Skip to content

Commit 7a0abc0

Browse files
acx1729acx1729
committed
updating to integrations
1 parent 4915a04 commit 7a0abc0

File tree

4,404 files changed

+69341
-2185
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

4,404 files changed

+69341
-2185
lines changed

‎queries/1-aws_insight_lambda_function_not_cmk_encrypted.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
ID: aws_insight_lambda_function_not_cmk_encrypted
22
Title: "Unencrypted Lambda"
33
Description: "List of lambda functions which are not encrypted with CMK"
4-
Connector:
4+
IntegrationTypeName:
55
- aws
66
Query:
77
Engine: CloudQL-v0.0.1

‎queries/1-aws_insight_lambda_function_not_cmk_encrypted.yaml.bak‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
ID: aws_insight_lambda_function_not_cmk_encrypted
2+
Title: "Unencrypted Lambda"
3+
Description: "List of lambda functions which are not encrypted with CMK"
4+
Connector:
5+
- aws
6+
Query:
7+
Engine: CloudQL-v0.0.1
8+
QueryToExecute: |-
9+
select
10+
name,
11+
kms_key_arn, account_id, og_account_id, og_resource_id
12+
from
13+
aws_lambda_function
14+
where
15+
kms_key_arn is null;
16+
PrimaryTable: aws_lambda_function
17+
ListOfTables:
18+
- aws_lambda_function
19+
Parameters: []
20+
Tags:
21+
category:
22+
- Security

‎queries/10-aws_insight_acm_certificate_transparency_logging_disabled.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
ID: aws_insight_acm_certificate_transparency_logging_disabled
22
Title: "Certificates with no Logging"
33
Description: "List certificates for which transparency logging is disabled"
4-
Connector:
4+
IntegrationTypeName:
55
- aws
66
Query:
77
Engine: CloudQL-v0.0.1

‎queries/10-aws_insight_acm_certificate_transparency_logging_disabled.yaml.bak‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
ID: aws_insight_acm_certificate_transparency_logging_disabled
2+
Title: "Certificates with no Logging"
3+
Description: "List certificates for which transparency logging is disabled"
4+
Connector:
5+
- aws
6+
Query:
7+
Engine: CloudQL-v0.0.1
8+
QueryToExecute: |-
9+
select certificate_arn, domain_name, status, account_id, og_account_id, og_resource_id from
10+
aws_acm_certificate
11+
where
12+
certificate_transparency_logging_preference <> 'ENABLED';
13+
PrimaryTable: aws_acm_certificate
14+
ListOfTables:
15+
- aws_acm_certificate
16+
Parameters: []
17+
Tags:
18+
category:
19+
- Security
20+
- Technical Debt
21+
- Resiliency

‎queries/11-aws_insight_acm_certificate_expired.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
ID: aws_insight_acm_certificate_expired
22
Title: "Expired Certificates"
33
Description: "List of expired certificates"
4-
Connector:
4+
IntegrationTypeName:
55
- aws
66
Query:
77
Engine: CloudQL-v0.0.1

‎queries/11-aws_insight_acm_certificate_expired.yaml.bak‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
ID: aws_insight_acm_certificate_expired
2+
Title: "Expired Certificates"
3+
Description: "List of expired certificates"
4+
Connector:
5+
- aws
6+
Query:
7+
Engine: CloudQL-v0.0.1
8+
QueryToExecute: |-
9+
select certificate_arn, domain_name, status, account_id, og_account_id, og_resource_id from
10+
aws_acm_certificate
11+
where
12+
status = 'EXPIRED';
13+
PrimaryTable: aws_acm_certificate
14+
ListOfTables:
15+
- aws_acm_certificate
16+
Parameters: []
17+
Tags:
18+
category:
19+
- Security
20+
- Technical Debt
21+
- Resiliency
22+
- Cost Management

‎queries/12-aws_insight_ebs_snapshot_older_than_year.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
ID: aws_insight_ebs_snapshot_older_than_year
22
Title: "Snapshots older than a year"
33
Description: "List Snapshots older than 365 days"
4-
Connector:
4+
IntegrationTypeName:
55
- aws
66
Query:
77
Engine: CloudQL-v0.0.1

‎queries/12-aws_insight_ebs_snapshot_older_than_year.yaml.bak‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
ID: aws_insight_ebs_snapshot_older_than_year
2+
Title: "Snapshots older than a year"
3+
Description: "List Snapshots older than 365 days"
4+
Connector:
5+
- aws
6+
Query:
7+
Engine: CloudQL-v0.0.1
8+
QueryToExecute: SELECT snapshot_id, arn, start_time, account_id, og_account_id, og_resource_id FROM aws_ebs_snapshot WHERE start_time < now() - interval '1 year';
9+
PrimaryTable: aws_ebs_snapshot
10+
ListOfTables:
11+
- aws_ebs_snapshot
12+
Parameters: []
13+
Tags:
14+
category:
15+
- Security
16+
- Technical Debt
17+
- Cost Management

‎queries/13-aws_insight_ec2_classic_load_balancer.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
ID: aws_insight_ec2_classic_load_balancer
22
Title: "Classic Load Balancers"
33
Description: "List all Classic Load Balancer. Link here."
4-
Connector:
4+
IntegrationTypeName:
55
- aws
66
Query:
77
Engine: CloudQL-v0.0.1

‎queries/13-aws_insight_ec2_classic_load_balancer.yaml.bak‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
ID: aws_insight_ec2_classic_load_balancer
2+
Title: "Classic Load Balancers"
3+
Description: "List all Classic Load Balancer. Link here."
4+
Connector:
5+
- aws
6+
Query:
7+
Engine: CloudQL-v0.0.1
8+
QueryToExecute: SELECT name, arn, account_id, og_account_id, og_resource_id FROM aws_ec2_classic_load_balancer
9+
PrimaryTable: aws_ec2_classic_load_balancer
10+
ListOfTables:
11+
- aws_ec2_classic_load_balancer
12+
Parameters: []
13+
Tags:
14+
category:
15+
- Security
16+
- Technical Debt
17+
- Resiliency
18+
persona:
19+
- Executive
20+
- Product
21+
- FinOps

0 commit comments

Comments
 (0)