nccgroup / ScoutSuite

Multi-Cloud Security Auditing Tool
GNU General Public License v2.0
6.6k stars 1.05k forks source link

ADA-CP 1.2.1: Ensure that all AWS Lambda functions are configured to use a current (not deprecated) runtime #1653

Open rdegraaf opened 2 months ago

rdegraaf commented 2 months ago

Is your feature request related to a problem? Please describe.

The App Defense Alliance Cloud Profile requires a check for Lambda Functions using deprecated runtimes.

Describe the solution you'd like

Implement the check as documented at https://github.com/appdefensealliance/ASA-WG/blob/main/Cloud%20App%20and%20Config%20Profile/Cloud%20App%20and%20Config%20Test%20Guide.md#121-ensure-that-all-aws-lambda-functions-are-configured-to-use-a-current-not-deprecated-runtime.

Describe alternatives you've considered

None

Additional context

rdegraaf commented 2 months ago

Implemented in https://github.com/rdegraaf/ScoutSuite/tree/ada-cp-aws. MR to come once I have a few more rules implemented.