cloud-report
Version:
Collects and analyzes cloud resources
50 lines (49 loc) • 2.44 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
const types_1 = require("../../../types");
const base_1 = require("../../base");
class AccessLogsEnabledAnalyzer extends base_1.BaseAnalyzer {
analyze(params, fullReport) {
const allElbsAttributes = params.elb_attributes;
if (!allElbsAttributes) {
return undefined;
}
const access_logs_enabled = { type: types_1.CheckAnalysisType.Security };
access_logs_enabled.what = "Are access logs enabled for Load balancers?";
access_logs_enabled.why = "Access logs helps us to understand request patterns also helps to detect threats";
access_logs_enabled.recommendation = "Recommended to enable access logs for all public facing load balancers";
access_logs_enabled.benchmark = ['all'];
const allRegionsAnalysis = {};
for (const region in allElbsAttributes) {
const regionElbsAttributes = allElbsAttributes[region];
allRegionsAnalysis[region] = [];
for (const elbName in regionElbsAttributes) {
const elbAttributes = regionElbsAttributes[elbName];
const elb_analysis = {};
elb_analysis.resource = { name: elbName, attributes: elbAttributes };
elb_analysis.resourceSummary = {
name: "LoadBalancer",
value: elbName,
};
if (this.isAccessLogsEnabled(elbAttributes)) {
elb_analysis.severity = types_1.SeverityStatus.Good;
elb_analysis.message = "Access logs are enabled";
}
else {
elb_analysis.severity = types_1.SeverityStatus.Failure;
elb_analysis.message = "Access logs are not enabled";
elb_analysis.action = "Enable access logs";
}
allRegionsAnalysis[region].push(elb_analysis);
}
}
access_logs_enabled.regions = allRegionsAnalysis;
return { access_logs_enabled };
}
isAccessLogsEnabled(elbAttributes) {
return elbAttributes && elbAttributes.some((attribute) => {
return attribute.Key === "access_logs.s3.enabled" && attribute.Value === "true";
});
}
}
exports.AccessLogsEnabledAnalyzer = AccessLogsEnabledAnalyzer;