Index

A

add() (conftest.SingleSet method) add_markers() (custom_config.CustomConfig method) add_severity_marker() (in module severity) add_xfail_marker() (in module exemptions) all_service_account_keys() (in module gcp.iam.resources), [1] args (aws.client.AWSAPICall attribute), [1] autoscaling_launch_configurations() (in module aws.autoscaling.resources), [1] aws module, [1] aws.autoscaling module, [1] aws.autoscaling.resources module, [1] aws.client module, [1] aws.cloudtrail module, [1] aws.cloudtrail.resources module, [1] aws.conftest module, [1] aws.ec2 module, [1] aws.ec2.helpers module, [1] aws.ec2.resources module, [1] aws.elasticache module, [1] aws.elasticache.resources module, [1] aws.elasticsearch module, [1] aws.elasticsearch.resources module, [1]

aws.iam module, [1] aws.iam.helpers module, [1] aws.iam.resources module, [1] aws.rds module, [1] aws.rds.helpers module, [1] aws.rds.resources module, [1] aws.redshift module, [1] aws.redshift.helpers module, [1] aws.redshift.resources module, [1] aws.route53 module, [1] aws.route53.resources module, [1] aws.s3 module, [1] aws.s3.helpers module, [1] aws.s3.resources module, [1] aws.sns module, [1] aws.sns.resources module, [1] aws_config() (in module conftest) AWSAPICall (class in aws.client), [1] AWSConfig (class in custom_config)

B

bin module bin.auth module

bin.auth.setup_gsuite module BotocoreClient (class in aws.client), [1] build_directory_client() (gsuite.client.GsuiteClient method), [1]

C

cache module cache_key() (in module aws.client), [1] (in module gcp.client), [1] cached_iam_users() (in module meta_test_cache) clean_docstring() (in module conftest) cloudtrails() (in module aws.cloudtrail.resources), [1] clusters() (in module gcp.compute.resources), [1]

cnames() (in module aws.route53.resources), [1] conftest module created_after() (custom_config.CustomConfigMixin method) custom_config module CustomConfig (class in custom_config) CustomConfigMixin (class in custom_config)

D

datasets() (in module gcp.bigquery.resources), [1] datetime_encode_get() (in module cache) datetime_encode_set() (in module cache) debug() (aws.client.BotocoreClient method), [1] does_firewall_open_all_ports_to_all() (in module gcp.compute.helpers), [1]

does_firewall_open_all_ports_to_any() (in module gcp.compute.helpers), [1] does_firewall_open_any_ports_to_all() (in module gcp.compute.helpers), [1] does_rds_db_security_group_grant_public_access() (in module aws.rds.helpers), [1] does_vpc_security_group_grant_public_access() (in module aws.rds.helpers), [1] DuplicateKeyError

E

ebs_snapshot_not_too_old() (in module aws.ec2.helpers), [1] ebs_volume_attached_to_instance() (in module aws.ec2.helpers), [1] ec2_address_id() (in module aws.ec2.helpers), [1] ec2_addresses() (in module aws.ec2.resources), [1] ec2_ebs_snapshots() (in module aws.ec2.resources), [1] ec2_ebs_snapshots_create_permission() (in module aws.ec2.resources), [1] ec2_ebs_volumes() (in module aws.ec2.resources), [1] ec2_flow_logs() (in module aws.ec2.resources), [1] ec2_images_owned_by() (in module aws.ec2.resources), [1] ec2_instance_missing_tag_names() (in module aws.ec2.helpers), [1] ec2_instance_test_id() (in module aws.ec2.helpers), [1] ec2_instances() (in module aws.ec2.resources), [1] ec2_security_group_opens_all_ports() (in module aws.ec2.helpers), [1]

ec2_security_group_opens_all_ports_to_all() (in module aws.ec2.helpers), [1] ec2_security_group_opens_all_ports_to_self() (in module aws.ec2.helpers), [1] ec2_security_group_opens_specific_ports_to_all() (in module aws.ec2.helpers), [1] ec2_security_group_test_id() (in module aws.ec2.helpers), [1] ec2_security_groups() (in module aws.ec2.resources), [1] ec2_security_groups_with_in_use_flag() (in module aws.ec2.resources), [1] ec2_vpcs() (in module aws.ec2.resources), [1] elasticache_clusters() (in module aws.elasticache.resources), [1] elasticsearch_domains() (in module aws.elasticsearch.resources), [1] exemptions module extract_key() (aws.client.BotocoreClient method), [1] extract_metadata() (in module conftest)

