Policy Updates
- Added 41 new policies across the three clouds AWS, Azure, and GCP
- Fixed the bugs with the existing policy metadata/documentation.
- We are improving the wiki for the existing rules. This is an ongoing effort.
UI Updates
- Fixed bugs across the application
Installer Changes:
- We have removed the AWS ReadOnlyAccess policy from the installer role. Instead, we have added individual service-level policies to the installer. Now, users do need to add the ReadOnlyAccess policy to the
paladicloud_rorole. We will be updating the installer docs regarding the policies required to install the Paladin Cloud. - We have fixed the issues in the Qualys connector. It is fully functional now. We will be adding the documentation on how to add the Qualys connector.
- Now users do not need to modify the existing security grp to make the app work. We have added the required inbound rules as part of the installer itself.
- We have corrected the minor variable names in the
default.local.pyfile. Existing users will have to recreate the local.py in order to avoid redeploy issues.
What's Changed
- feat: Enable IP Forwarding for Compute Engine Instance by @AnjaliMadhavi-Nakirikanti in #529
- chore: updated version by @santhosh-challa in #570
- fix:Automated backups for cloudsql by @kushZemoso in #554
- fix: azure policies bug fixes by @AnjaliMadhavi-Nakirikanti in #541
- Fix/audit log issue by @AnjaliMadhavi-Nakirikanti in #568
- feat: Policy to Ensure CloudWatch log metric filter and alarm by @akashpaladin in #558
- feat: Enable 'cloudsql.enable_pgaudit' Flag for PostgreSQL Database I… by @kushZemoso in #547
- fix: added asset groups in query params for Exception and Audit API's by @ranadheer-b in #577
- refactor: description and policy name changes by @raviteja-mandala in #579
- fix: Asset group update failure by @dheerajkholia-paladin in #583
- fix:Rule params and changed equalsIgnoreCase instead of equals by @kushZemoso in #584
- feat: policy to check email is configured in ms defender email settings by @raviteja-mandala in #567
- Defender/email subscription admins by @AishwaryaKulkarni97 in #586
- fix: fixed ui inconsistencies by @sidharthjain-zemoso in #587
- removed google anaytics by @rnithinpaladin in #589
- Fix/target type with disable flag by @arunpaladin in #593
- added config_url to rule_engine rules by @rnithinpaladin in #595
- fix: fixed UI related bugs by @ranadheer-b in #592
- fix: removed quotes for user options by @AishwaryaKulkarni97 in #573
- fix:Os and Data disk are encypted using customer managed keys. by @kushZemoso in #597
- Fix/bug fix by @ranadheer-b in #599
- fix: syntax Issue in db file by @AnjaliMadhavi-Nakirikanti in #601
- fixed audit log bug by @ranadheer-b in #603
- chore: added violations column in compliance overview table in dashboard by @sidharthjain-zemoso in #604
- feat: Enable RBAC within Azure Kubernetes Services by @raviteja-mandala in #608
- fix:Root account hardware MFA check by @akashpaladin in #605
- Feat/gcp integrity monitoring by @AishwaryaKulkarni97 in #609
- fix: fixed admin policies by @sidharthjain-zemoso in #606
- fix: updated policy name and description by @raviteja-mandala in #614
- feat: Replaced asset details table by @sidharthjain-zemoso in #610
- feat: added event selector object to cloud trail data collector by @arunpaladin in #611
- fix: fixed violation details, asset list page bugs for arn resource Id by @ranadheer-b in #612
- feat : Enable Vulnerability Assessment Periodic Recurring Scans by @AnjaliMadhavi-Nakirikanti in #578
- Feature/enable node auto upgrade by @AnjaliMadhavi-Nakirikanti in #607
- fix: fixed breadcrumbs in admin screens and fixed few p0 items by @sidharthjain-zemoso in #616
- fix: addressed db file syntax error by @AnjaliMadhavi-Nakirikanti in #620
- fix:Policy to Ensure CloudWatch log metric filter and alarm by @akashpaladin in #619
- fix: fixed few bugs related to Exemptions and Asset Distribution by @ranadheer-b in #621
- feat: disable alpha clusters by @AishwaryaKulkarni97 in #622
- Feature/enable node auto repair by @kushZemoso in #613
- feat:Enable VPC Flow Logs and Intranode Visibility by @kushZemoso in #618
- fix: changed asset display names by @AnjaliMadhavi-Nakirikanti in #624
- feat: Ensure clusters are created with private nodes and private end … by @raviteja-mandala in #625
- fix: fix for azure keyvalut collector not collecting all keyvaults by @AnjaliMadhavi-Nakirikanti in #627
- fix: resolved syntax error in db.sql file by @AnjaliMadhavi-Nakirikanti in #632
- AzureAD mandatory properties name change in the DB by @arunpaladin in #628
- Feat/basic auth by @AishwaryaKulkarni97 in #629
- feat:Disable Legacy Authorization by @kushZemoso in #623
- feat: Enable_VPC_native_for_clusters by @AnjaliMadhavi-Nakirikanti in #615
- feat: Disable client certificate Authentication for GKE Cluster by @AnjaliMadhavi-Nakirikanti in #617
- chore: updated readme by @santhosh-challa in #636
- fix: fixed rules that were breaking policyViolationReason end point in compliance api by @sidharthjain-zemoso in #634
- feat: Policy to Ensure AWS Security hub is enabled by @akashpaladin in #635
- feat:Enable Auto-Provisioning of Log Analytics Agent by @kushZemoso in #631
- fix: changed styling of list view and other minor bug fixes by @sidharthjain-zemoso in #633
- feat: Policy to Ensure Object level logging is enabled for s3 buckets by @akashpaladin in #626
- fix: removing duplicate entries in UI by @AishwaryaKulkarni97 in #639
- fix: s3, s4, s5 qualys vulnerability rules fix by @raviteja-mandala in #646
- feat:Remove Custom Owner Roles by @kushZemoso in #638
- Feat/key rbac by @AishwaryaKulkarni97 in #640
- Bug fixes by @sidharthjain-zemoso in #647
- feat: Policies related to AWS K8 by @akashpaladin in #648
- fix: AWS Removed extra spaces by @akashpaladin in #651
- feat: Retention days should be greater than ninety by @AishwaryaKulkarni97 in #649
- Adding Images to new How to by @MonikaSharmaZemoso in #652
- Adding Images for new How to Document by @MonikaSharmaZemoso in #653
- Adding images for new document by @MonikaSharmaZemoso in #654
- fix: AWS Removed extra spaces by @akashpaladin in #656
- fix:AWS resolutionUrl bugfix by @akashpaladin in #650
- fix:ruleKey ,policyName,Description and wiki links for policies. by @kushZemoso in #658
- changed azure secert_id to secert value and http allowed only for int… by @rnithinpaladin in #655
- feat: Enable Cloud Logging and Monitoring by @AnjaliMadhavi-Nakirikanti in #637
- fix: Removed full read only access for AWS resources. by @arunpaladin in #657
- feat: Disable Kubernetes Web UI by @AnjaliMadhavi-Nakirikanti in #630
- "feat: added ResourceID link and Policy link to the email template" by @arunpaladin in #662
- fix: Modified Display Name of target type by @arunpaladin in #666
- chore ASG added inbound rule by @rnithinpaladin in #672
- fix: addressed azure and gcp bug fixes v1.5.1 by @AnjaliMadhavi-Nakirikanti in #676
- fix:Changed the minTlsVersion flag according to the collector by @kushZemoso in #678
- fix: emails was not getting populated by @AishwaryaKulkarni97 in #687
- fix:display qualys cve number and link in UI by @raviteja-mandala in #689
- fix: fixed navigation in asset distribution and modified violation de… by @sidharthjain-zemoso in #691
- fix: qualys data by @sidharthjain-zemoso in #695
Full Changelog: 1.5.0...1.5.1