feat(aws): add bedrock_marketplace_subscription_access_least_privilege security check

danibarranqueroo · danibarranqueroo · commit dca2b7c49d39 · 2026-03-31T11:26:14.000+02:00
Add new security check bedrock_marketplace_subscription_access_least_privilege for aws provider.
Includes check implementation, metadata, and unit tests.
diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md
@@ -6,6 +6,7 @@ All notable changes to the **Prowler SDK** are documented in this file.
 
 ### 🚀 Added
 
+- `bedrock_marketplace_subscription_access_least_privilege` check for aws provider [(#10525)](https://github.com/prowler-cloud/prowler/pull/10525)
 - `apikeys_api_restricted_with_gemini_api` and `gemini_api_disabled` checks for GCP provider [(#10280)](https://github.com/prowler-cloud/prowler/pull/10280)
 - `cloudfront_distributions_logging_enabled` detects Standard Logging v2 via CloudWatch Log Delivery [(#10090)](https://github.com/prowler-cloud/prowler/pull/10090)
 - `glue_etl_jobs_no_secrets_in_arguments` check for plaintext secrets in AWS Glue ETL job arguments [(#10368)](https://github.com/prowler-cloud/prowler/pull/10368)
diff --git a/prowler/compliance/aws/aws_well_architected_framework_security_pillar_aws.json b/prowler/compliance/aws/aws_well_architected_framework_security_pillar_aws.json
@@ -344,6 +344,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "ec2_instance_profile_attached",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/c5_aws.json b/prowler/compliance/aws/c5_aws.json
@@ -5130,6 +5130,7 @@
         "iam_support_role_created",
         "iam_user_with_temporary_credentials",
         "bedrock_api_key_no_administrative_privileges",
+        "bedrock_marketplace_subscription_access_least_privilege",
         "fms_policy_compliant",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
@@ -5200,6 +5201,7 @@
         "iam_support_role_created",
         "iam_user_with_temporary_credentials",
         "bedrock_api_key_no_administrative_privileges",
+        "bedrock_marketplace_subscription_access_least_privilege",
         "fms_policy_compliant",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/cisa_aws.json b/prowler/compliance/aws/cisa_aws.json
@@ -183,6 +183,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "elbv2_ssl_listeners",
         "iam_no_custom_policy_permissive_role_assumption",
         "iam_aws_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/csa_ccm_4.0_aws.json b/prowler/compliance/aws/csa_ccm_4.0_aws.json
@@ -3317,6 +3317,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
         "iam_inline_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json b/prowler/compliance/aws/fedramp_20x_ksi_low_aws.json
@@ -86,6 +86,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_administrator_access_with_mfa",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/fedramp_moderate_revision_4_aws.json b/prowler/compliance/aws/fedramp_moderate_revision_4_aws.json
@@ -300,6 +300,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "ec2_ebs_public_snapshot",
         "ec2_instance_public_ip",
         "ec2_instance_imdsv2_enabled",
diff --git a/prowler/compliance/aws/ffiec_aws.json b/prowler/compliance/aws/ffiec_aws.json
@@ -418,6 +418,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "ec2_instance_profile_attached",
         "iam_policy_attached_only_to_group_or_roles",
         "iam_aws_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/hipaa_aws.json b/prowler/compliance/aws/hipaa_aws.json
@@ -265,6 +265,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
         "iam_inline_policy_no_administrative_privileges"
diff --git a/prowler/compliance/aws/iso27001_2022_aws.json b/prowler/compliance/aws/iso27001_2022_aws.json
@@ -306,6 +306,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
         "iam_inline_policy_no_administrative_privileges"
@@ -970,6 +971,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "ec2_instance_profile_attached",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/kisa_isms_p_2023_aws.json b/prowler/compliance/aws/kisa_isms_p_2023_aws.json
@@ -1389,6 +1389,7 @@
       "Checks": [
         "accessanalyzer_enabled",
         "accessanalyzer_enabled_without_findings",
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_administrator_access_with_mfa",
         "iam_avoid_root_usage",
         "iam_aws_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/kisa_isms_p_2023_korean_aws.json b/prowler/compliance/aws/kisa_isms_p_2023_korean_aws.json
@@ -1389,6 +1389,7 @@
       "Checks": [
         "accessanalyzer_enabled",
         "accessanalyzer_enabled_without_findings",
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_administrator_access_with_mfa",
         "iam_avoid_root_usage",
         "iam_aws_attached_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/nist_800_171_revision_2_aws.json b/prowler/compliance/aws/nist_800_171_revision_2_aws.json
