Skip to content

Conversation

@HugoPBrito
Copy link
Member

Context

This PR completes the Cloudflare provider by adding DNS, Firewall, and WAF services. This is part 4 of 4 PRs for complete Cloudflare support.

Depends on: #9425

Description

Adds 3 new services with 4 security checks:

DNS Service (1 check):

Check Description
dns_records_proxied Validates DNS records are proxied through Cloudflare

Firewall Service (2 checks):

Check Description
firewall_has_blocking_rules Ensures firewall has blocking rules configured
firewall_rate_limiting_configured Validates rate limiting is configured at firewall level

WAF Service (1 check):

Check Description
waf_owasp_enabled Validates OWASP ruleset is enabled

Steps to review

  1. Review DNS service in prowler/providers/cloudflare/services/dns/
  2. Review Firewall service in prowler/providers/cloudflare/services/firewall/
  3. Review WAF service in prowler/providers/cloudflare/services/waf/
  4. Test locally:
    prowler cloudflare --api-token <token> --service dns

Checklist

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Adds additional Cloudflare services to complete the provider:

DNS service:
- dns_records_proxied: Validates DNS records are proxied through Cloudflare

Firewall service:
- firewall_has_blocking_rules: Ensures firewall has blocking rules configured
- firewall_rate_limiting_configured: Validates rate limiting is configured

WAF service:
- waf_owasp_enabled: Validates OWASP ruleset is enabled
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

no-merge Please, DO NOT MERGE this PR. provider/cloudflare

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants