Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

adding realtime triggers for plugins section a,b,c,d,i,k #1713

Merged
merged 12 commits into from
Jan 1, 2024
1 change: 1 addition & 0 deletions plugins/aws/accessanalyzer/accessAnalyzerActiveFindings.js
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-work-with-findings.html',
recommended_action: 'Investigate into active findings in your account and do the needful until you have zero active findings.',
apis: ['AccessAnalyzer:listAnalyzers', 'AccessAnalyzer:listFindings'],
realtime_triggers: ['accessanalyzer:CreateAnalyzer','accessanalyzer:DeleteAnalyzer','accessanalyzer:CreateArchiveRule','accessanalyzer:StartResourceScan'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/accessanalyzer/accessAnalyzerEnabled.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/IAM/latest/UserGuide/access-analyzer-getting-started.html',
recommended_action: 'Enable Access Analyzer for all regions',
apis: ['AccessAnalyzer:listAnalyzers'],
realtime_triggers: ['accessanalyzer:CreateAnalyzer','accessanalyzer:DeleteAnalyzer'],

run: function(cache, settings, callback) {
var results = [];
var source = {};
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/acm/acmCertificateExpiry.js
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@ module.exports = {
default: 30
}
},
realtime_triggers: ['acm:RequestCertificate','acm:ImportCertificate','acm:DeleteCertificate'],

run: function(cache, settings, callback) {
var config = {
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/acm/acmCertificateHasTags.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/acm/latest/userguide/tags.html',
recommended_action: 'Modify ACM certificate and add tags.',
apis: ['ACM:listCertificates', 'ResourceGroupsTaggingAPI:getResources'],
realtime_triggers: ['acm:RequestCertificate','acm:ImportCertificate','acm:DeleteCertificate','acm:AddTagsToCertificate', 'acm:RemoveTagsFromCertificate'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/acm/acmSingleDomainNameCertificate.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate.html',
recommended_action: 'Configure ACM managed certificates to use single name domain instead of wildcards.',
apis: ['ACM:listCertificates', 'ACM:describeCertificate'],
realtime_triggers: ['acm:RequestCertificate','acm:ImportCertificate','acm:DeleteCertificate'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/acm/acmValidation.js
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ module.exports = {
cs_link: 'https://cloudsploit.com/remediations/aws/acm/acm-certificate-validation',
recommended_action: 'Configure ACM managed certificates to use DNS validation.',
apis: ['ACM:listCertificates', 'ACM:describeCertificate'],
realtime_triggers: ['acm:RequestCertificate','acm:ImportCertificate','acm:DeleteCertificate'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/apigateway/apiStageLevelCacheEncryption.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
recommended_action: 'Modify API Gateway API stages to enable encryption on cache data',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/data-protection-encryption.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getStages'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:DeleteRestApi','apigateway:CreateStage','apigateway:UpdateStage','apigateway:DeleteStage'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/apigateway/apigatewayAuthorization.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
recommended_action: 'Modify API Gateway configuration and ensure that appropriate authorizers are set up for each API.',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-use-lambda-authorizer.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getAuthorizers'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:DeleteRestApi','apigateway:ImportRestApi','apigateway:CreateAuthorizer','apigateway:DeleteAuthorizer'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/apigateway/apigatewayCertificateRotation.js
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,7 @@ module.exports = {
default: '30',
}
},
realtime_triggers: ['apigateway:CreateRestApi','apigateway:DeleteRestApi','apigateway:ImportRestApi','apigateway:CreateStage','apigateway:DeleteStage','apigateway:GenerateClientCertificate','apigateway:DeleteClientCertificate'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/apigateway/apigatewayClientCertificate.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
recommended_action: 'Attach client certificate to API Gateway API stages',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/getting-started-client-side-ssl-authentication.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getStages'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:DeleteRestApi','apigateway:ImportRestApi','apigateway:CreateStage','apigateway:DeleteStage','apigateway:UpdateStage'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/apigateway/apigatewayCloudwatchLogs.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
recommended_action: 'Modify API Gateway API stages to enable CloudWatch Logs',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getStages'],
realtime_triggers: ['apigateway:CreateStage','apigateway:UpdateStage','apigateway:DeleteStage'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/apigateway/apigatewayContentEncoding.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
recommended_action: 'Enable content encoding and set minimum compression size of API Gateway API response',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-gzip-compression-decompression.html',
apis: ['APIGateway:getRestApis'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:UpdateRestApi','apigateway:DeleteRestApi'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
recommended_action: 'Modify API Gateway to disable default execute-api endpoint.',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html',
apis: ['APIGateway:getRestApis'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:UpdateRestApi','apigateway:DeleteRestApi'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/apigateway/apigatewayPrivateEndpoints.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
recommended_action: 'Set API Gateway API endpoint configuration to private',
link: 'https://aws.amazon.com/blogs/compute/introducing-amazon-api-gateway-private-endpoints',
apis: ['APIGateway:getRestApis'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:UpdateRestApi','apigateway:DeleteRestApi'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/apigateway/apigatewayResponseCaching.js
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ module.exports = {
recommended_action: 'Modify API Gateway API stages to enable API cache',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/api-gateway-caching.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getStages'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:DeleteRestApi','apigateway:CreateStage','apigateway:UpdateStage','apigateway:DeleteStage'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/apigateway/apigatewayTracingEnabled.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
recommended_action: 'Enable tracing on API Gateway API stages',
link: 'https://docs.aws.amazon.com/xray/latest/devguide/xray-services-apigateway.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getStages'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:DeleteRestApi','apigateway:CreateStage','apigateway:UpdateStage','apigateway:DeleteStage'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/apigateway/apigatewayWafEnabled.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
recommended_action: 'Associate API Gateway API with Web Application Firewall',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-control-access-aws-waf.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getStages'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:DeleteRestApi','apigateway:CreateStage','apigateway:DeleteStage','wafregional:AssociateWebACL'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/apigateway/customDomainTlsVersion.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
recommended_action: 'Modify API Gateway custom domain security policy and specify new TLS version.',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html',
apis: ['APIGateway:getDomainNames'],
realtime_triggers: ['apigateway:CreateDomainName','apigateway:UpdateDomainName','apigateway:DeleteDomainName'],

