Page Comparison

Description: New AWS, Azure, GCP, OCI, and Alibaba rules. A complete list can be found here.

Case ID: CNAPP-2281
Known limitations: N/A 
Affected Components:

Description: Added AWS Media Package support as 3 new entities: MediaPackageChannel, MediaPackageHarvestJob, MediaPackageOriginEndpoint in Compliance Engine and Protected Assets.
Case ID: CNAPP-1453
Known limitations:
Affected Components:

Description: Added AWS Resource Access Manager (RAM) support as 4 new entities: RamResource, RamPrincipal, RamPermission, RamResourceSharein Compliance Engine and Protected Assets.
Case ID: CNAPP-1456
Known limitations:
Affected Components:

Description: Added support for AWS Managed Grafana Workspace in Compliance Engine and Protected Assets.
Case ID: CNAPP-1450
Known limitations:
Affected Components:

Description: Added AWS Global Accelerator support as 2 new entities: GlobalAccelerator and GlobalCustomAcceleratorin Compliance Engine and Protected Assets.
Case ID: DFR-1840
Known limitations:
Affected Components:

Description: Fixed protected asset page for Azure SQL Managed Instance from Compliance engine and Protected Assets.
Case ID: IN-DFT-2705
Known limitations: N/A 
Affected Components:

Description: Added support for AWS SimSpace Weaver Simulation in Compliance Engine and Protected Assets.
Case ID: CNAPP-1440
Known limitations:
Affected Components:

Description: Added support for AWS AppFlow in Compliance Engine and Protected Assets.
Case ID: CNAPP-1432
Known limitations:
Affected Components:

Description: Added support for AWS Event Bridge Connection in Compliance Engine and Protected Assets.
Case ID: CNAPP-1436
Known limitations:
Affected Components:

Description: Added support for AWS Serverless Application Repository in Compliance Engine and Protected Assets.
Case ID: CNAPP-1442
Known limitations:
Affected Components:

Description: Support for CVEs details in 'additionalInfo' property for the following entities:

• AWS: Instance

• Azure: VirtualMachine

• Kubernetes: KubernetesDaemonSet, KubernetesDeployment, KubernetesCronJob, KubernetesStatefulSet, KubernetesPod, KubernetesReplicaSet

Case ID: CNAPP-1590
Known limitations: N/A 
Affected Components:

Description: Fixed support for GCP Storage Bucket labels in Protected Assets.
Case ID: IN-8152
Known limitations: N/A 
Affected Components:

Description: Added support for AWS EcrRegistryScanningConfig entity in Compliance Engine and Protected Assets.
Case ID: IN-8127
Known limitations:
Affected Components:

Description: Added support for AWS Amplify App entity in Compliance Engine and Protected Assets.
Case ID: CNAPP-1435
Known limitations:
Affected Components:

Description: Added support for AWS Event Bridge Endpoint entity in Compliance Engine and Protected Assets.
Case ID: CNAPP-1437
Known limitations:
Affected Components:

Description: Added support for AWS AppFlow Connector entity in Compliance Engine and Protected Assets.
Case ID: CNAPP-1431
Known limitations:
Affected Components:

Description: Added support for ‘isSftpEnabled’ and 'localUsers' property in Azure Storage Account in Compliance Engine and Protected Assets.
Case ID: DFR-2843
Known limitations:
Affected Components:

Description: New Ruleset CSA CCM v4 RuleSet for Azure; New Ruleset CloudGuard Security Alerts for SG ports - Alibaba Cloud; New AWS, Azure, GCP and Alibaba rules. A complete list can be found here.

Case ID: CNAPP-2102
Known limitations: N/A 
Affected Components:

Description: Added support for ‘runtimePlatform’ property in AWS ECS Task Definition in Compliance Engine and Protected Assets.
Case ID: CNAPP-219
Known limitations:
Affected Components:

Description: Added support for ‘platformFamily’ property in AWS ECS Task in Compliance Engine and Protected Assets.
Case ID: DFR-2585
Known limitations:
Affected Components:

Description: Added support for AWS QuickSight service, including 4 new entities: QuickSightAccount, QuickSightUser, QuickSightGroup and QuickSightVpcConnections.
The service is supported in Compliance Engine, protected assets and API.
Case ID: DFR-2166
Known limitations:
Affected Components:

Description: Added support for AWS Cloud Formation Hook in compliance engine and protected assets.
Case ID: DFR-2734
Known limitations:
Affected Components:

Description: Added support for ‘advancedSecurityOptions’ and ‘domainEndpointOptions’ properties in AWS Elastic Search Domain in Compliance Engine and Protected Assets.
Case ID: DFR-2478
Known limitations:
Affected Components:

