release: v1.18.0 (#1255)

lacework-releng · web-flow · commit 76d401cd9fb2 · 2023-04-26T14:20:51.000+01:00
Signed-off-by: Lacework &lt;tech-ally@lacework.net&gt;
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,13 @@
+# v1.18.0
+
+## Features
+* feat: Allow user defined S3 Bucket for the audit log (#1248) (djmctavish)([ab1c3381](https://github.com/lacework/go-sdk/commit/ab1c338157fe855c0b6a20b5996e158a5b5f0da9))
+* feat: GCP multi project Terraform (#1233) (jonathan stewart)([938511e6](https://github.com/lacework/go-sdk/commit/938511e6a96c9a97ebb7025e835cdc6d787ecca0))
+## Bug Fixes
+* fix: readd doc gen file (#1246) (Darren)([e45215be](https://github.com/lacework/go-sdk/commit/e45215be385284cb633d58e09dbd61f290576607))
+## Other Changes
+* ci: version bump to v1.17.1-dev (Lacework)([6a8125da](https://github.com/lacework/go-sdk/commit/6a8125da35b0383887e661f27859d4b5c72225a2))
+---
 # v1.17.0
 
 ## Features
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
@@ -1,27 +1,13 @@
 # Release Notes
-Another day, another release. These are the release notes for the version `v1.17.0`.
+Another day, another release. These are the release notes for the version `v1.18.0`.
 
 ## Features
-* feat(cli): New 'compliance scan' command (#1238) (Darren)([6bb952fe](https://github.com/lacework/go-sdk/commit/6bb952fe721733d97938356fcab412f96f657c1d))
-* feat(api): Addition of S3 Bucket ARN for AWS EKS Audit log (David McTavish)([e3b80e67](https://github.com/lacework/go-sdk/commit/e3b80e6780d375b4eccb1611f2a5312942f3dbc4))
-## Refactor
-* refactor: do not filter csv output for vuln ctr show (#1220) (Darren)([dfecd161](https://github.com/lacework/go-sdk/commit/dfecd16139f63041c5878826388eca4f4c1117dc))
+* feat: Allow user defined S3 Bucket for the audit log (#1248) (djmctavish)([ab1c3381](https://github.com/lacework/go-sdk/commit/ab1c338157fe855c0b6a20b5996e158a5b5f0da9))
+* feat: GCP multi project Terraform (#1233) (jonathan stewart)([938511e6](https://github.com/lacework/go-sdk/commit/938511e6a96c9a97ebb7025e835cdc6d787ecca0))
 ## Bug Fixes
-* fix: vuln host scan-pkg-manifest fail_on_severity (#1242) (Darren)([e05db169](https://github.com/lacework/go-sdk/commit/e05db16978cc08e7b32d3998718ea46b109ed391))
-* fix: increase default TLS Handshake Timeout to 63s (#1237) (Darren)([0d3aa066](https://github.com/lacework/go-sdk/commit/0d3aa0666a4b43e83e5772696e526dfc0643d559))
-* fix: unsupported aws region (#1231) (jonathan stewart)([be742c0c](https://github.com/lacework/go-sdk/commit/be742c0c97b7f9a61e31f611125af1e7bcbf62fa))
-* fix(api): Omit s3 bucket arn from Aws EKS Audit if not set (#1234) (djmctavish)([4b264e9b](https://github.com/lacework/go-sdk/commit/4b264e9b5d3d0e2c8dacda0af5286e7be56fae5c))
-* fix(cli): allow multiple recommendation ID types (#1230) (Salim Afiune)([f0e8a8d9](https://github.com/lacework/go-sdk/commit/f0e8a8d9b56bf291c9d9d2282389085765d1cc54))
+* fix: readd doc gen file (#1246) (Darren)([e45215be](https://github.com/lacework/go-sdk/commit/e45215be385284cb633d58e09dbd61f290576607))
 ## Other Changes
-* style(fmt): fix format issues (Salim Afiune Maya)([0986f72e](https://github.com/lacework/go-sdk/commit/0986f72ef5b14bf689e33dbdfbec320246e5ada0))
-* chore(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.18 (#1205) (dependabot[bot])([e9a4bd49](https://github.com/lacework/go-sdk/commit/e9a4bd49af8c300e050b0cc394dce2f40bb49b7f))
-* chore(deps): bump golang.org/x/net from 0.2.0 to 0.7.0 (#1154) (dependabot[bot])([f88e6f13](https://github.com/lacework/go-sdk/commit/f88e6f13053fd6d0c34078185b333e5fcdf92607))
-* chore(deps): bump github.com/abiosoft/colima from 0.4.6 to 0.5.4 (#1172) (dependabot[bot])([9f69228a](https://github.com/lacework/go-sdk/commit/9f69228a9b0994d1f0d99fdec2dd8444c95e3e6c))
-* chore(cli): use an example URL for CTF docs (#1228) (Nick Schmeller)([e18af0db](https://github.com/lacework/go-sdk/commit/e18af0dbd5c1421b4a44c959f7a378daf8cd2de6))
-* ci: fix intermittency issues with virtual terminals (#1235) (Salim Afiune)([e281108d](https://github.com/lacework/go-sdk/commit/e281108dfe4b0e3d137dcad6a9d27a4ef07879eb))
-* ci(fmt): avoid formatting 'databox' package (Salim Afiune Maya)([93cedfef](https://github.com/lacework/go-sdk/commit/93cedfef5d2ce88c4d0c8d0225a7ae5d5b199c81))
-* ci: version bump to v1.16.1-dev (Lacework)([916a63f5](https://github.com/lacework/go-sdk/commit/916a63f5afbbd9b5fbe54d2ff73f996b7dff48c3))
-* test: fix compliance scan test (#1243) (Darren)([1a497bab](https://github.com/lacework/go-sdk/commit/1a497bab6ee12d506b4503a155ecf248f6ab413e))
+* ci: version bump to v1.17.1-dev (Lacework)([6a8125da](https://github.com/lacework/go-sdk/commit/6a8125da35b0383887e661f27859d4b5c72225a2))
 
 ## :whale: [Docker Image](https://hub.docker.com/r/lacework/lacework-cli)
 ```
diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.17.1-dev
+1.18.0
diff --git a/api/version.go b/api/version.go
diff --git a/cli/docs/lacework_agent_aws-install_ec2ic.md b/cli/docs/lacework_agent_aws-install_ec2ic.md
@@ -34,6 +34,10 @@ select a token and pass it to the '--token' flag. This flag must be selected if
 
     lacework agent aws-install ec2ic --token <token>
 
+To explicitly specify the server URL that the agent will connect to:
+
+    lacework agent aws-install ec2ic --server_url https://your.server.url.lacework.net
+
 AWS credentials are read from the following environment variables:
 - AWS_ACCESS_KEY_ID
 - AWS_SECRET_ACCESS_KEY
@@ -57,6 +61,7 @@ lacework agent aws-install ec2ic [flags]
   -h, --help                      help for ec2ic
   -r, --include_regions strings   list of regions to filter on
   -n, --max_parallelism int       maximum number of workers executing AWS API calls, set if rate limits are lower or higher than normal (default 50)
+      --server_url https://       server URL that agents will talk to, prefixed with https:// (default "https://api.lacework.net")
       --ssh_username string       username to login with
       --tag strings               only install agents on infra with this tag
       --tag_key string            only install agents on infra with this tag key set
diff --git a/cli/docs/lacework_agent_aws-install_ec2ssh.md b/cli/docs/lacework_agent_aws-install_ec2ssh.md
@@ -29,7 +29,11 @@ To provide an existing access token, use the '--token' flag. This flag is requir
 when running non-interactively ('--noninteractive' flag). The interactive command
 'lacework agent token list' can be used to query existing tokens.
 
-    lacework agent aws-install ec2ic --token <token>
+    lacework agent aws-install ec2ssh --token <token>
+
+To explicitly specify the server URL that the agent will connect to:
+
+    lacework agent aws-install ec2ssh --server_url https://your.server.url.lacework.net
 
 You will need to provide an SSH authentication method. This authentication method
 should work for all instances that your tag or region filters select. Instances must
@@ -63,6 +67,7 @@ lacework agent aws-install ec2ssh [flags]
   -i, --identity_file string      identity (private key) for public key authentication (default "~/.ssh/id_rsa")
   -r, --include_regions strings   list of regions to filter on
   -n, --max_parallelism int       maximum number of workers executing AWS API calls, set if rate limits are lower or higher than normal (default 50)
+      --server_url https://       server URL that agents will talk to, prefixed with https:// (default "https://api.lacework.net")
       --ssh_password string       password for authentication
       --ssh_port int              port to connect to on the remote host (default 22)
       --ssh_username string       username to login with
diff --git a/cli/docs/lacework_agent_aws-install_ec2ssm.md b/cli/docs/lacework_agent_aws-install_ec2ssm.md
@@ -50,6 +50,10 @@ select a token and pass it to the '--token' flag. This flag must be selected if
 
     lacework agent aws-install ec2ssm --token <token>
 
+To explicitly specify the server URL that the agent will connect to:
+
+    lacework agent aws-install ec2ssm --server_url https://your.server.url.lacework.net
+
 AWS credentials are read from the following environment variables:
 - AWS_ACCESS_KEY_ID
 - AWS_SECRET_ACCESS_KEY
@@ -69,6 +73,7 @@ lacework agent aws-install ec2ssm [flags]
       --iam_role_name string      IAM role name (not ARN) with SSM policy, if not provided then an ephemeral role will be created
   -r, --include_regions strings   list of regions to filter on
   -n, --max_parallelism int       maximum number of workers executing AWS API calls, set if rate limits are lower or higher than normal (default 50)
+      --server_url https://       server URL that agents will talk to, prefixed with https:// (default "https://api.lacework.net")
       --skip_iam_role_creation    set this flag to skip creating an IAM role and instance profile and associating the instance profile. Assumes all instances are already setup for SSM
       --tag strings               only install agents on infra with this tag
       --tag_key string            only install agents on infra with this tag key set
diff --git a/cli/docs/lacework_agent_gcp-install_osl.md b/cli/docs/lacework_agent_gcp-install_osl.md
@@ -38,6 +38,10 @@ select a token and pass it to the '--token' flag. This flag must be selected if
 
     lacework agent gcp-install osl <gcp_username> --token <token>
 
+To explicitly specify the server URL that the agent will connect to:
+
+    lacework agent gcp-install osl --server_url https://your.server.url.lacework.net
+
 GCP credentials are read using the following environment variables:
 - GOOGLE_APPLICATION_CREDENTIALS
 
@@ -57,6 +61,7 @@ lacework agent gcp-install osl [flags]
       --metadata strings          only install agents on infra with this metadata
       --metadata_key string       only install agents on infra with this metadata key set
       --project_id string         ID of the GCP project, set if metadata server does not provide
+      --server_url https://       server URL that agents will talk to, prefixed with https:// (default "https://api.lacework.net")
       --token string              agent access token
       --trust_host_key            automatically add host keys to the ~/.ssh/known_hosts file (default true)
 ```
diff --git a/cli/docs/lacework_agent_install.md b/cli/docs/lacework_agent_install.md
@@ -33,6 +33,10 @@ pass it directly via the argument.
 