@@ -152,6 +152,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
         "iam_inline_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/nist_800_53_revision_4_aws.json b/prowler/compliance/aws/nist_800_53_revision_4_aws.json
@@ -222,6 +222,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "ec2_ebs_public_snapshot",
         "ec2_instance_public_ip",
         "ec2_instance_imdsv2_enabled",
diff --git a/prowler/compliance/aws/nist_800_53_revision_5_aws.json b/prowler/compliance/aws/nist_800_53_revision_5_aws.json
@@ -1168,6 +1168,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "ec2_ebs_public_snapshot",
         "ec2_instance_public_ip",
         "ec2_instance_imdsv2_enabled",
diff --git a/prowler/compliance/aws/nist_csf_1.1_aws.json b/prowler/compliance/aws/nist_csf_1.1_aws.json
@@ -628,6 +628,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
         "iam_inline_policy_no_administrative_privileges",
diff --git a/prowler/compliance/aws/nist_csf_2.0_aws.json b/prowler/compliance/aws/nist_csf_2.0_aws.json
@@ -774,20 +774,21 @@
         }
       ],
       "Checks": [
-        "iam_administrator_access_with_mfa",
-        "iam_group_administrator_access_policy",
-        "iam_user_administrator_access_policy",
-        "iam_role_administratoraccess_policy",
-        "iam_policy_attached_only_to_group_or_roles",
-        "iam_policy_allows_privilege_escalation",
-        "iam_inline_policy_allows_privilege_escalation",
-        "iam_customer_attached_policy_no_administrative_privileges",
-        "iam_customer_unattached_policy_no_administrative_privileges",
         "accessanalyzer_enabled_without_findings",
+        "bedrock_marketplace_subscription_access_least_privilege",
         "eventbridge_bus_cross_account_access",
         "eventbridge_bus_exposed",
+        "iam_administrator_access_with_mfa",
+        "iam_customer_attached_policy_no_administrative_privileges",
+        "iam_customer_unattached_policy_no_administrative_privileges",
+        "iam_group_administrator_access_policy",
+        "iam_inline_policy_allows_privilege_escalation",
+        "iam_policy_allows_privilege_escalation",
+        "iam_policy_attached_only_to_group_or_roles",
         "iam_policy_no_full_access_to_cloudtrail",
-        "iam_policy_no_full_access_to_kms"
+        "iam_policy_no_full_access_to_kms",
+        "iam_role_administratoraccess_policy",
+        "iam_user_administrator_access_policy"
       ]
     },
     {
diff --git a/prowler/compliance/aws/soc2_aws.json b/prowler/compliance/aws/soc2_aws.json
@@ -205,6 +205,7 @@
         }
       ],
       "Checks": [
+        "bedrock_marketplace_subscription_access_least_privilege",
         "iam_aws_attached_policy_no_administrative_privileges",
         "iam_customer_attached_policy_no_administrative_privileges",
         "iam_inline_policy_no_administrative_privileges"
diff --git a/prowler/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/__init__.py b/prowler/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/__init__.py
diff --git a/prowler/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/bedrock_marketplace_subscription_access_least_privilege.metadata.json b/prowler/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/bedrock_marketplace_subscription_access_least_privilege.metadata.json
@@ -0,0 +1,43 @@
+{
+  "Provider": "aws",
+  "CheckID": "bedrock_marketplace_subscription_access_least_privilege",
+  "CheckTitle": "IAM policy restricts aws-marketplace:Subscribe to specific resources for Bedrock model subscriptions",
+  "CheckType": [
+    "Software and Configuration Checks/AWS Security Best Practices"
+  ],
+  "ServiceName": "bedrock",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "",
+  "Severity": "medium",
+  "ResourceType": "AwsIamPolicy",
+  "ResourceGroup": "IAM",
+  "Description": "IAM policies are evaluated for overly broad `aws-marketplace:Subscribe` permissions on all resources (`*`). This action controls the ability to subscribe to AWS Marketplace products, including **Amazon Bedrock foundation models**, and should be scoped to specific resources to enforce least privilege.",
+  "Risk": "Granting `aws-marketplace:Subscribe` on all resources allows any principal with the policy to subscribe to **any** Marketplace product, including expensive Bedrock models. This could lead to:\n- **Uncontrolled costs** from unauthorized model subscriptions\n- **Shadow AI usage** outside governance controls\n- **Compliance violations** from unapproved model deployments",
+  "RelatedUrl": "",
+  "AdditionalURLs": [
+    "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsmarketplace.html",
+    "https://docs.aws.amazon.com/bedrock/latest/userguide/security-iam.html",
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege"
+  ],
+  "Remediation": {
+    "Code": {
