elastic / cloudbeat / 28810080252

76%

main: 76%

push

github

[Cloud Asset Inventory] Add extra resource fields #2 (EKS & Route 53) (#7183)

## Summary

Follow-up to InfoSec's review of #6991: adds two AWS asset types the
FedRAMP inventory needs but cloudbeat didn't emit — **Route53 DNS
records** and **EKS clusters**. Both are greenfield providers +
fetchers. All resource-specific fields land in `entity.attributes.*`
(non-ECS, flattened), so no integration mapping change is required.

Tracking: https://github.com/elastic/security-team/issues/17750
Merge after: https://github.com/elastic/cloudbeat/pull/6991

## Route53 (`awslib/route53`)

- New global provider (`ListHostedZones` → `ListResourceRecordSets`,
paginated); one asset per record set, carrying its parent zone.
- `entity.attributes`: `Type`, `ResourceRecords`, `Weight`, `Region`,
`ZoneID`, `ZoneName`, `AliasTargetDNS`, `AliasTargetZoneId`,
`HealthCheckId`.
- Classification: `{Infrastructure, "AWS Route53 DNS Record"}`. Region
reported as `global`. Records have no creation time in the SDK, so no
`CreatedAt`.

## EKS (`awslib/eks`)

- New regional provider (`ListClusters` → `DescribeCluster` per
cluster); one asset per cluster.
- `entity.attributes`: `Status`, `Version`, `Endpoint`, `RoleArn`,
`PlatformVersion`, `EndpointPublicAccess`, `EndpointPrivateAccess`,
`OwnerTag`; plus `entity.lifecycle.CreatedAt`.
- Classification: `{Orchestrator, "AWS EKS Cluster"}` (consistent with
GCP GKE).

## Notes

- **Dependency bump:** adding the EKS SDK pulled a core bump —
`aws-sdk-go-v2` 1.41.1→1.42.1, `smithy-go` 1.24.0→1.27.3, and two
indirect internal modules. Whole repo builds and tests pass.
- **ASSETS.md / spreadsheet:** regenerated (AWS coverage 21→23/85). The
`cloud_assets.xlsx` "EKS Cluster" row was moved from Infrastructure to
Orchestrator to match the classification (and GKE); the Route53 and EKS
"Updated Type" cells were filled so the generator marks them
implemented.
- **No `elastic/integrations` change:** `entity.attributes` is flattened
(arbitrary keys) an... (continued)

235 of 283 new or added lines in 9 files covered. (83.04%)

10201 of 13406 relevant lines covered (76.09%)

15.9 hits per line