Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(allowlist): allowlist non-default regions configuration #2974

Merged
merged 6 commits into from
Oct 30, 2023

Conversation

MrCloudSec
Copy link
Member

@MrCloudSec MrCloudSec commented Oct 27, 2023

Description

Add allowlist_non_default_regions configuration variable to allowlist failed findings in non-default regions for GuardDuty, SecurityHub, DRS and Config AWS services.

image

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@MrCloudSec MrCloudSec requested a review from a team October 27, 2023 10:10
@@ -188,10 +190,10 @@ def test_config_one_recorder_disabled_allowlisted(self):

check = config_recorder_all_regions_enabled()
result = check.execute()
assert len(result) == 1
assert len(result) == 2
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assert both please 🙏

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

@codecov
Copy link

codecov bot commented Oct 30, 2023

Codecov Report

Merging #2974 (cf62b5c) into master (4070c92) will increase coverage by 0.02%.
Report is 3 commits behind head on master.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master    #2974      +/-   ##
==========================================
+ Coverage   86.28%   86.30%   +0.02%     
==========================================
  Files         559      559              
  Lines       18074    18088      +14     
==========================================
+ Hits        15595    15611      +16     
+ Misses       2479     2477       -2     
Files Coverage Δ
...ons_enabled/config_recorder_all_regions_enabled.py 84.00% <100.00%> (+1.39%) ⬆️
...rs/aws/services/drs/drs_job_exist/drs_job_exist.py 100.00% <100.00%> (ø)
...dduty/guardduty_is_enabled/guardduty_is_enabled.py 100.00% <100.00%> (ø)
...rityhub/securityhub_enabled/securityhub_enabled.py 100.00% <100.00%> (ø)

... and 3 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

@MrCloudSec MrCloudSec requested a review from jfagoagas October 30, 2023 14:38
Copy link
Member

@jfagoagas jfagoagas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great feature @sergargar !!!

@jfagoagas jfagoagas merged commit fcb979a into master Oct 30, 2023
@jfagoagas jfagoagas deleted the allowlist-non-default-regions branch October 30, 2023 16:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants