prowler-cloud / prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
https://prowler.com
Apache License 2.0
10.76k stars 1.53k forks source link

chore(rds): Revert changes on inherited instance checks #4827

Closed danibarranqueroo closed 2 months ago

danibarranqueroo commented 2 months ago

Context

We have decided to modify the checks for RDS instances that inherit settings from their clusters. For example, if iam authentication is enabled at the cluster level but not at the instance level, the cluster setting will prevail, and the instance will have this setting on. Previously, these checks only scanned unclustered instances because the cluster checks covered any clustered instances. However, it's not ideal to have no findings when scanning instances, even if the cluster check covers them. The new approach is to adjust these checks so that they provide findings indicating whether a pass or fail result comes from an unclustered instance or is inherited from the cluster level.

Description

Modified checks rds_instance_iam_authentication_enabled and rds_instance_default_admin with their unit tests.

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

codecov[bot] commented 2 months ago

Codecov Report

Attention: Patch coverage is 92.59259% with 2 lines in your changes missing coverage. Please review.

Project coverage is 89.04%. Comparing base (0c7b960) to head (2568f4f). Report is 2 commits behind head on master.

Files Patch % Lines
...enabled/rds_instance_iam_authentication_enabled.py 83.33% 2 Missing :warning:
Additional details and impacted files ```diff @@ Coverage Diff @@ ## master #4827 +/- ## ========================================== - Coverage 89.06% 89.04% -0.02% ========================================== Files 926 926 Lines 28365 28376 +11 ========================================== + Hits 25262 25267 +5 - Misses 3103 3109 +6 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.