Closed arunpaladin closed 3 months ago
The recent changes introduce new policies for AWS EC2, Azure VM, and GCP VM instances scanned by Rapid7. An enum for plugin display names and a rule to check asset scanning status were added. Additionally, the PolicyExecutor
class was enhanced to include an enricherSource
for enriching policy parameters.
Files | Change Summary |
---|---|
commons/.../PluginDisplayName.java |
Added an enum PluginDisplayName to manage plugin display names and provide related methods. |
installer/.../DB_Policy.sql |
Updated cf_PolicyTable and cf_PolicyParams with new policies for AWS EC2, Azure VM, and GCP VM instances. |
jobs/.../AssetTypeScannedBySourceRule.java |
Implemented a rule to check assets scanned by a specific source, including methods for execution and help text. |
jobs/.../PolicyExecutor.java |
Introduced enricherSource for enriching policy parameters with a pluginName key during execution. |
sequenceDiagram
participant User
participant PluginDisplayName
participant PolicyExecutor
participant AssetTypeScannedBySourceRule
participant DB_Policy
User ->> PluginDisplayName: Retrieve plugin display name
User ->> PolicyExecutor: Execute policy
PolicyExecutor ->> DB_Policy: Fetch policy details
PolicyExecutor ->> AssetTypeScannedBySourceRule: Apply rule
AssetTypeScannedBySourceRule ->> PolicyExecutor: Return results
PolicyExecutor ->> User: Return enriched policy results
In the realm of code, so bright and vast,
New policies for clouds, a spell is cast.
AWS, Azure, and GCP,
Scanned by Rapid7, safe they'll be.
With enums and rules, we stand tall,
Enriching policies, one and all.
🐇✨
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?
Failed conditions
27.3% Duplication on New Code (required ≤ 10%)
PLG-570 Added Gap Policy for all three clouds.
Problem
Solution
Fixes # (issue if any)
Type of change
Please delete options that are not relevant.
How Has This Been Tested?
Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration
Checklist:
Other Information:
List any documentation updates that are needed for the Wiki
Summary by CodeRabbit
New Features
Bug Fixes
These changes aim to provide more comprehensive security policies and improve the accuracy of policy execution.