F

firewall_id() (in module gcp.compute.helpers), [1] firewalls() (in module gcp.compute.resources), [1] flatten() (aws.client.BotocoreClient method), [1] frost module, [1]

frost.cli module, [1] full_results() (in module aws.client), [1]

G

gcp module, [1] gcp.bigquery module, [1] gcp.bigquery.resources module, [1] gcp.client module, [1] gcp.compute module, [1] gcp.compute.helpers module, [1] gcp.compute.resources module, [1] gcp.conftest module, [1] gcp.iam module, [1] gcp.iam.helpers module, [1] gcp.iam.resources module, [1] gcp.sql module, [1] gcp.sql.resources module, [1] gcp_config() (in module conftest) GCPClient (class in gcp.client), [1] GCPConfig (class in custom_config) get() (aws.client.BotocoreClient method), [1] (gcp.client.GCPClient method), [1] get_access_key_expiration_date() (custom_config.AWSConfig method) get_account_id() (in module aws.client), [1] get_all_folders_in_folder() (in module gcp.client), [1] get_all_projects_in_folder() (in module gcp.client), [1] get_all_users_that_can_access_aws_account() (in module aws.iam.resources), [1] get_allowed_ports() (custom_config.CustomConfigMixin method) get_allowed_ports_from_test_id() (custom_config.CustomConfigMixin method) get_available_profiles() (in module aws.client), [1] get_available_regions() (in module aws.client), [1] get_available_services() (in module aws.client), [1]

get_aws_resource() (in module aws.client), [1] get_client() (in module aws.client), [1] get_client_secret_file() (in module bin.auth.setup_gsuite) get_credential_dir() (in module gsuite.client), [1] get_credential_path() (in module gsuite.client), [1] get_credentials() (in module gsuite.client), [1] get_dataset() (in module gcp.bigquery.resources), [1] get_db_instance_id() (in module aws.rds.helpers), [1] get_db_security_group_arn() (in module aws.rds.helpers), [1] get_db_snapshot_arn() (in module aws.rds.helpers), [1] get_iam_resource_id() (in module aws.iam.helpers), [1] get_iam_user_name() (in module aws.iam.helpers), [1] get_metadata_from_funcargs() (in module conftest) get_node_markers() (in module conftest) get_or_create_credentials() (in module bin.auth.setup_gsuite) get_outcome_and_reason() (in module conftest) get_param_id() (in module helpers) get_project_container_config() (gcp.client.GCPClient method), [1] get_project_iam_policies() (gcp.client.GCPClient method), [1] get_rds_resource_id() (in module aws.rds.helpers), [1] get_regions() (aws.client.BotocoreClient method), [1] get_resource_name() (in module service_report_generator) get_result_for_test() (in module service_report_generator) get_s3_bucket_name() (in module aws.s3.helpers), [1] get_s3_resource_id() (in module aws.s3.helpers), [1] get_session() (in module aws.client), [1] get_test_status() (in module service_report_generator) gsuite module, [1] gsuite.admin module, [1] gsuite.admin.helpers module, [1] gsuite.admin.resources module, [1] gsuite.client module, [1] gsuite.conftest module, [1] GsuiteClient (class in gsuite.client), [1] GSuiteConfig (class in custom_config)

