4c8 View commit details
    Browse the repository at this point in the history

  4. fixed typo in authors 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 4, 2023
    Configuration menu
    Copy the full SHA
    1d4a7c5 View commit details
    Browse the repository at this point in the history

  5. Update README.md 

    noting that 3.10 and 3.11 have a test but are being updated to match a much better resource
    @wdower
    wdower authored Dec 4, 2023
    Configuration menu
    Copy the full SHA
    8556e4f View commit details
    Browse the repository at this point in the history

Commits on Dec 5, 2023

  1. refactoring 3.10 and 3.11 to use updated cloudtrail resource 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 5, 2023
    Configuration menu
    Copy the full SHA
    f0d76d7 View commit details
    Browse the repository at this point in the history

  2. Updated status table in readme 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 5, 2023
    Configuration menu
    Copy the full SHA
    d11a521 View commit details
    Browse the repository at this point in the history

  3. Update README.md 

    noting that 2.1.3 needs a resource update
    @wdower
    wdower authored Dec 5, 2023
    Configuration menu
    Copy the full SHA
    7ca24b2 View commit details
    Browse the repository at this point in the history

Commits on Dec 6, 2023

  1. notes on possible organization of small macie resources vs a big comp… 

    …licated one

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    7a4c778 View commit details
    Browse the repository at this point in the history

  2. testing run fixes 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    e842e03 View commit details
    Browse the repository at this point in the history

  3. hard coding the inspec-results to see if that fixes the save issue 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    0d613f8 View commit details
    Browse the repository at this point in the history

  4. one more time 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    827e9ac View commit details
    Browse the repository at this point in the history

  5. tyring to see the path of the results file 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    f0e1c3e View commit details
    Browse the repository at this point in the history

  6. 3.8 is throwing a deep stack trace and 3.1 has an uncaught aws servic… 

    …e eception

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    1976fa2 View commit details
    Browse the repository at this point in the history

  7. refactoring 5.6 to hopefully avoid stack overflow errors 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    57a3d21 View commit details
    Browse the repository at this point in the history

  8. adding missing 'do' 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    fe54d7a View commit details
    Browse the repository at this point in the history

  9. refactoring 3.8 to not use describe blocks in a loop 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    ea00dfc View commit details
    Browse the repository at this point in the history

  10. fixing function call in 3.8 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    28e3fa3 View commit details
    Browse the repository at this point in the history

  11. printing display_name instead of full ARN for 3.8 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    64e47d9 View commit details
    Browse the repository at this point in the history

  12. filtering nils from 3.8 correctly, pretty printing output on fail 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    4746f42 View commit details
    Browse the repository at this point in the history

  13. testing even prettier printing 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    c7931a9 View commit details
    Browse the repository at this point in the history

  14. removing comments 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 6, 2023
    Configuration menu
    Copy the full SHA
    b2f04bc View commit details
    Browse the repository at this point in the history

Commits on Dec 7, 2023

  1. updated controls for govcloud 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    ed30927 View commit details
    Browse the repository at this point in the history

  2. removing unecessary if statement from 1.7 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    3c745c7 View commit details
    Browse the repository at this point in the history

  3. fixing where method to use a block in 1.6 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    4a09602 View commit details
    Browse the repository at this point in the history

  4. typo in 1.2 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    1f0763e View commit details
    Browse the repository at this point in the history

  5. adding correct only_if clause to 2.1.3 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    d15dbb5 View commit details
    Browse the repository at this point in the history

  6. added workflow 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    949f25f View commit details
    Browse the repository at this point in the history

  7. updated inspec.yml 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    9ff4e6b View commit details
    Browse the repository at this point in the history

  8. fixing creds 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    b9a632c View commit details
    Browse the repository at this point in the history

  9. rubocop:lint and updated aws other workflow name 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    3a23104 View commit details
    Browse the repository at this point in the history

  10. trying again 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 7, 2023
    Configuration menu
    Copy the full SHA
    375f1d3 View commit details
    Browse the repository at this point in the history

Commits on Dec 8, 2023

  1. adding AWSRB_DEBUG for review 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    52107bd View commit details
    Browse the repository at this point in the history

