Share
Sign up for Prowler Updates
New checks and engine updated to v3.4
ProwlerPro is now using Prowler Open Source as scanner engine v3.4 and new checks are added.
New services covered like Organizations best practices, SSM Incidents, Resource Explorer, Backup, additional checks for CloudTrail, ECR scan on push check updated, GuardDuty, VPC best practices, IAM. Now iam_policy_no_administrative_privileges has been renamed to iam_customer_unattached_policy_no_administrative_privileges and the following new important IAM checks:
- iam_aws_attached_policy_no_administrative_privileges: Ensure IAM AWS-Managed policies that allow full “:” administrative privileges are not attached – iam [high]
- iam_customer_attached_policy_no_administrative_privileges: Ensure IAM Customer-Managed policies that allow full “:” administrative privileges are not attached – iam [high]
- iam_customer_unattached_policy_no_administrative_privileges: Ensure IAM policies that allow full “:” administrative privileges are not created – iam [low]
Recent Articles
Azure CSPM with Prowler: Strengthening Your Cloud Security Posture
With the increasing complexity of cloud infrastructures, the need for comprehensive Cloud Security Posture Management (CSPM) has never been greater. Organizations need reliable security without spending all their bandwidth monitoring,...
Announcing Prowler 5.6
Prowler 5.6 is now available! We've been working hard behind the scenes to bring this milestone release to our community. In this release, you can bring Microsoft 365 into the...
Prowler Wins DefectDojo’s Best Infrastructure Security Tool for Open-Source Cybersecurity
We’re honored to share that Prowler has been named as one of the Best Infrastructure Security Tools in the inaugural DefectDojo Open-Source Security Awards. This recognition means a lot—not just...