Release Prowler 3.5.0 - Dune (To Tame a Land) · prowler-cloud/prowler

I like the story behind this Iron Maiden song. Enjoy Prowler 3.5.0 - Dune!

New features to highlight in this version:

🥳 Slack integration:

Prowler now supports Slack integrations! Send a summary of the execution with a Slack APP in your channel, see more in our Integrations Docs

✅ 9 new checks for AWS:

New services covered like FMS and NetworkFirewall, additional checks for AutoScaling, Organizations, RDS, Route53, S3, SSM Incidents and Workspaces.
New important checks:
- iam_role_cross_account_readonlyaccess_policy Ensure IAM Roles do not have ReadOnlyAccess access for external AWS accounts
- route53_dangling_ip_subdomain_takeover Check if Route53 Records contains dangling IPs (based on https://github.com/assetnote/ghostbuster)
See all checks withprowler aws --list-checks

🔨 Allowlist improvements:

You can allowlist an specific service and include regex expressions in the tags, see more in our Allowlist Docs

feat(allowlist): allowlist a specific service by @sergargar in #2331
feat(allowlist): Support regexes in Tags to allow "or"-like conditional matching by @kppullin in #2300
feat(autoscaling): new check autoscaling_group_multiple_az by @gabrielsoltz in #2273
feat(FMS): New Service FMS and Check fms_accounts_compliant by @gabrielsoltz in #2259
feat(iam): add iam_role_cross_account_readonlyaccess_policy check by @sergargar in #2312
feat(NetworkFirewall): New Service and Check by @gabrielsoltz in #2261
feat(Organizations): New check organizations_tags_policies_enabled_and_attached by @gabrielsoltz in #2287
feat(pre-commit): added trufflehog to pre-commit by @n4ch04 in #2311
feat(rds): new check rds_instance_deprecated_engine_version by @pedromarting3 in #2298
feat(route53): add route53_dangling_ip_subdomain_takeover check by @sergargar in #2288
feat(s3): add s3_bucket_object_lock check by @sergargar in #2274
feat(slack): add Slack App integration by @sergargar in #2305
feat(ssmincidents): Use regional_client region instead of audit_profile region by @gabrielsoltz in #2306
feat(workspaces): New check workspaces_vpc_2private_1public_subnets_nat by @gabrielsoltz in #2286

fix(access-analyzer): Handle ResourceNotFoundException by @jfagoagas in #2336
fix(apigateway2): correct paginator name by @sergargar in #2283
fix(backup): Return [] when None AdvancedBackupSettings by @gabrielsoltz in #2304
fix(backups): change severity and only check report_plans if plans exists by @gabrielsoltz in #2291
fix(client_error): Handle errors by @jfagoagas in #2308
fix(cloudfront_distributions_https_enabled): Add default case by @jfagoagas in #2329
fix(cloudtrail): handle InsightNotEnabledException error by @sergargar in #2322
fix(ecr): Refactor service by @jfagoagas in #2302
fix(emr): Handle InvalidRequestException by @jfagoagas in #2320
fix(iam): Handle ListRoleTags and policy errors by @jfagoagas in #2319
fix(opensearch): Handle invalid JSON policy by @jfagoagas in #2262
fix(rds): check configurations for DB instances at cluster level by @sergargar in #2277
fix(resourceexplorer2): add resource id by @sergargar in #2335
fix(s3): handle NoSuchBucket error by @sergargar in #2289
fix(sagemaker): Handle ValidationException by @jfagoagas in #2321
fix(sns_topics_not_publicly_accessible): Change PASS behaviour by @jfagoagas in #2282
fix(trustedadvisor): avoid not_available checks by @sergargar in #2323
fix(typo): remove redundant lines by @kagahd in #2307
fix(typo): typo in backup_vaults_exist check title by @sergargar in #2317
fix(vpc services): list to dicts in vpc and subnets by @n4ch04 in #2310

chore(docs): improve GCP docs by @sergargar in #2318
chore(docs): improve security hub docs by @sergargar in #2285
chore(regions_update): Changes in regions for AWS services. by @sergargar in #2334

build(deps): bump boto3 from 1.26.115 to 1.26.125 by @dependabot in #2327
build(deps): bump botocore from 1.29.115 to 1.29.125 by @dependabot in #2301
build(deps): bump google-api-python-client from 2.84.0 to 2.86.0 by @dependabot in #2296
build(deps): bump mkdocs-material from 9.1.6 to 9.1.8 by @dependabot in #2294
build(deps): bump mkdocs from 1.4.2 to 1.4.3 by @dependabot in #2324
build(deps-dev): bump coverage from 7.2.3 to 7.2.5 by @dependabot in #2297
build(deps-dev): bump docker from 6.0.1 to 6.1.1 by @dependabot in #2326
build(deps-dev): bump moto from 4.1.8 to 4.1.9 by @dependabot in #2328
build(deps-dev): bump pylint from 2.17.3 to 2.17.4 by @dependabot in #2325

Full Changelog: 3.4.1...3.5.0