github prowler-cloud/prowler 5.1.0
Prowler 5.1.0
on GitHub

one day ago

New features to highlight in this version

🔒 RBAC - Role Based Access Control

Gain granular control over user access and permissions with our new Role-Based Access Control. Now you can assign roles and privileges to specific users, ensuring they only have access to what they need. Also, now you can create cloud provider's groups to be assigned to roles to allow them to be visible.
screencapture-localhost-3000-roles-new-2025-01-14-16_47_02

🧑‍🔧 4 New Checks!

We have expanded our coverage with 4 new checks, enhancing your security and compliance for EC2, StepFunctions and CloudFormation in AWS and Azure SQLServer. 

1. ec2_launch_template_imdsv2_required
2. stepfunctions_statemachine_logging_enabled
3. cloudformation_stack_cdktoolkit_bootstrap_version
4. sqlserver_recommended_minimal_tls_version

🚀 30 New AWS Fixers!

We have included 30 new fixers to help you automatically remediate misconfigurations in AWS services: Lambda, SQS, ECR, Glacier, OpenSearch, S3, EC2, CloudTrail and CodeArtifact.

Run a specific fixer with:
prowler aws --check <check_id> --fixer

See all the new available fixers with prowler aws --list-fixers 

1. awslambda_function_not_publicly_accessible_fixer
2. sqs_queues_not_publicly_accessible_fixer
3. ecr_repositories_not_publicly_accessible_fixer
4. glacier_vaults_policy_public_access_fixer
5. opensearch_service_domains_not_publicly_accessible_fixer
6. s3_bucket_public_write_acl_fixer
7. s3_bucket_public_list_acl_fixer
8. s3_bucket_public_access_fixer
9. ec2_instance_port_cifs_exposed_to_internet_fixer
10. s3_bucket_policy_public_write_access_fixer
11. ec2_ami_public_fixer
12. cloudtrail_logs_s3_bucket_is_not_publicly_accessible_fixer
13. codeartifact_packages_external_public_publishing_disabled_fixer
14. ec2_instance_port_cassandra_exposed_to_internet_fixer
15. ec2_instance_port_elasticsearch_kibana_exposed_to_internet_fixer
16. ec2_instance_port_ftp_exposed_to_internet_fixer
17. ec2_instance_port_kafka_exposed_to_internet_fixer
18. ec2_instance_port_kerberos_exposed_to_internet_fixer
19. ec2_instance_port_ldap_exposed_to_internet_fixer
20. ec2_instance_port_memcached_exposed_to_internet_fixer
21. ec2_instance_port_mongodb_exposed_to_internet_fixer
22. ec2_instance_port_mysql_exposed_to_internet_fixer
23. ec2_instance_port_oracle_exposed_to_internet_fixer
24. ec2_instance_port_postgresql_exposed_to_internet_fixer
25. ec2_instance_port_rdp_exposed_to_internet_fixer
26. ec2_instance_port_redis_exposed_to_internet_fixer
27. ec2_instance_port_sqlserver_exposed_to_internet_fixer
28. ec2_instance_port_ssh_exposed_to_internet_fixer
29. ec2_instance_port_telnet_exposed_to_internet_fixer
30. ec2_securitygroup_allow_ingress_from_internet_to_high_risk_tcp_ports_fixer

📄 Added CIS 3.0 for GCP

Prowler now supports the CIS 3.0 for GCP.

🖊️ New check's category gen-ai

With the growing number of Generative AI, Machine Learning and LLM training services, we are adding a new gen-ai category to allow AI related service checks to be found/run more easily.

🐎 Several performance improvements in the API

🔧 Other issues and bug fixes solved

New Contributors

Special thanks to our amazing new contributors: @madslundholmdk @Twodragon0

UI

Features

Fixes

  • fix(invitations): remove wrong url by @paabloLC in #6005
  • fix(BC: NextUI): fix BC from NextUI, resolve ESLint warnings and optimize hooks dependencies by @paabloLC in #6404
  • fix(invitation): correct the URL used to share an invitation by @paabloLC in #6472
  • styles(invitations): tweak styles for invitation details box by @paabloLC in #6475

Chores / Dependencies

  • chore(rbac): tweaks role permissions by @paabloLC in #6496
  • chore(deps-dev): bump eslint-plugin-import from 2.29.1 to 2.31.0 in /ui by @dependabot in #6482
  • chore(deps): bump @radix-ui/react-slot from 1.1.0 to 1.1.1 in /ui by @dependabot in #6481
  • chore(roles): prevent capitalization of provider groups and roles by @paabloLC in #6497
  • chore(groups): Enable updating groups without roles or providers by @paabloLC in #6498
  • chore(manage-groups): tweaks for provider manage groups by @paabloLC in #6468
  • chore(deps): bump @radix-ui/react-toast from 1.2.1 to 1.2.4 in /ui by @dependabot in #6445
  • chore(deps): bump lucide-react from 0.417.0 to 0.471.0 in /ui by @dependabot in #6456
  • chore(deps): bump date-fns from 3.6.0 to 4.1.0 in /ui by @dependabot in #6444
  • chore(deps-dev): bump @iconify/react from 5.0.1 to 5.2.0 in /ui by @dependabot in #6421
  • chore(deps): bump nanoid from 3.3.7 to 3.3.8 in /ui by @dependabot in #6110
  • chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 in /ui by @dependabot in #5881
  • chore(deps): bump cookie and next-auth in /ui by @dependabot in #5880
  • chore(deps): bump next from 14.2.12 to 14.2.22 in /ui by @dependabot in #6356

API

Features

Fixes

Chores / Dependencies

Docs

SDK

Features

Fixes

Chores / Dependencies

Docs

Full Changelog: 5.0.5...5.1.0

Check out latest releases or
releases around prowler-cloud/prowler 5.1.0

Don't miss a new prowler release

NewReleases is sending notifications on new releases.

Get notifications