chore(docs): update BridgeCrew links in metadata to our local docs li…

…nk (#3858) Co-authored-by: puchy22 <[email protected]>
prowler-cloud · Apr 29, 2024 · b361524 · b361524
1 parent 768ca3f
commit b361524
Show file tree

Hide file tree

Showing 286 changed files with 445 additions and 446 deletions.
diff --git a/docs/developer-guide/checks.md b/docs/developer-guide/checks.md
@@ -249,11 +249,11 @@ Each Prowler check has metadata associated which is stored at the same level of
  # Code holds different methods to remediate the FAIL finding
  "Code": {
  # CLI holds the command in the provider native CLI to remediate it
- "CLI": "https://docs.bridgecrew.io/docs/public_8#cli-command",
+ "CLI": "https://docs.prowler.com/checks/public_8#cli-command",
  # NativeIaC holds the native IaC code to remediate it, use "https://docs.bridgecrew.io/docs"
  "NativeIaC": "",
  # Other holds the other commands, scripts or code to remediate it, use "https://www.trendmicro.com/cloudoneconformity"
- "Other": "https://docs.bridgecrew.io/docs/public_8#aws-console",
+ "Other": "https://docs.prowler.com/checks/public_8#aws-console",
  # Terraform holds the Terraform code to remediate it, use "https://docs.bridgecrew.io/docs"
  "Terraform": ""
  },

diff --git a/...t_maintain_current_contact_details/account_maintain_current_contact_details.metadata.json b/...t_maintain_current_contact_details/account_maintain_current_contact_details.metadata.json
@@ -17,7 +17,7 @@
  "Code": {
  "CLI": "No command available.",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/iam_18-maintain-contact-details#aws-console",
+ "Other": "https://docs.prowler.com/checks/aws/iam-policies/iam_18-maintain-contact-details#aws-console",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/...count_maintain_different_contact_details_to_security_billing_and_operations.metadata.json b/...count_maintain_different_contact_details_to_security_billing_and_operations.metadata.json
@@ -17,7 +17,7 @@
  "Code": {
  "CLI": "",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/iam_18-maintain-contact-details#aws-console",
+ "Other": "https://docs.prowler.com/checks/aws/iam-policies/iam_18-maintain-contact-details#aws-console",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/...nformation_is_registered/account_security_contact_information_is_registered.metadata.json b/...nformation_is_registered/account_security_contact_information_is_registered.metadata.json
@@ -17,7 +17,7 @@
  "Code": {
  "CLI": "No command available.",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/iam_19#aws-console",
+ "Other": "https://docs.prowler.com/checks/aws/iam-policies/iam_19#aws-console",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/...he_aws_account/account_security_questions_are_registered_in_the_aws_account.metadata.json b/...he_aws_account/account_security_questions_are_registered_in_the_aws_account.metadata.json
@@ -17,7 +17,7 @@
  "Code": {
  "CLI": "No command available.",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/iam_15",
+ "Other": "https://docs.prowler.com/checks/aws/iam-policies/iam_15",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/...igateway_restapi_authorizers_enabled/apigateway_restapi_authorizers_enabled.metadata.json b/...igateway_restapi_authorizers_enabled/apigateway_restapi_authorizers_enabled.metadata.json
@@ -19,9 +19,9 @@
  "Remediation": {
  "Code": {
  "CLI": "",
- "NativeIaC": "https://docs.bridgecrew.io/docs/public_6-api-gateway-authorizer-set#cloudformation",
+ "NativeIaC": "https://docs.prowler.com/checks/aws/public-policies/public_6-api-gateway-authorizer-set#cloudformation",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/public_6-api-gateway-authorizer-set#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/public-policies/public_6-api-gateway-authorizer-set#terraform"
  },
  "Recommendation": {
  "Text": "Implement Amazon Cognito or a Lambda function to control access to your API.",

