From 51b3afaca93600d2504fc1de0434b070071b0d89 Mon Sep 17 00:00:00 2001 From: Sergio Date: Wed, 16 Oct 2024 09:34:53 -0400 Subject: [PATCH] chore: revision --- .../aws/services/wafv2/wafv2_service.py | 45 +++++++++++-------- 1 file changed, 26 insertions(+), 19 deletions(-) diff --git a/prowler/providers/aws/services/wafv2/wafv2_service.py b/prowler/providers/aws/services/wafv2/wafv2_service.py index f89ee8022d..70b20e475c 100644 --- a/prowler/providers/aws/services/wafv2/wafv2_service.py +++ b/prowler/providers/aws/services/wafv2/wafv2_service.py @@ -27,21 +27,23 @@ def _list_web_acls_global(self): logger.info("WAFv2 - Listing Global Web ACLs...") if "us-east-1" in self.regional_clients: try: - regional_client = self.regional_clients["us-east-1"] - for wafv2 in regional_client.list_web_acls(Scope="CLOUDFRONT")["WebACLs"]: - if not self.audit_resources or ( - is_resource_filtered(wafv2["ARN"], self.audit_resources) - ): - arn = wafv2["ARN"] - self.web_acls[arn] = WebAclv2( - arn=arn, - name=wafv2["Name"], - id=wafv2["Id"], - albs=[], - user_pools=[], - scope=Scope.CLOUDFRONT, - region="us-east-1", - ) + regional_client = self.regional_clients["us-east-1"] + for wafv2 in regional_client.list_web_acls(Scope="CLOUDFRONT")[ + "WebACLs" + ]: + if not self.audit_resources or ( + is_resource_filtered(wafv2["ARN"], self.audit_resources) + ): + arn = wafv2["ARN"] + self.web_acls[arn] = WebAclv2( + arn=arn, + name=wafv2["Name"], + id=wafv2["Id"], + albs=[], + user_pools=[], + scope=Scope.CLOUDFRONT, + region="us-east-1", + ) except Exception as error: logger.error( f"us-east-1 -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}" @@ -132,11 +134,16 @@ def _get_web_acl(self, acl: str): rules = get_web_acl.get("WebACL", {}).get("Rules", []) for rule in rules: new_rule = Rule( - name=rule.get("Name", ""), cloudwatch_metrics_enabled=rule.get("VisibilityConfig", {}).get( - "CloudWatchMetricsEnabled", False - ) + name=rule.get("Name", ""), + cloudwatch_metrics_enabled=rule.get("VisibilityConfig", {}).get( + "CloudWatchMetricsEnabled", False + ), ) - if rule.get("Statement",{}).get("RuleGroupReferenceStatement",{}).get("ARN"): + if ( + rule.get("Statement", {}) + .get("RuleGroupReferenceStatement", {}) + .get("ARN") + ): acl.rule_groups.append(new_rule) else: acl.rules.append(new_rule)