prowler-cloud / prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
https://prowler.com
Apache License 2.0
10.87k stars 1.55k forks source link

Getting FileNotFoundError while trying to set up prowler for aws #4064

Closed Prabhanjali closed 6 months ago

Prabhanjali commented 6 months ago

Steps to Reproduce

downloaded prowler and trying to execute command prowler aws and getting this FileNotFoundError

Expected behavior

prowler to work for aws

Actual Result with Screenshots or Logs

image

How did you install Prowler?

Cloning the repository from github.com (git clone)

Environment Resource

-

OS used

Linux

Prowler version

4.1.0

Pip version

24.0

Context

No response

jfagoagas commented 6 months ago

Hi @Prabhanjali if you are cloning Prowler from Github using Windows you have to use the git config core.longpaths true, please refer to our documentation here for more information.

Thanks for using Prowler 🚀

Prabhanjali commented 6 months ago

Hi @jfagoagas, I have cloned the repo and then used git config core.longpaths true in my terminal. Do I need to set up anything else?

jfagoagas commented 6 months ago

Hi @jfagoagas, I have cloned the repo and then used git config core.longpaths true in my terminal. Do I need to set up anything else?

Nothing more than that, this will allow you to clone file paths exceeding the default Windows size.

Prabhanjali commented 6 months ago

But I'm still running into this issue

jfagoagas commented 6 months ago

@Prabhanjali Did you configure that and then cloned the repo? So:

  1. Run git config core.longpaths true
  2. Then, git clone https://github.com/prowler-cloud/prowler.git
Prabhanjali commented 6 months ago

Yeah... this worked fine.... but now I'm running into different issues when I run prowler dashboard

ERROR: File "", line 322, in decode UnicodeDecodeError: 'utf-8' codec can't decode byte 0x92 in position 5171: invalid start byte

Can you please help me how to resolve this error?

Prabhanjali commented 6 months ago

Also, I observed that prowler aws this command is taking so much time to check all the resources in the account we provided. Is there any other way that makes the sync faster?

jfagoagas commented 6 months ago

Yeah... this worked fine.... but now I'm running into different issues when I run prowler dashboard

ERROR: File "", line 322, in decode UnicodeDecodeError: 'utf-8' codec can't decode byte 0x92 in position 5171: invalid start byte

Can you please help me how to resolve this error?

I saw that you opened a new issue related to the above so let's continue there. Thanks.

jfagoagas commented 6 months ago

Also, I observed that prowler aws this command is taking so much time to check all the resources in the account we provided. Is there any other way that makes the sync faster?

The amount of time spent by Prowler while scanning a provider depends on your cloud environment. You can speed up the execution just scanning a subset of checks --checks or services --services. You can also scan just the regions where you have resources with the --regions argument.

Prabhanjali commented 6 months ago

How can we restrict the compliance standards we are using? Like I need to run prowler with some cis_3.0_aws, soc2_aws, nist_csf_1.1_aws compliance standards and with some regions enabled and also for some set of services.

Can you provide command for this requirement?

jfagoagas commented 6 months ago

How can we restrict the compliance standards we are using? Like I need to run prowler with some cis_3.0_aws, soc2_aws, nist_csf_1.1_aws compliance standards and with some regions enabled and also for some set of services.

Can you provide command for this requirement?

Please refer to the Prowler documentation here to know more about how to run compliance frameworks. You can found more information for regions and services.

Prabhanjali commented 6 months ago

How can I give --compliance for 3 different categories(cis_3.0_aws, soc2_aws, nist_csf_1.1_aws)?

jfagoagas commented 6 months ago

Hi @Prabhanjali you can use --compliance cis_3.0_aws soc2_aws nist_csf_1.1_aws.

I recommend you to join Prowler's Slack community using this invite since it is the place where this kind of questions are answered!