diff --git a/...teway/apigateway_restapi_logging_enabled/apigateway_restapi_logging_enabled.metadata.json b/...teway/apigateway_restapi_logging_enabled/apigateway_restapi_logging_enabled.metadata.json
@@ -21,7 +21,7 @@
  "CLI": "",
  "NativeIaC": "",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/ensure-api-gateway-stage-have-logging-level-defined-as-appropiate#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/logging-policies/ensure-api-gateway-stage-have-logging-level-defined-as-appropiate#terraform"
  },
  "Recommendation": {
  "Text": "Monitoring is an important part of maintaining the reliability, availability and performance of API Gateway and your AWS solutions. You should collect monitoring data from all of the parts of your AWS solution. CloudTrail provides a record of actions taken by a user, role, or an AWS service in API Gateway. Using the information collected by CloudTrail, you can determine the request that was made to API Gateway, the IP address from which the request was made, who made the request, etc.",

diff --git a/...atewayv2_api_access_logging_enabled/apigatewayv2_api_access_logging_enabled.metadata.json b/...atewayv2_api_access_logging_enabled/apigatewayv2_api_access_logging_enabled.metadata.json
@@ -20,8 +20,8 @@
  "Code": {
  "CLI": "",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/bc_aws_logging_30#aws-console",
- "Terraform": "https://docs.bridgecrew.io/docs/bc_aws_logging_30#cloudformation"
+ "Other": "https://docs.prowler.com/checks/aws/logging-policies/bc_aws_logging_30#aws-console",
+ "Terraform": "https://docs.prowler.com/checks/aws/logging-policies/bc_aws_logging_30#cloudformation"
  },
  "Recommendation": {
  "Text": "Monitoring is an important part of maintaining the reliability, availability and performance of API Gateway and your AWS solutions. You should collect monitoring data from all of the parts of your AWS solution. CloudTrail provides a record of actions taken by a user, role, or an AWS service in API Gateway. Using the information collected by CloudTrail, you can determine the request that was made to API Gateway, the IP address from which the request was made, who made the request, etc.",

diff --git a/...aws/services/athena/athena_workgroup_encryption/athena_workgroup_encryption.metadata.json b/...aws/services/athena/athena_workgroup_encryption/athena_workgroup_encryption.metadata.json
@@ -18,7 +18,7 @@
  "CLI": "aws athena update-work-group --region <REGION> --work-group <workgroup_name> --configuration-updates ResultConfigurationUpdates={EncryptionConfiguration={EncryptionOption=SSE_S3|SSE_KMS|CSE_KMS}}",
  "NativeIaC": "",
  "Other": "https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/Athena/encryption-enabled.html",
- "Terraform": "https://docs.bridgecrew.io/docs/ensure-that-athena-workgroup-is-encrypted#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/general-policies/ensure-that-athena-workgroup-is-encrypted#terraform"
  },
  "Recommendation": {
  "Text": "Enable Encryption. Use a CMK where possible. It will provide additional management and privacy benefits.",

diff --git a/...hena_workgroup_enforce_configuration/athena_workgroup_enforce_configuration.metadata.json b/...hena_workgroup_enforce_configuration/athena_workgroup_enforce_configuration.metadata.json
@@ -16,9 +16,9 @@
  "Remediation": {
  "Code": {
  "CLI": "aws athena update-work-group --region <REGION> --work-group <workgroup_name> --configuration-updates EnforceWorkGroupConfiguration=True",
- "NativeIaC": "https://docs.bridgecrew.io/docs/bc_aws_general_33#cloudformation",
+ "NativeIaC": "https://docs.prowler.com/checks/aws/general-policies/bc_aws_general_33#cloudformation",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/bc_aws_general_33#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/general-policies/bc_aws_general_33#terraform"
  },
  "Recommendation": {
  "Text": "Ensure that workgroup configuration is enforced so it cannot be overriden by client-side settings.",
@@ -29,4 +29,4 @@
  "DependsOn": [],
  "RelatedTo": [],
  "Notes": ""
-}
+}
diff --git a/...function_no_secrets_in_variables/awslambda_function_no_secrets_in_variables.metadata.json b/...function_no_secrets_in_variables/awslambda_function_no_secrets_in_variables.metadata.json
@@ -13,10 +13,10 @@
  "RelatedUrl": "https://docs.aws.amazon.com/secretsmanager/latest/userguide/lambda-functions.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/bc_aws_secrets_3#cli-command",
- "NativeIaC": "https://docs.bridgecrew.io/docs/bc_aws_secrets_3#cloudformation",
+ "CLI": "https://docs.prowler.com/checks/aws/secrets-policies/bc_aws_secrets_3#cli-command",
+ "NativeIaC": "https://docs.prowler.com/checks/aws/secrets-policies/bc_aws_secrets_3#cloudformation",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/bc_aws_secrets_3#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/secrets-policies/bc_aws_secrets_3#terraform"
  },
  "Recommendation": {
  "Text": "Use Secrets Manager to securely provide database credentials to Lambda functions and secure the databases as well as use the credentials to connect and query them without hardcoding the secrets in code or passing them through environmental variables.",

diff --git a/...mation_stack_outputs_find_secrets/cloudformation_stack_outputs_find_secrets.metadata.json b/...mation_stack_outputs_find_secrets/cloudformation_stack_outputs_find_secrets.metadata.json
@@ -13,7 +13,7 @@
  "RelatedUrl": "https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-secretsmanager-secret-generatesecretstring.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/bc_aws_secrets_2#cli-command",
+ "CLI": "https://docs.prowler.com/checks/aws/secrets-policies/bc_aws_secrets_2#cli-command",
  "NativeIaC": "",
  "Other": "",
  "Terraform": ""

diff --git a/...oudfront_distributions_https_enabled/cloudfront_distributions_https_enabled.metadata.json b/...oudfront_distributions_https_enabled/cloudfront_distributions_https_enabled.metadata.json
@@ -14,9 +14,9 @@
  "Remediation": {
  "Code": {
  "CLI": "https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/CloudFront/security-policy.html",
- "NativeIaC": "https://docs.bridgecrew.io/docs/networking_32#cloudformation",
+ "NativeIaC": "https://docs.prowler.com/checks/aws/networking-policies/networking_32#cloudformation",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/networking_32#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/networking-policies/networking_32#terraform"
  },
  "Recommendation": {
  "Text": "Use HTTPS everywhere possible. It will enforce privacy and protect against account hijacking and other threats.",

diff --git a/...ront_distributions_logging_enabled/cloudfront_distributions_logging_enabled.metadata.json b/...ront_distributions_logging_enabled/cloudfront_distributions_logging_enabled.metadata.json
@@ -13,10 +13,10 @@
  "RelatedUrl": "https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/logging_20#cli-command",
- "NativeIaC": "https://docs.bridgecrew.io/docs/logging_20#cloudformation",
+ "CLI": "https://docs.prowler.com/checks/aws/logging-policies/logging_20#cli-command",
+ "NativeIaC": "https://docs.prowler.com/checks/aws/logging-policies/logging_20#cloudformation",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/logging_20#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/logging-policies/logging_20#terraform"
  },
  "Recommendation": {
  "Text": "Real-time monitoring can be achieved by directing CloudTrail Logs to CloudWatch Logs and establishing corresponding metric filters and alarms. Enable logging for services with defined log rotation. These logs are useful for Incident Response and forensics investigation among other use cases.",