H

helpers module

I

iam_access_keys_for_user() (in module aws.iam.resources), [1] iam_admin_login_profiles() (in module aws.iam.resources), [1] iam_admin_mfa_devices() (in module aws.iam.resources), [1] iam_admin_roles() (in module aws.iam.resources), [1] iam_admin_users() (in module aws.iam.resources), [1] iam_admin_users_with_credential_report() (in module aws.iam.resources), [1] iam_all_role_policies() (in module aws.iam.resources), [1] iam_all_user_policies() (in module aws.iam.resources), [1] iam_generate_credential_report() (in module aws.iam.resources), [1] iam_get_all_access_keys() (in module aws.iam.resources), [1] iam_get_credential_report() (in module aws.iam.resources), [1] iam_inline_policies() (in module aws.iam.resources), [1] iam_login_profiles() (in module aws.iam.resources), [1] iam_managed_policies() (in module aws.iam.resources), [1] iam_mfa_devices() (in module aws.iam.resources), [1] iam_role_inline_policies() (in module aws.iam.resources), [1] iam_role_managed_policies() (in module aws.iam.resources), [1] iam_roles() (in module aws.iam.resources), [1] iam_roles_with_policies() (in module aws.iam.resources), [1] iam_user_group_inline_policies() (in module aws.iam.resources), [1] iam_user_group_managed_policies() (in module aws.iam.resources), [1]

iam_user_groups() (in module aws.iam.resources), [1] iam_user_login_profiles() (in module aws.iam.resources), [1] iam_user_mfa_devices() (in module aws.iam.resources), [1] iam_users() (in module aws.iam.resources), [1] iam_users_with_policies() (in module aws.iam.resources), [1] iam_users_with_policies_and_groups() (in module aws.iam.resources), [1] in_use_firewalls() (in module gcp.compute.resources), [1] instances() (in module gcp.compute.resources), [1] (in module gcp.sql.resources), [1] ip_permission_cidr_allows_all_ips() (in module aws.ec2.helpers), [1] ip_permission_grants_access_to_group_with_id() (in module aws.ec2.helpers), [1] ip_permission_opens_all_ports() (in module aws.ec2.helpers), [1] is_access_key_expired() (in module aws.iam.helpers), [1] is_credential_active() (in module aws.iam.helpers), [1] is_ebs_snapshot_public() (in module aws.ec2.helpers), [1] is_ebs_volume_encrypted() (in module aws.ec2.helpers), [1] is_ebs_volume_piops() (in module aws.ec2.helpers), [1] is_owner_of_group() (in module gsuite.admin.helpers), [1] is_rds_db_instance_encrypted() (in module aws.rds.helpers), [1] is_rds_db_snapshot_attr_public_access() (in module aws.rds.helpers), [1] is_rds_db_snapshot_encrypted() (in module aws.rds.helpers), [1] is_service_account_key_old() (in module gcp.iam.helpers), [1]

J

json_iso_datetime_string_to_datetime() (in module cache)

json_iso_datetimes() (in module cache)

K

kwargs (aws.client.AWSAPICall attribute), [1]

L

list() (gcp.client.GCPClient method), [1] list_elasticsearch_domains() (in module aws.elasticsearch.resources), [1] list_groups() (gsuite.client.GsuiteClient method), [1] (in module gsuite.admin.resources), [1] list_groups_and_members() (in module gsuite.admin.resources), [1]

list_members_of_group() (gsuite.client.GsuiteClient method), [1] (in module gsuite.admin.resources), [1] list_users() (gsuite.client.GsuiteClient method), [1] (in module gsuite.admin.resources), [1] load() (in module exemptions) (in module severity)

M

main() (in module bin.auth.setup_gsuite) meta_test_cache module method (aws.client.AWSAPICall attribute), [1] module aws, [1] aws.autoscaling, [1] aws.autoscaling.resources, [1] aws.client, [1] aws.cloudtrail, [1] aws.cloudtrail.resources, [1] aws.conftest, [1] aws.ec2, [1] aws.ec2.helpers, [1] aws.ec2.resources, [1] aws.elasticache, [1] aws.elasticache.resources, [1] aws.elasticsearch, [1] aws.elasticsearch.resources, [1] aws.iam, [1] aws.iam.helpers, [1] aws.iam.resources, [1] aws.rds, [1] aws.rds.helpers, [1] aws.rds.resources, [1] aws.redshift, [1] aws.redshift.helpers, [1] aws.redshift.resources, [1] aws.route53, [1] aws.route53.resources, [1] aws.s3, [1] aws.s3.helpers, [1] aws.s3.resources, [1] aws.sns, [1] aws.sns.resources, [1] bin bin.auth bin.auth.setup_gsuite cache conftest custom_config exemptions frost, [1] frost.cli, [1] gcp, [1] gcp.bigquery, [1] gcp.bigquery.resources, [1] gcp.client, [1] gcp.compute, [1] gcp.compute.helpers, [1] gcp.compute.resources, [1] gcp.conftest, [1] gcp.iam, [1] gcp.iam.helpers, [1] gcp.iam.resources, [1] gcp.sql, [1] gcp.sql.resources, [1] gsuite, [1] gsuite.admin, [1] gsuite.admin.helpers, [1] gsuite.admin.resources, [1] gsuite.client, [1] gsuite.conftest, [1] helpers meta_test_cache service_report_generator severity

