aquasecurity / aquasecurity/cloudsploit

CloudWatch Monitoring Metrics Plugin Fails 100% of the Time

Open
#234 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
3.8k
Forks
751
Avg merge
11d 9h
Merged PRs (30d)
3

Description

Hello,

We have been testing CloudSploit to use with a new security assessment offering. Looking at the results generated for the CIS Amazon Web Services Foundations v1.2.0, ALL 3.x FAIL. In other words the plugin named "CloudWatch Monitoring Metrics" failed 100% of the time for all users globally. In other words when I look at the PUBLIC STATS its reads:

"For the plugin, CloudWatch Monitoring Metrics, across 2+ billion results collected by CloudSploit across its entire ecosystem, 0% of results were PASS, while 100% of results were FAIL."

I'm attaching an image showing the PUBLIC STATS for this image as well as those for two others.

I love what you guys have developed here. Let me know if you would like help testing.

All the best,
Ken

Screen Shot 2020-03-21 at 4 29 46 PM
Screen Shot 2020-03-21 at 4 29 35 PM
Screen Shot 2020-03-21 at 4 29 24 PM

Contributor guide

Open the contributing guide

Research direction

Start by locating the CloudWatch Monitoring Metrics plugin and reproduce its behavior for the CIS Amazon Web Services Foundations v1.2.0 3.x checks. Compare the plugin output with the reported public statistics; the issue is resolved when the checks produce correct results instead of failing universally.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, javascript
Domain
cloud, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.