github/falco
1
0
Fork 0
mirror of https://github.com/falcosecurity/falco.git synced 2025-08-08 01:34:03 +00:00
Code Issues Projects Releases Wiki Activity

rule_output(Delete Bucket Public Access Block) typo

Browse Source 
Signed-off-by: pablopez <pablo.lopezzaldivar@sysdig.com>
This commit is contained in:
pablopez 2022-02-03 13:22:39 +01:00 committed by poiana
parent f86423db76
commit 5da10a3b89
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/aws_cloudtrail_rules.yaml
View File

@ -341,7 +341,7 @@
json.value[/requestParameters/PublicAccessBlockConfiguration/BlockPublicAcls]=false or json.value[/requestParameters/PublicAccessBlockConfiguration/BlockPublicAcls]=false or
json.value[/requestParameters/PublicAccessBlockConfiguration/IgnorePublicAcls]=false) json.value[/requestParameters/PublicAccessBlockConfiguration/IgnorePublicAcls]=false)
output: output:
A pulic access block for a bucket has been deleted A public access block for a bucket has been deleted
(requesting user=%ct.user, (requesting user=%ct.user,
requesting IP=%ct.srcip, requesting IP=%ct.srcip,
AWS region=%ct.region, AWS region=%ct.region,