     lacework agent install <user@host:port>
 
+To explicitly specify the server URL that the agent will connect to:
+
+    lacework agent install --server_url https://your.server.url.lacework.net
+
 To list all active agents in your environment. 
 
     lacework agent list
@@ -49,6 +53,7 @@ lacework agent install <[user@]host[:port]> [flags]
       --force                  override any pre-installed agent
   -h, --help                   help for install
   -i, --identity_file string   identity (private key) for public key authentication (default "~/.ssh/id_rsa")
+      --server_url https://    server URL that agents will talk to, prefixed with https:// (default "https://api.lacework.net")
       --ssh_password string    password for authentication
       --ssh_port int           port to connect to on the remote host (default 22)
       --ssh_username string    username to login with
diff --git a/cli/docs/lacework_compliance_aws.md b/cli/docs/lacework_compliance_aws.md
@@ -51,5 +51,6 @@ These reports run on a regular schedule, typically once a day.
 * [lacework compliance](lacework_compliance.md)	 - Manage compliance reports
 * [lacework compliance aws get-report](lacework_compliance_aws_get-report.md)	 - Get the latest AWS compliance report
 * [lacework compliance aws list-accounts](lacework_compliance_aws_list-accounts.md)	 - List all AWS accounts configured
+* [lacework compliance aws scan](lacework_compliance_aws_scan.md)	 - Scan triggers a new resource inventory scan
 * [lacework compliance aws search](lacework_compliance_aws_search.md)	 - Search for all known violations of a given resource arn
 
diff --git a/cli/docs/lacework_compliance_aws_get-report.md b/cli/docs/lacework_compliance_aws_get-report.md
@@ -22,6 +22,10 @@ To show recommendation details and affected resources for a recommendation id:
 
     lacework compliance aws get-report <account_id> [recommendation_id]
 