Description: Event console will always be set for notification in both UI and API. There is no option to disable it.
This means findings will always be available in the event console and in API (i.e. search API)
Existing notification for which event console was unset will not be changed UNLESS the user opens an old notification for which event console was unset and saves the notification then event console will be automatically set.
Case ID: CNAPP-1792, CNAPP-1697
Affected Components:

Description: Fixed a bug opening a gsuite user in the protected assets.
Case ID: CNAPP-250
Known limitations: N/A 
Affected Components:

Description: Added support for GCP IAM User under protected assets page for non gsuite users.
Case ID: DFR-2595
Known limitations:
Affected Components:

Description: Added support for “timeCreated” in Azure VirtualMachine in Compliance Engine, Protected Assets and API.
Case ID: DFR-2546
Known limitations:
Affected Components:

Description: New Ruleset CIS OpenShift Container Platform v4 Benchmark v1.4.0; New AWS and Azure rules. A complete list can be found here.

Case ID: CNAPP-1915, DFT-2692
Known limitations: N/A 
Affected Components:

Description: Added support for ‘labels’ property in GCP StorageBucket entity in Compliance engine.
Case ID: DFR-2042
Known limitations: Currently, labels are not reflected as tags in Protected Assets.
Affected Components:

Description: Fixed an issue where some icons were missing in the Protected Assets view.
Case ID: IN-8102
Known limitations: N/A 
Affected Components:

Description: Event console will always be set for notification in both UI and API. There is no option to disable it.
This means findings will always be available in the event console and in API (i.e. search API)
Existing notification for which event console was unset will not be changed UNLESS the user opens an old notification for which event console was unset and saves the notification then event console will be automatically set.
Case ID: CNAPP-1792, CNAPP-1697
Affected Components:

Description: Added support for fetching China regions (cn-north-1 & cn-northwest-1) in all AWS fetching entities.
Case ID: CNAPP-845
Known limitations: N/A 
Affected Components:

Description: Added support for many properties in Azure AKSCluster entity for example: ‘disableLocalAccounts’, ‘agentPoolProfiles’ properties, ‘apiServerAccessProfile’, ‘aadProfile’, ‘networkProfile’, ‘securityProfile’, ‘fqdnSubdomain’, ‘diskEncryptionSetID’, ‘currentKubernetesVersion’, ‘azurePortalFQDN’, ‘autoUpgradeProfile’, ‘autoScalerProfile’ in Compliance engine and Protected Assets.
Case ID: DFR-2785, DFR-2842
Known limitations: N/A 
Affected Components:

Description: New Ruleset ISO 27001:2022 for AWS; Rules and ruleset enrichment. A complete list can be found here.

Case ID: CNAPP-1699, DFT-2681, DFT-2670, DFT-2684
Known limitations: N/A 
Affected Components:

Description: Added support for ‘tags’ property in AWS TranscribeMedicalJob entity in Compliance engine and Protected Assets.
Case ID: DFR-2695
Known limitations: N/A 
Affected Components:

Description: Added support for ‘tags’ property in AWS TranscribeJob entity in Compliance engine and Protected Assets.
Case ID: DFR-2695
Known limitations: N/A 
Affected Components:

Description: Added support for ‘replicationGroupKms’ property in AWS ElastiCache entity in Compliance engine and Protected Assets.
Case ID: DFR-2697
Known limitations: N/A 
Affected Components:

Description: Added support for ‘localDiskEncryptionKey’ and ‘s3DiskEncryptionKey’ properties in AWS EmrCluster entity in Compliance engine and Protected Assets.
Added support for ‘encryptionKey’ property in AWS FSx entity in Compliance engine and Protected Assets.
Case ID: DFR-2699
Known limitations: N/A 
Affected Components:

Description: You can now see the context of an ECS Service entity and the RDS entity in the protected asset view.
Case ID: CNAPP-185, CNAPP-519
Known limitations:
Affected Components:

Description: Added support for AWS SES Active Receipt Ruleset in compliance engine and protected assets.
Case ID: DFR-2698
Known limitations:
Affected Components:

Description: “New” labels were removed from the GSL builder UI, for 30 days old entities.
Case ID: IN-7964
Known limitations: N/A 
Affected Components:

Description: Runtime Protection daemon 1.8.8 * added some security enhancements

Case ID: CON-6434
Known limitations: N/A 
Affected Components:

Description: Rules and ruleset improvements. A complete list can be found here.

Case ID: CNAPP-1429, DFT-2678
Known limitations: N/A 
Affected Components: