In November 2021, AWS added managed server-side encryption for SQS: https://aws.amazon.com/about-aws/whats-new/2021/11/amazon-sqs-server-side-encryption-keys-sse/

This should be acceptable to satisfy the "Queue with Encryption Disabled" rule.

Fix #1356: Restrict regexes including a $ at the end of the current expressions

# Conflicts:
#	ScoutSuite/providers/gcp/facade/base.py
#	ScoutSuite/providers/gcp/rules/rulesets/default.json
#	ScoutSuite/providers/utils.py

…velop-latacora

…evelop-latacora

At present, the new unit test fails. Bizarrely, the test works as
expected if it is performed manually instead of using pytest (i.e.
define SAMPLE_USER_DATA and then call ._identify_user_data_secrets()
with it. The regexes also work correctly when tested interactively or at
pythex.org.

It just doesn't work correctly for pytest (and by presumption, for
actual code -- I'm working to construct a test for that).

Good luck figuring this one out... I have verified actual behavior, and
interactive invocation (of both the individual commands, and the method)
work exactly as expected.

For some reason, using pytest to evaluate this configuration appears to
break proper parsing of the regular expressions (??!!?!) and the
assertions in the test fail because they return substring matches which
are explicitly prohibited by the final group of the regular expression.

I have annotated the test to indicate it is expected to fail, and added
documentation of actual "in the wild" behavior, which is as expected.

Develop latacora

Replace InteractiveBrowserCredential with DeviceCodeCredential authentication method when specifying the "--user-account-browser" command line option to facilitate MFA authentication from Docker container.

Comment out throttling check since is_throttled is not fully implemented and triggers some errors.

Handle 404 responses from MS Graph API for queries targetting non-existent datasets (i.e. retrieving group details for groupless users).

Fixes typo in get_policies exception.

Handle errors caused by accessing boot_diagnostics attribute on VMs without a diagnostics profile configured.

Disable checks related to KeyVault diagnostic settings since some of the functions involved do not work as expected. get_diagnostic_settings invokes the "list" operation from DiagnosticSettingsOperations for the MonitorManagementClient class, which expects a "resource_uri" parameter consisting on an Azure resource URI. This is not currently being passed onto that function correctly and generates errors.

Disable logging and diagnostic settings checks for KeyVaults since related functions need to be fixed.

Disable logging and diagnostic settings checks for KeyVaults since related functions need to be fixed.

Workaround for MissingApiVersionParameter error raised by Azure API when calling "list" operation from ComplianceResultsOperations for the SecurityCenter client. Also waiting for further info from Azure Python SDK devs on this matter.

Updated dotnet current versions from 4.0 to 6.0

Security Contact Phone in azure means a phone number

Fix docker-compose build error

Remove duplicate link

Bugfix/SNS permissions

…-regexs

Adjust AWS "secrets" regular expressions

…ature"

This reverts commit 4dd7eb4.

This reverts commit ee4fd9a.

This reverts commit 3faf763.

Release v5.12.0

Handle error when function has no maxInstances attribute defined

docs.microsoft.com->learn.microsoft.com in Azure document

Fixing typo in container-set-init.sh

Fix AWS when building for arm64

Kubescout Alpha

… Typo fix

Assigne -> Assign

We should exclude port 25 from `ec2-security-group-opens-port-to-all` because it already is covered by `ec2-security-group-opens-known-port-to-all` (as SMTP)

Remove the assumption that all Secrets have a `data` field.

Remove the assumption the `data` field in every Secret is a dictionary.

This typing seems to have caused some compatibility issues.

Kubescout bug fix