search

fortify / IWA-Java

Insecure Web + API application with example Fortify integrations into many DevSecOps and CICD platforms
GNU General Public License v3.0
2 stars 31 forks source link

Add AWS #2

Closed fransvanbuul closed 1 year ago

fransvanbuul commented 1 year ago

Add (AWS CloudFormation YAML) code to IWA-Java to deploy this to AWS, using the EC2 and RDS services.

Introduce the "Missing RDS Encryption" and "Insecure transport" vulnerabilities for RDS. Detectable using SAST, not exploitable or detectable using DAST.

Introduce the "Missing EBS Encryption" vulnerability for EC2. Detectable using SAST, not exploitable or detectable using DAST.

Document all in exploits.md.