Changelog updates 090

[scriptsrc]

v0.9.0 (2017-04-13)

• PR Updating ARN.py to look for StringEqualsIgnoreCase in policy condition blocks #500 - @MonkeySecurity - Updating ARN.py to look for StringEqualsIgnoreCase in policy condition blocks
• PR Fix KMSAuditor exceptions #511 - @kalpatel01 - Fix KMSAuditor exceptions
• PR Add additional JIRA configurations #510 - @kalpatel01 - Add additional JIRA configurations
• PR Plugins support #504 - @redixin - Plugins support
• PR Add ability to press enter to search in search bar component #515 - @badraufran - Add ability to press enter to search in search bar component
• PR Update dev_setup_osx.rst to get it up-to-date #514 - @badraufran - Update dev_setup_osx.rst to get it up-to-date
• PR Fix for S3 watcher errors. #513 / Fixed S3 bug (again) #545- @mikegrima - Fix for S3 watcher errors.
• PR Remove broken packages link #516 - @badraufran - Remove broken packages link
• PR Update dev_setup_osx #518 - @badraufran - Update dev_setup_osx (Remove sudo)
• PR Minor reformatting/style changes to Docker docs #519 - @selmanj - Minor reformatting/style changes to Docker docs
• PR Organize tests into directories #512 / Organize tests into directories #521 - @kalpatel01 - Organize tests into directories
• PR Remove DB mock class #524 - @kalpatel01 - Remove DB mock class
• PR Optimize SQL for account delete #522 - @kalpatel01 - Optimize SQL for account delete
• PR Handle known kms boto exceptions #525 - @kalpatel01 - Handle known kms boto exceptions
• PR Usage of GOOGLE_HOSTED_DOMAIN in sample configs #529 - @mariusgrigaitis - Usage of GOOGLE_HOSTED_DOMAIN in sample configs
• PR Add sorting to accounts tables #532 - @kalpatel01 - Add sorting to account tables (UI)
• PR Add more Docker envvars #538 - @cu12 - Add more Docker envvars
• PR Add account type field to item, item details and search bar. #536 / Supertom acct type #540 - @supertom - Add account type field to item, item details and search bar.
• PR Add bulk enable and disable account service #534 / Add bulk enable and disable account service #541 - @kalpatel01 - Add bulk enable and disable account service
• PR GCP: fixed accounttypes typo. #546 - @supertom - GCP: fixed accounttypes typo.
• PR Delete deprecated Account fields #547 - @MonkeySecurity - Delete deprecated Account fields
• PR Fix reaudit issue for watchers in different intervals #528 - @kalpatel01 - Fix reaudit issue for watchers in different intervals
• PR Fixed bugs in the ES watcher 😷 #553 - @mikegrima - Fixed bugs in the ES watcher
• PR Add support for overriding audit scores #535 / Add support for overriding audit scores #552 - @kalpatel01 - Add support for overriding audit scores
• PR Upped CloudAux version 📄 #560 / Upped CloudAux to 1.1.3 to address #574 🛢️ #587 - @mikegrima - Bump CloudAux version
• PR Add Watcher configuration #533 / Add Watcher configuration #559 - @kalpatel01 - Add Watcher configuration
• PR Re-adding reporter timing information to the logs. #562 - @MonkeySecurity - Re-adding reporter timing information to the logs.
• PR Add justified issues report #557 - @kalpatel01 - Add justified issues report
• PR fixing issue duplicate ARN issue… #573 - @MonkeySecurity - fixing issue duplicate ARN issue…
• PR Fix justification preservation bug #564 - @kalpatel01 - Fix justification preservation bug
• PR Handle unicode name tags #565 - @kalpatel01 - Handle unicode name tags
• PR Explicitly set export filename #571 - @kalpatel01 - Explicitly set export filename
• PR Fix minor watcher bugs #572 - @kalpatel01 - Fix minor watcher bugs
• PR Set user role via SSO profile #576 - @kalpatel01 - Set user role via SSO profile
• PR Split check_access_keys method #569 - @kalpatel01 - Split check_access_keys method in the IAM User Auditor
• PR Convert watchers to boto3 #566 - @kalpatel01 - Convert watchers to boto3
• PR Replace ELBAuditor DB query with support watcher #568 - @kalpatel01 - Replace ELBAuditor DB query with support watcher
• PR Reduce AWS managed policy audit noise #567 - @kalpatel01 - Reduce AWS managed policy audit noise
• PR Add support for custom watcher and auditor alerters #570 - @kalpatel01 - Add support for custom watcher and auditor alerters
• PR Add functionality to clean up stale issues #575 - @kalpatel01 - Add functionality to clean up stale issues
• PR [GCP] Watchers/Auditors for GCP #582 - @supertom - [GCP] Watchers/Auditors for GCP
• PR GCP docs: Draft of GCP changes #588 - @supertom - GCP docs: Draft of GCP changes
• PR SSO Role modifications #592 - @MonkeySecurity - SSO Role Modifications
• PR GCP: fixed issue where client wasn't receiving user-specified creds #597 - @supertom - GCP: fixed issue where client wasn't receiving user-specified creds