diff --git a/...cated_ssl_protocols/cloudfront_distributions_using_deprecated_ssl_protocols.metadata.json b/...cated_ssl_protocols/cloudfront_distributions_using_deprecated_ssl_protocols.metadata.json
@@ -13,9 +13,9 @@
  "RelatedUrl": "https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/networking_33#cli-command",
+ "CLI": "https://docs.prowler.com/checks/aws/networking-policies/networking_33#cli-command",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/networking_33#aws-cloudfront-console",
+ "Other": "https://docs.prowler.com/checks/aws/networking-policies/networking_33#aws-cloudfront-console",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/...front/cloudfront_distributions_using_waf/cloudfront_distributions_using_waf.metadata.json b/...front/cloudfront_distributions_using_waf/cloudfront_distributions_using_waf.metadata.json
@@ -16,9 +16,9 @@
  "Remediation": {
  "Code": {
  "CLI": "https://www.trendmicro.com/cloudoneconformity/knowledge-base/aws/CloudFront/cloudfront-integrated-with-waf.html",
- "NativeIaC": "https://docs.bridgecrew.io/docs/bc_aws_general_27#cloudformation",
- "Other": "https://docs.bridgecrew.io/docs/bc_aws_general_27#cloudfront-console",
- "Terraform": "https://docs.bridgecrew.io/docs/bc_aws_general_27#terraform"
+ "NativeIaC": "https://docs.prowler.com/checks/aws/general-policies/bc_aws_general_27#cloudformation",
+ "Other": "https://docs.prowler.com/checks/aws/general-policies/bc_aws_general_27#cloudfront-console",
+ "Terraform": "https://docs.prowler.com/checks/aws/general-policies/bc_aws_general_27#terraform"
  },
  "Recommendation": {
  "Text": "Use AWS WAF to protect your service from common web exploits. These could affect availability and performance; compromise security; or consume excessive resources.",

diff --git a/...cloudtrail_cloudwatch_logging_enabled/cloudtrail_cloudwatch_logging_enabled.metadata.json b/...cloudtrail_cloudwatch_logging_enabled/cloudtrail_cloudwatch_logging_enabled.metadata.json
@@ -19,7 +19,7 @@
  "Code": {
  "CLI": "aws cloudtrail update-trail --name <trail_name> --cloudwatch-logs-log-group- arn <cloudtrail_log_group_arn> --cloudwatch-logs-role-arn <cloudtrail_cloudwatchLogs_role_arn>",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/logging_4#aws-console",
+ "Other": "https://docs.prowler.com/checks/aws/logging-policies/logging_4#aws-console",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/...udtrail/cloudtrail_kms_encryption_enabled/cloudtrail_kms_encryption_enabled.metadata.json b/...udtrail/cloudtrail_kms_encryption_enabled/cloudtrail_kms_encryption_enabled.metadata.json
@@ -18,7 +18,7 @@
  "Remediation": {
  "Code": {
  "CLI": "aws cloudtrail update-trail --name <trail_name> --kms-id <cloudtrail_kms_key> aws kms put-key-policy --key-id <cloudtrail_kms_key> --policy <cloudtrail_kms_key_policy>",
- "NativeIaC": "https://docs.bridgecrew.io/docs/logging_7#fix---buildtime",
+ "NativeIaC": "https://docs.prowler.com/checks/aws/logging-policies/logging_7#fix---buildtime",
  "Other": "",
  "Terraform": ""
  },

diff --git a/...oudtrail_log_file_validation_enabled/cloudtrail_log_file_validation_enabled.metadata.json b/...oudtrail_log_file_validation_enabled/cloudtrail_log_file_validation_enabled.metadata.json
@@ -18,9 +18,9 @@
  "Remediation": {
  "Code": {
  "CLI": "aws cloudtrail update-trail --name <trail_name> --enable-log-file-validation",
- "NativeIaC": "https://docs.bridgecrew.io/docs/logging_2#cloudformation",
+ "NativeIaC": "https://docs.prowler.com/checks/aws/logging-policies/logging_2#cloudformation",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/logging_2#terraform"
+ "Terraform": "https://docs.prowler.com/checks/aws/logging-policies/logging_2#terraform"
  },
  "Recommendation": {
  "Text": "Ensure LogFileValidationEnabled is set to true for each trail.",

diff --git a/...ket_access_logging_enabled/cloudtrail_logs_s3_bucket_access_logging_enabled.metadata.json b/...ket_access_logging_enabled/cloudtrail_logs_s3_bucket_access_logging_enabled.metadata.json
@@ -19,7 +19,7 @@
  "Code": {
  "CLI": "",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/logging_6#aws-console",
+ "Other": "https://docs.prowler.com/checks/aws/logging-policies/logging_6#aws-console",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/...ot_publicly_accessible/cloudtrail_logs_s3_bucket_is_not_publicly_accessible.metadata.json b/...ot_publicly_accessible/cloudtrail_logs_s3_bucket_is_not_publicly_accessible.metadata.json
@@ -19,7 +19,7 @@
  "Code": {
  "CLI": "",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/logging_3#aws-console",
+ "Other": "https://docs.prowler.com/checks/aws/logging-policies/logging_3#aws-console",
  "Terraform": ""
  },
  "Recommendation": {