N

networks() (in module gcp.compute.resources), [1]

networks_with_instances() (in module gcp.compute.resources), [1] no_activity_since() (custom_config.CustomConfigMixin method)

O

owners_of_a_group() (in module gsuite.admin.helpers), [1]

P

PagerdutyConfig (class in custom_config) parse_args() (in module service_report_generator) patch_cache_set() (in module cache) profile (aws.client.AWSAPICall attribute), [1] project_iam_bindings() (in module gcp.iam.resources), [1] pytest_addoption() (in module conftest)

pytest_configure() (in module aws.conftest), [1] (in module conftest) (in module gcp.conftest), [1] (in module gsuite.conftest), [1] pytest_json_to_service_json() (in module service_report_generator) pytest_runtest_makereport() (in module conftest) pytest_runtest_setup() (in module conftest)

R

rds_db_instance_tags() (in module aws.rds.resources), [1] rds_db_instances() (in module aws.rds.resources), [1] rds_db_instances_vpc_security_groups() (in module aws.rds.resources), [1] rds_db_instances_with_tags() (in module aws.rds.resources), [1] rds_db_security_groups() (in module aws.rds.resources), [1] rds_db_snapshot_attributes() (in module aws.rds.resources), [1]

rds_db_snapshot_not_too_old() (in module aws.rds.helpers), [1] rds_db_snapshots() (in module aws.rds.resources), [1] redshift_cluster_security_group_is_open_to_all_ips() (in module aws.redshift.helpers), [1] redshift_cluster_security_group_test_id() (in module aws.redshift.helpers), [1] redshift_cluster_security_groups() (in module aws.redshift.resources), [1] redshift_clusters() (in module aws.redshift.resources), [1] region (aws.client.AWSAPICall attribute), [1]

S

s3_bucket_lifecycle_configuration() (in module aws.s3.resources), [1] s3_buckets() (in module aws.s3.resources), [1] s3_buckets_acls() (in module aws.s3.resources), [1] s3_buckets_cors_rules() (in module aws.s3.resources), [1] s3_buckets_logging() (in module aws.s3.resources), [1] s3_buckets_policy() (in module aws.s3.resources), [1] s3_buckets_versioning() (in module aws.s3.resources), [1] s3_buckets_website() (in module aws.s3.resources), [1] serialize_datetimes() (in module conftest) serialize_marker() (in module conftest) service (aws.client.AWSAPICall attribute), [1]

service_account_keys() (in module gcp.iam.resources), [1] service_accounts() (in module gcp.iam.resources), [1] service_report_generator module severity module SingleSet (class in conftest) sns_subscriptions() (in module aws.sns.resources), [1] sns_subscriptions_by_topic() (in module aws.sns.resources), [1] sns_topic_arns() (in module aws.sns.resources), [1] sns_topics() (in module aws.sns.resources), [1] switch_to_frost_parent_directory() (in module frost.cli), [1]

T

test_cache_serializes_and_deserializes_datetimes() (in module meta_test_cache)

U

uncached_iam_users() (in module meta_test_cache) update() (conftest.SingleSet method)

user_is_admin() (in module aws.iam.resources), [1] user_is_inactive() (in module aws.iam.helpers), [1] (in module gsuite.admin.helpers), [1]

V

values() (aws.client.BotocoreClient method), [1]

Z

zones() (in module aws.route53.resources), [1]