• PR Implement add_account for custom accounts #598 - @redixin - Implement add_account_%s for custom accounts
• PR GCP: fixed issue where bucket watcher wasn't sending credentials to Cloudaux #600 - @supertom - GCP: fixed issue where bucket watcher wasn't sending credentials to Cloudaux
• PR Added permission for DescribeVpnGateways missing for #406 #602 - @crruthe - Added permission for DescribeVpnGateways missing
• PR Fixing reference to check_rfc_1918 #605 - @MonkeySecurity - ELB Auditor - Fixing reference to check_rfc_1918
• PR Adding Unique Index to TechName and AccountName #610 - @MonkeySecurity - Adding Unique Index to TechName and AccountName
• PR Add a section on using GCP Cloud SQL Postgres with Cloud SQL Proxy #612 - @carise - Add a section on using GCP Cloud SQL Postgres with Cloud SQL Proxy
• PR Setting Item.issue_count to deferred. Only joining tables in distinct if necessary. #613 - @MonkeySecurity - Setting Item.issue_count to deferred. Only joining tables in distinct if necessary.
• PR Increasing default timeout #614 - @MonkeySecurity - Increasing default timeout
• PR GCP: set User Agent #607 - @supertom - GCP: Set User Agent
• PR Added ephemeral section to S3 for "GrantReferences" ✨ #609 - @mikegrima - Added ephemeral section to S3 for "GrantReferences"
• PR Quick start improvements 🙉 #611 - @roman-vynar - Quick start improvements
• PR Fix for plaintext passwords in DB if using CLI for user creation 😱 #619 - @mikegrima - Fix for plaintext passwords in DB if using CLI for user creation
• PR Fix ACM certificate ImportedAt timestamp #622 - @jonhadfield - Fix ACM certificate ImportedAt timestamp
• PR Fix docs and variable names related to custom alerters #616 - @redixin - Fix docs and variable names related to custom alerters
• PR Batching support for watchers ⚖️📈 #502 - @mikegrima - Batching support for watchers
• PR Added __version__ property #631 - @supertom - Added __version__ property
• PR Set the default value of SECURITY_REGISTERABLE to False #632 - @sysboy - Set the default value of SECURITY_REGISTERABLE to False
• PR Fix security group rule parsing (Issue 621) #629 - @BobPeterson1881 - Fix security group rule parsing
• PR Update dashboard view filter links #630 - @BobPeterson1881 - Update dashboard view filter links
• PR Log Warning when S3 ACL can't be retrieved. #633 - @sysboy - Log Warning when S3 ACL can't be retrieved.
• PR Fixing issue #603. Removing reference to zerotodocker. #639 - @MonkeySecurity - Removing reference to zerotodocker.
• PR Adding utilities to get S3 canonical IDs. 🆔 #624 - @mikegrima - Adding utilities to get S3 canonical IDs.
• PR GCP: fixed UI Account Type filtering #640 - @supertom - GCP: fixed UI Account Type filtering
• PR Adding active and third_party flags to account view API #642 - @MonkeySecurity - Adding active and third_party flags to account view API
• PR Removing s3_name from exporter and renaming Account.number to identifier #646 - @MonkeySecurity - Removing s3_name from exporter and renaming Account.number to identifier
• PR Fix for UI Account creation bug 🐞 #648 - @mikegrima - Fix for UI Account creation bug
• PR Fix Docker #657 [Docker] Typo in the start scripts 🙊 #658 - @jeyglk - Fix Docker
• PR Updating quickstart/install documentation to simplify. #655 - @MonkeySecurity - Updating quickstart/install documentation to simplify.
• PR Quickstart GCP Fixes #659 - @MonkeySecurity - Quickstart GCP Fixes
• PR Fix principal KeyError #625 - @bungoume - Fix principal KeyError
• PR Replacing python manage.py with monkey #662 - @MonkeySecurity - Replacing python manage.py with monkey
• PR Adding an option to allow group write for logfiles #660 - @mcpeak - Adding an option to allow group write for logfiles
• PR Added doc on update steps #661 - @shrikant0013 - Added doc on update/upgrade steps

Important Notes:

• SECURITY_MONKEY_SETTINGS is no longer a required environment variable.
  • If supplied, security_monkey will respect the variable. Otherwise it will default to env-config/config.py
• manage.py has been moved inside the package and a monkey alias has been setup.
  • Where you might once call python manage.py <arguments> you will now call monkey <arguments>
• Documentation has been converted from RST to Markdown.
  • I will no longer be using readthedocs or RST.
  • Quickstart guide has been largely re-written.
  • Quickstart now instructs you to create and use a virtualenv (and how to get supervisor to work with it)
• This release contains GCP Watcher Support.
• Additional Permissions Required:
  • ec2:DescribeVpnGateways

Contributors:

• @kalpatel01
• @redixin
• @badraufran
• @selmanj
• @mariusgrigaitis
• @cu12
• @supertom
• @crruthe
• @carise
• @roman-vynar
• @jonhadfield
• @sysboy
• @jeyglk
• @bungoume
• @mcpeak
• @shrikant0013
• @mikegrima
• @MonkeySecurity