Releases: fugue/fugue-client
Google Environments support
Added support to create and update google environments.
Rename operations for consistency
- Release contains no new operations
- Renames certain nouns for consistency, maintaining backwards compatibility via aliases
rule_waiver
becomesrule-waiver
users_groups
becomesusers-groups
- Updates the client version (missed in the last few releases)
Rule Waivers support
Adds the following commands for Rule Waivers to the CLI. Commands accessible under rule_waiver/rule_waivers
and waiver/waivers
aliases
fugue list waivers
fugue create waiver --name foo --comment bar2 --environment-id e6194140-2b1a-48cd-85f8-675f6745267d --rule-id FG_R00027 --resource-id '*' --resource-type '*' --resource-provider '*'
fugue update waiver fa91c6c6-63a6-4cec-a667-1a3cf42ce6dd --name foo2 --comment bar2
fugue get waiver fa91c6c6-63a6-4cec-a667-1a3cf42ce6dd
fugue delete waiver fa91c6c6-63a6-4cec-a667-1a3cf42ce6dd
Creating different types of Waivers:
Specific resource, of a specific type, in one single resource provider:
fugue create waiver --name foo --comment bar2 --environment-id e6194140-2b1a-48cd-85f8-675f6745267d --rule-id FG_R00027 --resource-id 'my-resource' --resource-type 'AWS.S3.Bucket' --resource-provider 'aws.us-east-1'
All resources of a specific type, in all resource providers:
fugue create waiver --name foo --comment bar2 --environment-id e6194140-2b1a-48cd-85f8-675f6745267d --rule-id FG_R00027 --resource-id '*' --resource-type 'AWS.S3.Bucket' --resource-provider '*'
Missing resources of all types in all resource providers:
fugue create waiver --name foo --comment bar2 --environment-id e6194140-2b1a-48cd-85f8-675f6745267d --rule-id FG_R00027 --resource-id '' --resource-type '*' --resource-provider '*'
Add new filters when listing environments
- Adds additional ability to filter by --id, --arn, and --status in fugue list environments
- Adds the ability to search across all environments by name / id / provider using --search
- Updates --name and --provider filters to use new API functionality instead of client side logic
fugue list environments --help
Lists details for multiple environments
Usage:
fugue list environments [flags]
Aliases:
environments, envs, env
Flags:
--all Retrieve all environments
--arn string AWS Role arn filter (substring match)
--columns strings Columns to show (default [ID,Name,Provider,Regions,HasBaseline,ScanInterval,ScanStatus])
-h, --help help for environments
--id string ID filter (substring match, including provider account identifiers)
--max-items int Max items to return (default 100)
--name string Name filter (substring match, case insensitive)
--offset int Offset into results
--order-by string Order by attribute (default "name")
--order-direction string Order by direction [asc | desc] (default "asc")
--provider string Provider filter
--search string Combined filter for id (including provider account identifiers), name, and provider
--status string Scan Status filter (exact match)
Global Flags:
--output string The formatting style for command output [table | json] (default "table")
Users / Invites / Groups support
Adds support for the following operations around Users / Invites / Groups:
fugue create invite --email test@example.com --expires true|false --group-ids default-admin-group
fugue get invite 4b04a829-47ed-44e7-b0a0-4405b3cdec60
fugue get user 4b04a829-47ed-44e7-b0a0-4405b3cdec60
fugue list users
fugue list users --email test@example.com
fugue list invites
fugue list invites --email test@example.com
fugue create group --name test --policy fugue:EDITOR --environment-ids 4b04a829-47ed-44e7-b0a0-4405b3cdec60,7869f9cf-5f37-409f-8a69-30dec4340c22
fugue create group --name test --policy fugue:EDITOR --all-environments
fugue list groups
fugue update users_groups --user-ids 4b04a829-47ed-44e7-b0a0-4405b3cdec60 --group-ids 7869f9cf-5f37-409f-8a69-30dec4340c22
0.8.0 - Test custom rules
Adds ability to test custom rules - rego files. For example:
fugue-client test rule --scan SCAN_ID --resource-type RESOURCE_TYPE RULE_FILE.rego
It also allows to retrieve the custom rule input:
fugue-client get rule-input --scan SCAN_ID > resource.json
0.7.0 - Custom rule severity and list env improvements
Adds ability to set custom rule severity.
Adds more options to the fugue list env
command.
$ fugue --version
fugue version 0.7.0-af2dcffd
Add AWS Multi-Region Environment Support
- Adds support for reading, creating, and updating multi-region AWS environments
- Adds
--output
flag for switching CLI output of any command to json - Add Windows support
Add Provider header
- Add
Provider
metadata header to explicitly specify the provider - Ensure advanced rules are supported
- Ensure AWS_GOVCLOUD and Azure providers are supported
Custom rules metadata update
Modifies the comment syntax for custom rules to require HTTP-style headers for Resource-Type and Description.