Scoutsuite: cloud trail wildcard detection bug

Created on 29 Aug 2019  路  7Comments  路  Source: nccgroup/ScoutSuite

The check for wildcard s3 data logging is not working.

The reason is that is searchs for arn:aws:s3::: wheres the configuration only has arn:aws:s3 when wildcard is set

The relevant code:

https://github.com/nccgroup/ScoutSuite/blob/faadf03bc0ecd3a628003901d6961c1fe35d1668/ScoutSuite/providers/aws/resources/cloudtrail/trails.py#L52-L61

bug component-provider-aws

All 7 comments

Thanks for raising this, will look into it.

@regevbr could you please test https://github.com/nccgroup/ScoutSuite/pull/540 to confirm this is resolved?

@j4v sure, will keep you posted

@j4v thanks that fixes the problem!
The issue I'm facing now is that all my s3 buckets have the "Bucket access logging disabled" issue flagged, even though your fix should make them not flag that issue...
What do you think?

@regevbr are you sure this is caused by the bugfix/514 branch? There's nothing relating to S3 in there... Could you compare with develop to confirm that branch is causing the issue?

@j4v my bad I thought those 2 warnings are related, but they have nothing to do with each other.
I consider this bug fixed via your PR.
Thanks for taking care of it :-)

Closing, fixed in develop.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

heydonovan picture heydonovan  路  7Comments

JLLeitschuh picture JLLeitschuh  路  4Comments

aus picture aus  路  5Comments

thommor picture thommor  路  4Comments

alitheg picture alitheg  路  8Comments