diff --git a/.../cloudtrail/cloudtrail_multi_region_enabled/cloudtrail_multi_region_enabled.metadata.json b/.../cloudtrail/cloudtrail_multi_region_enabled/cloudtrail_multi_region_enabled.metadata.json
@@ -18,9 +18,9 @@
  "Remediation": {
  "Code": {
  "CLI": "aws cloudtrail create-trail --name <trail_name> --bucket-name <s3_bucket_for_cloudtrail> --is-multi-region-trail aws cloudtrail update-trail --name <trail_name> --is-multi-region-trail ",
- "NativeIaC": "https://docs.bridgecrew.io/docs/logging_1#cloudformation",
- "Other": "https://docs.bridgecrew.io/docs/logging_1#aws-console",
- "Terraform": "https://docs.bridgecrew.io/docs/logging_1#terraform"
+ "NativeIaC": "https://docs.prowler.com/checks/aws/logging-policies/logging_1#cloudformation",
+ "Other": "https://docs.prowler.com/checks/aws/logging-policies/logging_1#aws-console",
+ "Terraform": "https://docs.prowler.com/checks/aws/logging-policies/logging_1#terraform"
  },
  "Recommendation": {
  "Text": "Ensure Logging is set to ON on all regions (even if they are not being used at the moment.",

diff --git a/...management_events/cloudtrail_multi_region_enabled_logging_management_events.metadata.json b/...management_events/cloudtrail_multi_region_enabled_logging_management_events.metadata.json
@@ -12,17 +12,17 @@
  "ResourceType": "AwsCloudTrailTrail",
  "Description": "Ensure CloudTrail logging management events in All Regions",
  "Risk": "AWS CloudTrail enables governance, compliance, operational auditing, and risk auditing of your AWS account. To meet FTR requirements, you must have management events enabled for all AWS accounts and in all regions and aggregate these logs into an Amazon Simple Storage Service (Amazon S3) bucket owned by a separate AWS account.",
- "RelatedUrl": "https://docs.bridgecrew.io/docs/logging_14",
+ "RelatedUrl": "https://docs.prowler.com/checks/aws/logging-policies/logging_14",
  "Remediation": {
  "Code": {
  "CLI": "aws cloudtrail update-trail --name <trail_name> --is-multi-region-trail",
  "NativeIaC": "",
- "Other": "https://docs.bridgecrew.io/docs/logging_14",
- "Terraform": "https://docs.bridgecrew.io/docs/logging_14#terraform"
+ "Other": "https://docs.prowler.com/checks/aws/logging-policies/logging_14",
+ "Terraform": "https://docs.prowler.com/checks/aws/logging-policies/logging_14#terraform"
  },
  "Recommendation": {
  "Text": "Enable CloudTrail logging management events in All Regions",
- "Url": "https://docs.bridgecrew.io/docs/logging_14"
+ "Url": "https://docs.prowler.com/checks/aws/logging-policies/logging_14"
  }
  },
  "Categories": [

diff --git a/...k_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured.metadata.json b/...k_acls_alarm_configured/cloudwatch_changes_to_network_acls_alarm_configured.metadata.json
@@ -15,10 +15,10 @@
  "RelatedUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudwatch-alarms-for-cloudtrail.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/monitoring_11#procedure",
+ "CLI": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_11#procedure",
  "NativeIaC": "",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/monitoring_11#fix---buildtime"
+ "Terraform": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_11#fix---buildtime"
  },
  "Recommendation": {
  "Text": "It is recommended that a metric filter and alarm be established for unauthorized requests.",