run: function(cache, settings, callback) {
var results = [];
var source = {};
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/apigateway/detailedCloudWatchMetrics.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
recommended_action: 'Add CloudWatch role ARN to API settings and enabled detailed metrics for each stage',
link: 'https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-metrics.html',
apis: ['APIGateway:getRestApis', 'APIGateway:getStages'],
realtime_triggers: ['apigateway:CreateRestApi','apigateway:ImportRestApi','apigateway:DeleteRestApi','apigateway:CreateStage','apigateway:UpdateStage','apigateway:DeleteStage'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/appflow/flowEncrypted.js
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ module.exports = {
default: 'awscmk',
}
},
realtime_triggers: ['appflow:CreateFlow','appflow:DeleteFlow'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/appmesh/appmeshTLSRequired.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/app-mesh/latest/APIReference/API_ListenerTls.html',
recommended_action: 'Restrict AWS App Mesh virtual gateway listeners to accept only TLS enabled connections.',
apis: ['AppMesh:listMeshes', 'AppMesh:listVirtualGateways', 'AppMesh:describeVirtualGateway'],
realtime_triggers: ['appmesh:CreateMesh','appmesh:DeleteMesh','appmesh:CreateVirtualGateway','appmesh:UpdateVirtualGateway','appmesh:DeleteVirtualGateway'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/appmesh/appmeshVGAccessLogging.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/app-mesh/latest/userguide/envoy-logs.html',
recommended_action: 'To enable access logging, modify virtual gateway configuration settings and configure the file path to write access logs to.',
apis: ['AppMesh:listMeshes', 'AppMesh:listVirtualGateways', 'AppMesh:describeVirtualGateway'],
realtime_triggers: ['appmesh:CreateMesh','appmesh:DeleteMesh','appmesh:CreateVirtualGateway','appmesh:UpdateVirtualGateway','appmesh:DeleteVirtualGateway'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/appmesh/appmeshVGHealthChecks.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/app-mesh/latest/userguide/virtual_gateway_health_checks.html',
recommended_action: 'Configure health check policies for the virtual gateway listeners in your App Mesh, specifying values for healthy threshold, health check interval, health check protocol, timeout period, and unhealthy threshold.',
apis: ['AppMesh:listMeshes', 'AppMesh:listVirtualGateways', 'AppMesh:describeVirtualGateway'],
realtime_triggers: ['appmesh:CreateMesh','appmesh:DeleteMesh','appmesh:CreateVirtualGateway','appmesh:UpdateVirtualGateway','appmesh:DeleteVirtualGateway'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/appmesh/restrictExternalTraffic.js
Original file line number Diff line number Diff line change
Expand Up @@ -12,6 +12,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/app-mesh/latest/userguide/security.html',
recommended_action: 'Deny all traffic to the external services',
apis: ['AppMesh:listMeshes', 'AppMesh:describeMesh'],
realtime_triggers: ['appmesh:CreateMesh','appmesh:DeleteMesh','appmesh:UpdateMesh'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/apprunner/serviceEncrypted.js
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,8 @@ module.exports = {
default: 'awscmk'
}
},
realtime_triggers: ['apprunner:CreateService','apprunner:DeleteService'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 1 addition & 1 deletion plugins/aws/athena/workgroupEncrypted.js
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ module.exports = {
remediate: ['athena:UpdateWorkGroup'],
rollback: ['athena:UpdateWorkGroup']
},
realtime_triggers: ['athena:CreateWorkGroup', 'athena:UpdateWorkGroup'],
realtime_triggers: ['athena:CreateWorkGroup', 'athena:UpdateWorkGroup', 'athena:DeleteWorkGroup'],
remediation_inputs: {
encryptionOption: {
name: '(Mandatory) Encryption method',
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/athena/workgroupEnforceConfiguration.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings.html',
recommended_action: 'Disable the ability for clients to override Athena workgroup configuration options.',
apis: ['Athena:listWorkGroups', 'Athena:getWorkGroup', 'STS:getCallerIdentity'],
realtime_triggers: ['athena:CreateWorkGroup', 'athena:UpdateWorkGroup', 'athena:DeleteWorkGroup'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/auditmanager/auditmanagerDataEncrypted.js
