cloud-report
Version:
Collects and analyzes cloud resources
73 lines (72 loc) • 3.69 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
const types_1 = require("../../../types");
const utils_1 = require("../../../utils");
const base_1 = require("../../base");
class DefaultSecurityGroupsUsedAnalyzer extends base_1.BaseAnalyzer {
analyze(params, fullReport) {
const allSecurityGroups = params.security_groups;
const allInstances = params.instances;
if (!allSecurityGroups || !allInstances) {
return undefined;
}
const default_security_groups_used = { type: types_1.CheckAnalysisType.Security };
default_security_groups_used.what = "Are there any default security groups used for EC2 instances?";
default_security_groups_used.why = `Default security groups are open to world by
default and requires extra setup make them secure`;
default_security_groups_used.recommendation = `Recommended not to use default security groups instead
create a custom one as they make you better understand the security posture`;
default_security_groups_used.benchmark = ['all'];
const allRegionsAnalysis = {};
for (const region in allInstances) {
const regionInstances = allInstances[region];
const regionSecurityGroups = allSecurityGroups[region];
const defaultSecurityGroups = this.getDefaultSecurityGroups(regionSecurityGroups);
allRegionsAnalysis[region] = [];
for (const instance of regionInstances) {
const instanceAnalysis = {};
instanceAnalysis.resource = {
instanceId: instance.InstanceId,
instanceName: utils_1.ResourceUtil.getNameByTags(instance),
security_groups: instance.SecurityGroups,
};
instanceAnalysis.resourceSummary = {
name: "Instance",
value: `${instanceAnalysis.resource.instanceName} | ${instance.InstanceId}`,
};
if (this.isCommonSecurityGroupExist(defaultSecurityGroups, instance.SecurityGroups)) {
instanceAnalysis.severity = types_1.SeverityStatus.Failure;
instanceAnalysis.message = "Default security groups are used";
instanceAnalysis.action = "Use custom security group instead default security group";
}
else {
instanceAnalysis.severity = types_1.SeverityStatus.Good;
instanceAnalysis.message = "Default security groups are not used";
}
allRegionsAnalysis[region].push(instanceAnalysis);
}
}
default_security_groups_used.regions = allRegionsAnalysis;
return { default_security_groups_used };
}
getDefaultSecurityGroups(securityGroups) {
if (!securityGroups) {
return [];
}
return securityGroups.filter((securityGroup) => {
return securityGroup.GroupName === "default";
});
}
isCommonSecurityGroupExist(securityGroups1, securityGroups2) {
if (!securityGroups1 || !securityGroups2) {
return false;
}
const commonSecurityGroups = securityGroups1.filter((securityGroup1) => {
return securityGroups2.filter((securityGroup2) => {
return securityGroup1.GroupId === securityGroup2.GroupId;
}).length > 0;
});
return commonSecurityGroups.length > 0;
}
}
exports.DefaultSecurityGroupsUsedAnalyzer = DefaultSecurityGroupsUsedAnalyzer;