diff --git a/...ys_alarm_configured/cloudwatch_changes_to_network_gateways_alarm_configured.metadata.json b/...ys_alarm_configured/cloudwatch_changes_to_network_gateways_alarm_configured.metadata.json
@@ -15,10 +15,10 @@
  "RelatedUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudwatch-alarms-for-cloudtrail.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/monitoring_12#procedure",
+ "CLI": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_12#procedure",
  "NativeIaC": "",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/monitoring_12#fix---buildtime"
+ "Terraform": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_12#fix---buildtime"
  },
  "Recommendation": {
  "Text": "It is recommended that a metric filter and alarm be established for unauthorized requests.",

diff --git a/...larm_configured/cloudwatch_changes_to_network_route_tables_alarm_configured.metadata.json b/...larm_configured/cloudwatch_changes_to_network_route_tables_alarm_configured.metadata.json
@@ -15,10 +15,10 @@
  "RelatedUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudwatch-alarms-for-cloudtrail.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/monitoring_13#procedure",
+ "CLI": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_13#procedure",
  "NativeIaC": "",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/monitoring_13#fix---buildtime"
+ "Terraform": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_13#fix---buildtime"
  },
  "Recommendation": {
  "Text": "If you are using CloudTrails and CloudWatch, perform the following to setup the metric filter, alarm, SNS topic, and subscription: 1. Create a metric filter based on filter pattern provided which checks for route table changes and the <cloudtrail_log_group_name> taken from audit step 1. aws logs put-metric-filter --log-group-name <cloudtrail_log_group_name> -- filter-name `<route_table_changes_metric>` --metric-transformations metricName= `<route_table_changes_metric>` ,metricNamespace='CISBenchmark',metricValue=1 --filter-pattern '{($.eventSource = ec2.amazonaws.com) && (($.eventName = CreateRoute) || ($.eventName = CreateRouteTable) || ($.eventName = ReplaceRoute) || ($.eventName = ReplaceRouteTableAssociation) || ($.eventName = DeleteRouteTable) || ($.eventName = DeleteRoute) || ($.eventName = DisassociateRouteTable)) }' Note: You can choose your own metricName and metricNamespace strings. Using the same metricNamespace for all Foundations Benchmark metrics will group them together. 2. Create an SNS topic that the alarm will notify aws sns create-topic --name <sns_topic_name> Note: you can execute this command once and then re-use the same topic for all monitoring alarms. 3. Create an SNS subscription to the topic created in step 2 aws sns subscribe --topic-arn <sns_topic_arn> --protocol <protocol_for_sns> - -notification-endpoint <sns_subscription_endpoints> Note: you can execute this command once and then re-use the SNS subscription for all monitoring alarms. 4. Create an alarm that is associated with the CloudWatch Logs Metric Filter created in step 1 and an SNS topic created in step 2 aws cloudwatch put-metric-alarm --alarm-name `<route_table_changes_alarm>` --metric-name `<route_table_changes_metric>` --statistic Sum --period 300 - -threshold 1 --comparison-operator GreaterThanOrEqualToThreshold -- evaluation-periods 1 --namespace 'CISBenchmark' --alarm-actions <sns_topic_arn>",

diff --git a/...hanges_to_vpcs_alarm_configured/cloudwatch_changes_to_vpcs_alarm_configured.metadata.json b/...hanges_to_vpcs_alarm_configured/cloudwatch_changes_to_vpcs_alarm_configured.metadata.json
@@ -15,10 +15,10 @@
  "RelatedUrl": "https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudwatch-alarms-for-cloudtrail.html",
  "Remediation": {
  "Code": {
- "CLI": "https://docs.bridgecrew.io/docs/monitoring_14#procedure",
+ "CLI": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_14#procedure",
  "NativeIaC": "",
  "Other": "",
- "Terraform": "https://docs.bridgecrew.io/docs/monitoring_14#fix---buildtime"
+ "Terraform": "https://docs.prowler.com/checks/aws/monitoring-policies/monitoring_14#fix---buildtime"
  },
  "Recommendation": {
  "Text": "It is recommended that a metric filter and alarm be established for unauthorized requests.",