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ module.exports = {
default: 'awscmk',
}
},
realtime_triggers: ['auditmanager:registerAccount','auditmanager:UpdateSettings','auditmanager:DeregisterAccount'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/autoscaling/appTierAsgApprovedAmi.js
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,7 @@ module.exports = {
default: ''
}
},
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup','autoscaling:UpdateAutoScalingGroup','autoscaling:createLaunchConfiguration','autoscaling:DeleteLaunchConfiguration'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/autoscaling/appTierAsgCloudwatchLogs.js
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,8 @@ module.exports = {
default: ''
}
},
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup','autoscaling:UpdateAutoScalingGroup','autoscaling:createLaunchConfiguration','autoscaling:DeleteLaunchConfiguration'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/autoscaling/appTierIamRole.js
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,7 @@ module.exports = {
default: ''
}
},
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup','autoscaling:UpdateAutoScalingGroup','autoscaling:CreateLaunchConfiguration','autoscaling:DeleteLaunchConfiguration'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/autoscaling/asgActiveNotifications.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/ASGettingNotifications.html',
recommended_action: 'Add a notification endpoint to the auto scaling group.',
apis: ['AutoScaling:describeAutoScalingGroups', 'AutoScaling:describeNotificationConfigurations'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup','autoscaling:PutNotificationConfiguration'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/autoscaling/asgCooldownPeriod.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/Cooldown.html',
recommended_action: 'Implement proper cool down period for Auto Scaling groups to temporarily suspend any scaling actions.',
apis: ['AutoScaling:describeAutoScalingGroups'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:UpdateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/autoscaling/asgMissingELB.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/attach-load-balancer-asg.html',
recommended_action: 'Ensure that the Auto Scaling group load balancer has not been deleted. If so, remove it from the ASG.',
apis: ['AutoScaling:describeAutoScalingGroups', 'ELB:describeLoadBalancers', 'ELBv2:describeLoadBalancers'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup','autoscaling:AttachLoadBalancers','autoscaling:DetachLoadBalancers','elasticloadbalancing:CreateLoadBalancer','elasticloadbalancing:CreateLoadBalancer','elasticloadbalancing:DeleteLoadBalancer','elasticloadbalancing:DeleteLoadBalancer'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/autoscaling/asgMissingSecurityGroups.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/GettingStartedTutorial.html',
recommended_action: 'Ensure that the launch configuration security group has not been deleted. If so, remove it from launch configurations',
apis: ['AutoScaling:describeLaunchConfigurations', 'EC2:describeSecurityGroups'],
realtime_triggers: ['autoscaling:CreateLaunchConfiguration','autoscaling:DeleteLaunchConfiguration','ec2:CreateSecurityGroup','ec2:DeleteSecurityGroup'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/autoscaling/asgMultiAz.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'http://docs.aws.amazon.com/autoscaling/latest/userguide/AutoScalingGroup.html',
recommended_action: 'Modify the autoscaling instance to enable scaling across multiple availability zones.',
apis: ['AutoScaling:describeAutoScalingGroups'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:UpdateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
1 change: 1 addition & 0 deletions plugins/aws/autoscaling/asgSuspendedProcesses.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,7 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-suspend-resume-processes.html',
recommended_action: 'Update the AutoScaling group to resume the suspended processes.',
apis: ['AutoScaling:describeAutoScalingGroups'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:ResumeProcesses','autoscaling:DeleteAutoScalingGroup'],

