prowler-cloud/prowler

False positive on ec2_securitygroup_not_used with Batch Compute

Open

#3,264 opened on Jan 11, 2024

View on GitHub
 (6 comments) (0 reactions) (1 assignee)Python (1,322 forks)batch import
feature-requesthelp wantedprovider/aws

Repository metrics

Stars
 (8,957 stars)
PR merge metrics
 (Avg merge 9d 17h) (314 merged PRs in 30d)

Description

Steps to Reproduce

If a security group is assigned only on a lambda function, prowlers thinks that is unused and rises an alert.

Expected behavior

Prowler should detect that is assigned to a lambda

Actual Result with Screenshots or Logs

How did you install Prowler?

Docker (docker pull toniblyx/prowler)

Environment Resource

Docker cointainer

OS used

Linux

Prowler version

3.12

Pip version

The one inside docker image

Context

No response

Contributor guide

Research direction
Examine the Prowler check ec2 securitygroup not used to identify why security groups attached to Lambda functions are not being detected. Check the logic that queries for security group associations and ensure Lambda is included as a resource type.
Tech stack
python
Domain
backendsecurity
Issue type
Bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
PythonAWS
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65