+To retrieve a specific report by its report name:
+
+    lacework compliance aws get-report <account_id> --report_name 'AWS CSA CCM 4.0.5'
+
 
 ```
 lacework compliance aws get-report <account_id> [recommendation_id] [flags]
@@ -30,21 +34,22 @@ lacework compliance aws get-report <account_id> [recommendation_id] [flags]
 ### Options
 
 ```
-      --category strings   filter report details by category (identity-and-access-management, s3, logging...)
-      --csv                output report in CSV format
-      --details            increase details about the compliance report
-  -h, --help               help for get-report
-      --pdf                download report in PDF format
-      --service strings    filter report details by service (aws:s3, aws:iam, aws:cloudtrail, ...)
-      --severity string    filter report details by severity threshold (critical, high, medium, low, info)
-      --status string      filter report details by status (non-compliant, requires-manual-assessment, suppressed, compliant, could-not-assess)
-      --type string        report type to display, run 'lacework report-definitions list' for more information.
-                           valid types:
-                           'AWS_CIS_14','AWS_CIS_1_4_ISO_IEC_27002_2022','AWS_CIS_S3','AWS_CMMC_1.02','AWS_CSA_CCM_4_0_5',
-                           'AWS_Cyber_Essentials_2_2','AWS_HIPAA','AWS_ISO_27001:2013','AWS_NIST_800-171_rev2','AWS_NIST_800-53_rev5',
-                           'AWS_NIST_CSF','AWS_PCI_DSS_3.2.1','AWS_SOC_2','AWS_SOC_Rev2','HIPAA',
-                           'ISO_2700','LW_AWS_SEC_ADD_1_0','NIST_800-171_Rev2','NIST_800-53_Rev4','PCI',
-                           'SOC', (default "AWS_CIS_14")
+      --category strings     filter report details by category (identity-and-access-management, s3, logging...)
+      --csv                  output report in CSV format
+      --details              increase details about the compliance report
+  -h, --help                 help for get-report
+      --pdf                  download report in PDF format
+      --report_name string   report name to display, run 'lacework report-definitions list' for more information.
+      --service strings      filter report details by service (aws:s3, aws:iam, aws:cloudtrail, ...)
+      --severity string      filter report details by severity threshold (critical, high, medium, low, info)
+      --status string        filter report details by status (non-compliant, requires-manual-assessment, suppressed, compliant, could-not-assess)
+      --type string          report type to display, run 'lacework report-definitions list' for more information.
+                             valid types:
+                             'AWS_CIS_14','AWS_CIS_1_4_ISO_IEC_27002_2022','AWS_CIS_S3','AWS_CMMC_1.02','AWS_CSA_CCM_4_0_5',
+                             'AWS_Cyber_Essentials_2_2','AWS_HIPAA','AWS_ISO_27001:2013','AWS_NIST_800-171_rev2','AWS_NIST_800-53_rev5',
+                             'AWS_NIST_CSF','AWS_PCI_DSS_3.2.1','AWS_SOC_2','AWS_SOC_Rev2','HIPAA',
+                             'ISO_2700','LW_AWS_SEC_ADD_1_0','NIST_800-171_Rev2','NIST_800-53_Rev4','PCI',
+                             'SOC', (default "AWS_CIS_14")
 ```
 
 ### Options inherited from parent commands
diff --git a/cli/docs/lacework_compliance_azure.md b/cli/docs/lacework_compliance_azure.md
@@ -56,4 +56,5 @@ These reports run on a regular schedule, typically once a day.
 * [lacework compliance azure get-report](lacework_compliance_azure_get-report.md)	 - Get the latest Azure compliance report
 * [lacework compliance azure list](lacework_compliance_azure_list.md)	 - List Azure tenants and subscriptions
 * [lacework compliance azure list-subscriptions](lacework_compliance_azure_list-subscriptions.md)	 - List subscriptions `<tenant-id>`
+* [lacework compliance azure scan](lacework_compliance_azure_scan.md)	 - Scan triggers a new resource inventory scan
 
diff --git a/cli/docs/lacework_compliance_azure_get-report.md b/cli/docs/lacework_compliance_azure_get-report.md
@@ -21,6 +21,10 @@ To show recommendation details and affected resources for a recommendation id:
 
     lacework compliance azure get-report <tenant_id> <subscriptions_id> [recommendation_id]
 
+To retrieve a specific report by its report name:
+
+    lacework compliance azure get-report <tenant_id> <subscriptions_id> --report_name 'Azure CIS 1.3.1 Report'
+
 