run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/autoscaling/asgUnusedLaunchConfiguration.js
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/LaunchConfiguration.html',
recommended_action: 'Identify and remove any Auto Scaling Launch Configuration templates that are not associated anymore with ASGs available in the selected AWS region.',
apis: ['AutoScaling:describeAutoScalingGroups', 'AutoScaling:describeLaunchConfigurations'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup','autoscaling:CreateLaunchConfiguration','autoscaling:DeleteLaunchConfiguration'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/autoscaling/elbHealthCheckActive.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-add-elb-healthcheck.html',
recommended_action: 'Enable ELB health check for the Auto Scaling groups.',
apis: ['AutoScaling:describeAutoScalingGroups'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:UpdateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
2 changes: 2 additions & 0 deletions plugins/aws/autoscaling/emptyASG.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,8 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/AutoScalingGroup.html',
recommended_action: 'Delete the unused AutoScaling group.',
apis: ['AutoScaling:describeAutoScalingGroups'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup'],


run: function(cache, settings, callback) {
var results = [];
Expand Down
3 changes: 3 additions & 0 deletions plugins/aws/autoscaling/sameAzElb.js
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,9 @@ module.exports = {
link: 'https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-add-availability-zone.html',
recommended_action: 'Update the ELB to use the same availability zones as the autoscaling group.',
apis: ['AutoScaling:describeAutoScalingGroups', 'ELB:describeLoadBalancers', 'ELBv2:describeLoadBalancers'],
realtime_triggers: ['autoscaling:CreateAutoScalingGroup','autoscaling:UpdateAutoScalingGroup','autoscaling:DeleteAutoScalingGroup','elasticloadbalancing:CreateLoadBalancer','elasticloadbalancing:CreateLoadBalancer','elasticloadbalancing:DeleteLoadBalancer','elasticloadbalancing:DeleteLoadBalancer'],



run: function(cache, settings, callback) {
var results = [];
Expand Down
Loading
Loading