  2. adding -l debug 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    afa7389 View commit details
    Browse the repository at this point in the history

  3. adding sts audiance to the aws config to see if that helps our run 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    58f12dc View commit details
    Browse the repository at this point in the history

  4. adding to the repo 

    Signed-off-by: GitHub <[email protected]>
    @aaronlippold
    aaronlippold authored Dec 8, 2023
    Configuration menu
    Copy the full SHA
    407ed6c View commit details
    Browse the repository at this point in the history

  5. updating 2.2.1 to use new aws_region matcher for ebs encryption 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    d8efe39 View commit details
    Browse the repository at this point in the history

  6. fixing 1.18 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    6f7c477 View commit details
    Browse the repository at this point in the history

  7. fixing rspec matcher in 1.18 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    591de3b View commit details
    Browse the repository at this point in the history

  8. flipping logic for only_if on 1.18 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    8aa6dc2 View commit details
    Browse the repository at this point in the history

  9. making 1.18 fail output prettier 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    ccb9d74 View commit details
    Browse the repository at this point in the history

  10. fixing 3.1 to support any region for its cloud trails 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    73c11e9 View commit details
    Browse the repository at this point in the history

  11. adding if clause for no element found case 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    1591d2f View commit details
    Browse the repository at this point in the history

  12. 3.9 moving conditional describe to a only_if statement 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    3d57e26 View commit details
    Browse the repository at this point in the history

  13. fixing 3.9 to use the aws_flow_log resource 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    be5b838 View commit details
    Browse the repository at this point in the history

  14. typo in 3.9 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 8, 2023
    Configuration menu
    Copy the full SHA
    0bbffe3 View commit details
    Browse the repository at this point in the history

Commits on Dec 9, 2023

  1. fixing error on 2.2.1 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 9, 2023
    Configuration menu
    Copy the full SHA
    e36b169 View commit details
    Browse the repository at this point in the history

Commits on Dec 10, 2023

  1. cleanup 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    b83cda8 View commit details
    Browse the repository at this point in the history

  2. added tests for 5.3, fixed a few small things, linted' 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    f2b87bc View commit details
    Browse the repository at this point in the history

  3. added ignore_other_regions 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    9bdae1d View commit details
    Browse the repository at this point in the history

  4. fixed input depth error in 5.4 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    6ccd7bf View commit details
    Browse the repository at this point in the history

  5. mostly finished off the 5.x requirements, 5.1 needs to be worked, the… 

    … rest of the 5.x series may or may not be helped by expect

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    a0727aa View commit details
    Browse the repository at this point in the history

  6. updating testing to not disable slow controls 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    6affd72 View commit details
    Browse the repository at this point in the history

  7. renamed util script so it was clear what it does 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    82d1d08 View commit details
    Browse the repository at this point in the history

  8. updated util script 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 10, 2023
    Configuration menu
    Copy the full SHA
    7ac5017 View commit details
    Browse the repository at this point in the history

Commits on Dec 11, 2023

  1. adding the GITHUB_SHA that trigger the action to the workflow results… 

    … files

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    83f5bf3 View commit details
    Browse the repository at this point in the history

  2. adding upload to heimdall-demo 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    53c8a82 View commit details
    Browse the repository at this point in the history

  3. made curl a bit more quite 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 11, 2023
    Configuration menu
    Copy the full SHA
    de39ada View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2023

  1. wip 5.1 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    7520133 View commit details
    Browse the repository at this point in the history

  2. updating 5.1 to use new filtertable logic in resource 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    6dd6142 View commit details
    Browse the repository at this point in the history

  3. fixing 5.1 to work with resource refactor 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    29b291c View commit details
    Browse the repository at this point in the history

  4. using local resource pack 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    2c82dca View commit details
    Browse the repository at this point in the history

  5. fixed rubocop issue 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    2c61c21 View commit details
    Browse the repository at this point in the history

  6. fixed depends 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    1de13e3 View commit details
    Browse the repository at this point in the history

  7. removed pry from testing 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 12, 2023
    Configuration menu
    Copy the full SHA
    96126f3 View commit details
    Browse the repository at this point in the history

