csp-security-policies

What's Changed

• Rule number replacement by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/177

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.12...v1.3.0

What's Changed

• Update PR template by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/175
• Templates migration by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/172
• Add posture type to rule->benchmark by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/176

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.11...v1.2.12

What's Changed

• Implement more AWS CIS S3 rules by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/174

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.10...v1.2.11

What's Changed

• split automated/manual percentage by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/170
• Add rule 1.15 of CIS AWS by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/173

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.9...v1.2.10

What's Changed

• Feat: add cis aws networking rules by @olegsu in https://github.com/elastic/csp-security-policies/pull/169
• CIS AWS - IAM - Root account rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/167

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.8...v1.2.9

What's Changed

• [Cloud Security] Updating team label by @kfirpeled in https://github.com/elastic/csp-security-policies/pull/168
• Implement S3 encryption rule for CSPM by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/156

New Contributors

• @ari-aviran made their first contribution in https://github.com/elastic/csp-security-policies/pull/156

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.7...v1.2.8

What's Changed

• feat: add cis aws 5.1 rule by @olegsu in https://github.com/elastic/csp-security-policies/pull/157
• Implement CIS AWS IAM user rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/154
• replace nan values with empty strings by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/166

New Contributors

• @olegsu made their first contribution in https://github.com/elastic/csp-security-policies/pull/157

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.6...v1.2.7

What's Changed

• columns alignment by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/162
• fix metadata refs type by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/164

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.5...v1.2.6

Adds support to the rule_number metadata field

What's Changed

• [Metadata] Rule number field refactoring by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/160

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.2.4...v1.2.5

Removing runtime config and activated rules logic

Process and file resource types evaluation performance improvements

• fix multi-container input issues

File permissions verification change.
Adding the possibility to verify exact permissions.

Includes new OPA version.

Refactored to audits design for greater code-sharing and simplicity.

Activated rules wouldn't be bundled but rather passed as input.

• Update EKS types

• https://github.com/elastic/csp-security-policies/pull/102
• https://github.com/elastic/csp-security-policies/pull/104