 ```
 lacework compliance azure get-report <tenant_id> <subscriptions_id> [flags]
@@ -29,19 +33,20 @@ lacework compliance azure get-report <tenant_id> <subscriptions_id> [flags]
 ### Options
 
 ```
-      --category strings   filter report details by category (networking, storage, ...)
-      --csv                output report in CSV format
-      --details            increase details about the compliance report
-  -h, --help               help for get-report
-      --pdf                download report in PDF format
-      --service strings    filter report details by service (azure:ms:storage, azure:ms:sql, azure:ms:network, ...)
-      --severity string    filter report details by severity threshold (critical, high, medium, low, info)
-      --status string      filter report details by status (non-compliant, requires-manual-assessment, suppressed, compliant, could-not-assess)
-      --type string        report type to display, run 'lacework report-definitions list' for more information.
-                           valid types:
-                           'AZURE_CIS','AZURE_CIS_131','AZURE_HIPAA','AZURE_ISO_27001','AZURE_NIST_800_171_REV2',
-                           'AZURE_NIST_800_53_REV5','AZURE_NIST_CSF','AZURE_PCI','AZURE_PCI_Rev2','AZURE_SOC',
-                           'AZURE_SOC_Rev2', (default "AZURE_CIS_131")
+      --category strings     filter report details by category (networking, storage, ...)
+      --csv                  output report in CSV format
+      --details              increase details about the compliance report
+  -h, --help                 help for get-report
+      --pdf                  download report in PDF format
+      --report_name string   report name to display, run 'lacework report-definitions list' for more information.
+      --service strings      filter report details by service (azure:ms:storage, azure:ms:sql, azure:ms:network, ...)
+      --severity string      filter report details by severity threshold (critical, high, medium, low, info)
+      --status string        filter report details by status (non-compliant, requires-manual-assessment, suppressed, compliant, could-not-assess)
+      --type string          report type to display, run 'lacework report-definitions list' for more information.
+                             valid types:
+                             'AZURE_CIS','AZURE_CIS_131','AZURE_HIPAA','AZURE_ISO_27001','AZURE_NIST_800_171_REV2',
+                             'AZURE_NIST_800_53_REV5','AZURE_NIST_CSF','AZURE_PCI','AZURE_PCI_Rev2','AZURE_SOC',
+                             'AZURE_SOC_Rev2', (default "AZURE_CIS_131")
 ```
 
 ### Options inherited from parent commands
diff --git a/cli/docs/lacework_compliance_google.md b/cli/docs/lacework_compliance_google.md
@@ -56,4 +56,5 @@ These reports run on a regular schedule, typically once a day.
 * [lacework compliance google get-report](lacework_compliance_google_get-report.md)	 - Get the latest GCP compliance report
 * [lacework compliance google list](lacework_compliance_google_list.md)	 - List gcp projects and organizations
 * [lacework compliance google list-projects](lacework_compliance_google_list-projects.md)	 - List projects from an organization
+* [lacework compliance google scan](lacework_compliance_google_scan.md)	 - Scan triggers a new resource inventory scan
 
diff --git a/cli/docs/lacework_compliance_google_get-report.md b/cli/docs/lacework_compliance_google_get-report.md
diff --git a/cli/docs/lacework_generate_cloud-account_gcp.md b/cli/docs/lacework_generate_cloud-account_gcp.md
diff --git a/cli/docs/lacework_generate_k8s_eks.md b/cli/docs/lacework_generate_k8s_eks.md
diff --git a/cli/docs/lacework_report-definition.md b/cli/docs/lacework_report-definition.md
diff --git a/cli/docs/lacework_report-definition_show.md b/cli/docs/lacework_report-definition_show.md