Commits on Dec 13, 2023

  1. shorting sha, standarding naming and testing inputs. 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    a38df89 View commit details
    Browse the repository at this point in the history

  2. adding short sha, and naming artifacts 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    0b70cce View commit details
    Browse the repository at this point in the history

  3. moved the short sha calc to after repo checkout 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    12df115 View commit details
    Browse the repository at this point in the history

  4. removing duplicate input for remote management ports 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    e2b2bf9 View commit details
    Browse the repository at this point in the history

  5. adding in exemptions to 5.1 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    0dd7803 View commit details
    Browse the repository at this point in the history

  6. adding disable_slow_controls to 5.1 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    de91b26 View commit details
    Browse the repository at this point in the history

  7. typo 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    66e361f View commit details
    Browse the repository at this point in the history

  8. typo, again 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    d154316 View commit details
    Browse the repository at this point in the history

  9. udating 5.2 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    0974429 View commit details
    Browse the repository at this point in the history

  10. adding only_if to control to bail if a non-AWS tool should be doing m… 

    …onitoring

Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    5c11a35 View commit details
    Browse the repository at this point in the history

  11. adding test for 4.1.5, adding input for declaring a third-party monit… 

    …oring tool

Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    fff5482 View commit details
    Browse the repository at this point in the history

  12. update script to get the list of regions from the cli 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    9019882 View commit details
    Browse the repository at this point in the history

  13. fixing incorrect method in 1.17 

    Signed-off-by: Will Dower <[email protected]>
    @wdower
    wdower committed Dec 13, 2023
    Configuration menu
    Copy the full SHA
    ff11c78 View commit details
    Browse the repository at this point in the history

Commits on Dec 15, 2023

  1. fixed typo in 5.5 with inputs vs input... 

    Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    16b50a6 View commit details
    Browse the repository at this point in the history

  2. updated thresholds to not allow profile errors and maintain a min 10%… 

    … compliance

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    14c3982 View commit details
    Browse the repository at this point in the history

Commits on Dec 19, 2023

  1. updating macie control 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 19, 2023
    Configuration menu
    Copy the full SHA
    7984d41 View commit details
    Browse the repository at this point in the history

  2. mistaken sign on govcloud check for macie 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 19, 2023
    Configuration menu
    Copy the full SHA
    34299ee View commit details
    Browse the repository at this point in the history

  3. updating README, removing obselete inputs 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 19, 2023
    Configuration menu
    Copy the full SHA
    0e350a7 View commit details
    Browse the repository at this point in the history

  4. cleanup -removing comments 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 19, 2023
    Configuration menu
    Copy the full SHA
    4b9983e View commit details
    Browse the repository at this point in the history

  5. updated benchmark status table 

    Signed-off-by: wdower <[email protected]>
    @wdower
    wdower committed Dec 19, 2023
    Configuration menu
    Copy the full SHA
    15e5868 View commit details
    Browse the repository at this point in the history

Commits on Dec 20, 2023

  1. Minor Updates and Linting 

    - added the more refined inspec inputs language from our deparment work
- simplifed run example paths and made the 'files' we talk about consistant throughout the README
- ran `bundle exec rake lint:auto_correct`

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 20, 2023
    Configuration menu
    Copy the full SHA
    babe92d View commit details
    Browse the repository at this point in the history

  2. Moving Heimdall Upload in the workflow 

    - moved the Heimdall Upload section directly after the 'Save Artifacts' given its also a save action
  and we want to ensure - reguarless of if we pass threshold - that we have the results of both runs
  in Heimdall for review.

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 20, 2023
    Configuration menu
    Copy the full SHA
    d21a6b2 View commit details
    Browse the repository at this point in the history

  3. finished final readthroughs, reviewed latest test runs, removed unnee… 

    …ded comments, updated profile version, should be ready for merge

Signed-off-by: Aaron Lippold <[email protected]>
    @aaronlippold
    aaronlippold committed Dec 20, 2023
    Configuration menu
    Copy the full SHA
    b59f7c3 View commit details
    Browse the repository at this point in the history