csp-security-policies

What's Changed

• Add Azure benchmark metadata by @jeniawhite in https://github.com/elastic/csp-security-policies/pull/299
• Tidy up test data generators by @orouz in https://github.com/elastic/csp-security-policies/pull/293
• Add mergify config file by @orouz in https://github.com/elastic/csp-security-policies/pull/300
• Test mergify by @orouz in https://github.com/elastic/csp-security-policies/pull/303
• [CIS GCP] Add logging rule 2.3 by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/302

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.5.5...v1.5.6

What's Changed

• [GCP] Fix 1.6 subtype by @orouz in https://github.com/elastic/csp-security-policies/pull/298

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.5.4...v1.5.5

What's Changed

• Add CIS 1.15 by @orouz in https://github.com/elastic/csp-security-policies/pull/273
• [CIS GCP] Implement Cloud DNS rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/278
• Add CIS 1.11 by @orouz in https://github.com/elastic/csp-security-policies/pull/265
• Add CIS 1.12 by @orouz in https://github.com/elastic/csp-security-policies/pull/267
• Add CIS 1.14 by @orouz in https://github.com/elastic/csp-security-policies/pull/269
• [CIS GCP] Implement monitoring rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/279
• Add CIS 1.8 by @orouz in https://github.com/elastic/csp-security-policies/pull/264
• [CIS GCP] Implement compute rules: 4.8, 4.9, 4.11 by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/277
• [CIS GCP] Implement rules 4.3-4.6 by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/276
• Add CIS GCP 1.17 by @orouz in https://github.com/elastic/csp-security-policies/pull/280
• Add CIS GCP 6.7 by @orouz in https://github.com/elastic/csp-security-policies/pull/283
• Add CIS GCP 6.4 by @orouz in https://github.com/elastic/csp-security-policies/pull/281
• [CIS GCP] Implement SQL server rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/284
• Add CIS GCP 6.6 by @orouz in https://github.com/elastic/csp-security-policies/pull/282
• [CIS GCP] Add FW Rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/285
• Add CIS GCP 6.1.3 by @orouz in https://github.com/elastic/csp-security-policies/pull/290
• Tidy up rules formatting by @orouz in https://github.com/elastic/csp-security-policies/pull/286
• [CIS GCP] Add rule 4.7 (compute disks) by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/289
• Add CIS GCP 6.5 by @orouz in https://github.com/elastic/csp-security-policies/pull/287
• Add CIS GCP 6.1.2 by @orouz in https://github.com/elastic/csp-security-policies/pull/291
• chore: update GitPython by @orouz in https://github.com/elastic/csp-security-policies/pull/294
• [CIS GCP] Implement postgres rules 6.2.1-6.2.9 by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/292
• [CIS GCP] Add rules 3.1 and 2.16 by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/295
• Add CIS GCP 3.8 by @orouz in https://github.com/elastic/csp-security-policies/pull/296

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.5.3...v1.5.4

What's Changed

• Add CIS 1.4 by @orouz in https://github.com/elastic/csp-security-policies/pull/254
• Add CIS 1.7 by @orouz in https://github.com/elastic/csp-security-policies/pull/260
• Fix CIS GCP 1.6 by @orouz in https://github.com/elastic/csp-security-policies/pull/268
• Add a workflow to generate markdown files by @orouz in https://github.com/elastic/csp-security-policies/pull/262
• Revert "Add a workflow to generate markdown files" by @orouz in https://github.com/elastic/csp-security-policies/pull/272

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.5.2...v1.5.3

What's Changed

• [GCP] Add iam rules utilities by @orouz in https://github.com/elastic/csp-security-policies/pull/258
• [GCP] Update sub types by @orouz in https://github.com/elastic/csp-security-policies/pull/259
• Add CIS 1.6 by @orouz in https://github.com/elastic/csp-security-policies/pull/256
• Add CIS 1.5 by @orouz in https://github.com/elastic/csp-security-policies/pull/257
• Add compute instance service account rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/263

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.5.1...v1.5.2

What's Changed

• [GCP] Use new resource interface by @orouz in https://github.com/elastic/csp-security-policies/pull/255

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.5.0...v1.5.1

What's Changed

• Add tests for recursive pki/ directories by @orestisfl in https://github.com/elastic/csp-security-policies/pull/235
• [CIS GCP] Add kms rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/251

