aquasecurity / aquasecurity/cloudsploit

Amazon CloudSearch

Open
#209 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

Can plugins be added to check for mandating HTTPS and minimum TLS versions with CloudSearch?

https://aws.amazon.com/about-aws/whats-new/2019/11/amazon-cloudsearch-provides-option-to-mandate-https-and-minimum-tls-version/

Contributor guide

Open the contributing guide

Research direction

Start by reading the linked AWS announcement and locating the existing CloudSearch plugin entry point; no file or test is named in the issue. Confirm the supported HTTPS and minimum TLS checks, then verify that the plugin reports noncompliant CloudSearch configurations with appropriate tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, javascript
Domain
cloud, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.