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.4.3...v1.5.0

What's Changed

• Fix array_contains to match string exactly by @orestisfl in https://github.com/elastic/csp-security-policies/pull/228
• AWS CIS 1.20: Use array instead of map by @orestisfl in https://github.com/elastic/csp-security-policies/pull/230
• Update pull_request_template.md by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/231
• upgrade GitPython from 3.1.29 to 3.1.31 by @orouz in https://github.com/elastic/csp-security-policies/pull/232
• CIS AWS rule 2.1.5 can now handle missing public block config by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/234

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.4.2...v1.4.3

What's Changed

• Implement CIS AWS rule 1.20 by @orestisfl in https://github.com/elastic/csp-security-policies/pull/226

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.4.1...v1.4.2

What's Changed

• Fix CIS EKS 3.2.5 by @orouz in https://github.com/elastic/csp-security-policies/pull/224
• Implement CIS AWS rule 1.17 by @orestisfl in https://github.com/elastic/csp-security-policies/pull/225
• Add CIS AWS 1.19 by @orouz in https://github.com/elastic/csp-security-policies/pull/227

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.4.0...v1.4.1

What's Changed

• Add CIS AWS RDS rule 2.3.3 by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/206
• Implement CIS rule 1.16 by @orestisfl in https://github.com/elastic/csp-security-policies/pull/219

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.9...v1.4.0

What's Changed

• README: Fix command to test specific rule by @orestisfl in https://github.com/elastic/csp-security-policies/pull/215
• Add CIS AWS 3.5 rule by @orouz in https://github.com/elastic/csp-security-policies/pull/207
• Add CIS AWS 3.8 (symmetric keys rotation in KMS) by @orouz in https://github.com/elastic/csp-security-policies/pull/201

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.8...v1.3.9

What's Changed

Fixing cloudtrail rule 3.4 latestdeliverytime (#217) (289229a) [Evgeniy Belyi]
fix: validate required filter pattern having topic (#213) (d9406fe) [Oleg Sucharevich]
Fix CIS 4.4 pattern (#216) (a64d483) [Orestis Floros]
Fix CIS 4.1 pattern (#214) (21915a3) [Orestis Floros]
Fix bug of Object-level logging for S3 buckets (#209) (42c8783) [Amir Ben Nun]
Fix CIS AWS rule 1.12 (#211) (17f1ab4) [Ari Aviran]
Fix CIS AWS rule 3.3 (#208) (82070d7) [Ari Aviran]
Fixing security group non default evaluations (#212) (6a3839e) [Evgeniy Belyi]
Fix CIS AWS rule 3.6 (#210) (fb5ee9d) [Ari Aviran]
Fix AWS CIS rule 2.1.5 (#205) (4820e39) [Ari Aviran]
Add CIS AWS S3 rule 2.1.5 (#204) (fa027ab) [Ari Aviran]

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.7...v1.3.8

What's Changed

• Fix CIS AWS rule 2.1.5 by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/205

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.6...v1.3.7

What's Changed

• Add CIS AWS S3 rule 2.1.5 by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/204

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.5...v1.3.6

What's Changed

• Fix evaluation conflict in s3 data adapter by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/199
• Fix s3 rules by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/200

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.4...v1.3.5

What's Changed

• Fix id uniqueness by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/193
• Update minimize_certain_capability audit function by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/195
• Modify monitoring rules filter by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/196

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.3...v1.3.4

What's Changed

• Implement AWS CIS RDS rules by @ari-aviran in https://github.com/elastic/csp-security-policies/pull/181

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.2...v1.3.3

What's Changed

• cis aws 4.1 .. 4.15 by @olegsu in https://github.com/elastic/csp-security-policies/pull/179
• aws cis 3 1 by @olegsu in https://github.com/elastic/csp-security-policies/pull/186
• Fixing EKS rule 3_2_11 and adding tests for EKS rule 3_2_3 by @jeniawhite in https://github.com/elastic/csp-security-policies/pull/185
• Add cloudTrail rules [CIS AWS Logging section] by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/180
• update OPA formatter by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/187
• Replace empty default values by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/191
• CIS AWS - Add rule 2.2.1 (EBS encryption) by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/190

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.1...v1.3.2

What's Changed

• Fix arg parser by @oren-zohar in https://github.com/elastic/csp-security-policies/pull/183
• fix: cis_k8s 5.2.10, cis_eks 4.2.9 by @olegsu in https://github.com/elastic/csp-security-policies/pull/182
• Fix implementation of rules eks_cis_4.2.7 and k8s_cis_5.2.8 by @uri-weisman in https://github.com/elastic/csp-security-policies/pull/184

Full Changelog: https://github.com/elastic/csp-security-policies/compare/v1.3.0...v1.3.1