+      "CLI": "",
+      "NativeIaC": "```yaml\nResources:\n  example_resource:\n    Type: AWS::IAM::Policy\n    Properties:\n      PolicyName: scoped-marketplace-subscribe\n      PolicyDocument:\n        Version: '2012-10-17'\n        Statement:\n          - Effect: Allow\n            Action:\n              - aws-marketplace:Subscribe  # CRITICAL: scope to specific product ARNs\n            Resource:\n              - arn:aws:aws-marketplace::123456789012:product/example-product-id\n```",
+      "Other": "1. Open the AWS Console and go to **IAM > Policies**\n2. Locate the policy that grants `aws-marketplace:Subscribe` on `Resource: *`\n3. Click **Edit** and modify the policy statement\n4. Replace `Resource: \"*\"` with specific AWS Marketplace product ARNs that are approved for use\n5. Review and save the updated policy",
+      "Terraform": "```hcl\nresource \"aws_iam_policy\" \"example_resource\" {\n  name = \"scoped-marketplace-subscribe\"\n\n  policy = jsonencode({\n    Version = \"2012-10-17\"\n    Statement = [{\n      Effect   = \"Allow\"\n      Action   = [\"aws-marketplace:Subscribe\"]\n      # CRITICAL: scope to specific product ARNs instead of \"*\"\n      Resource = [\"arn:aws:aws-marketplace::123456789012:product/example-product-id\"]\n    }]\n  })\n}\n```"
+    },
+    "Recommendation": {
+      "Text": "Apply the **principle of least privilege** to `aws-marketplace:Subscribe` permissions. Scope the `Resource` element to specific, approved AWS Marketplace product ARNs rather than using a wildcard (`*`). This prevents unauthorized subscriptions to costly Bedrock models and other Marketplace products.",
+      "Url": "https://hub.prowler.com/check/bedrock_marketplace_subscription_access_least_privilege"
+    }
+  },
+  "Categories": [
+    "gen-ai",
+    "identity-access"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [
+    "bedrock_api_key_no_administrative_privileges"
+  ],
+  "Notes": "This check only evaluates custom IAM policies. AWS managed policies are maintained by AWS and cannot be modified by users. The check flags policies where aws-marketplace:Subscribe is allowed on Resource:* without restriction."
+}
diff --git a/prowler/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/bedrock_marketplace_subscription_access_least_privilege.py b/prowler/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/bedrock_marketplace_subscription_access_least_privilege.py
@@ -0,0 +1,103 @@
+from fnmatch import fnmatch
+
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.iam.iam_client import iam_client
+
+TARGET_ACTION = "aws-marketplace:subscribe"
+
+
+def _policy_allows_marketplace_subscribe_on_all_resources(
+    policy_document: dict,
+) -> bool:
+    """Check if a policy document allows aws-marketplace:Subscribe on Resource:*.
+
+    Inspects each statement in the policy document for Allow statements that
+    grant the ``aws-marketplace:Subscribe`` action (or a wildcard pattern that
+    matches it) on all resources (``*``).  Explicit Deny statements for the
+    same action take precedence and negate the finding.
+
+    Args:
+        policy_document: The IAM policy document to analyse.
+
+    Returns:
+        True if the policy effectively allows aws-marketplace:Subscribe on
+        all resources, False otherwise.
+    """
+    if not policy_document or "Statement" not in policy_document:
+        return False
+
+    statements = policy_document.get("Statement", [])
+    if not isinstance(statements, list):
+        statements = [statements]
+
+    is_allowed = False
+    is_denied = False
+
+    for statement in statements:
+        effect = statement.get("Effect", "")
+        if not isinstance(effect, str):
+            continue
+
+        resources = statement.get("Resource", [])
+        if isinstance(resources, str):
+            resources = [resources]
+
+        actions = statement.get("Action", [])
+        if isinstance(actions, str):
+            actions = [actions]
+
+        action_matches = any(
+            fnmatch(TARGET_ACTION, action.lower()) for action in actions
+        )
+
+        if not action_matches:
+            continue
+
+        if effect == "Allow" and "*" in resources:
+            is_allowed = True
+        elif effect == "Deny":
+            is_denied = True
+
+    return is_allowed and not is_denied
+
+
+class bedrock_marketplace_subscription_access_least_privilege(Check):
+    """Ensure IAM policies restrict aws-marketplace:Subscribe to specific resources.
+
+    This check evaluates custom IAM policies for overly broad
+    ``aws-marketplace:Subscribe`` permissions granted on all resources (``*``).
+    Unrestricted subscribe access allows principals to subscribe to any AWS
+    Marketplace product, including Amazon Bedrock foundation models, without
+    governance controls.
+
+    - PASS: The policy does not allow aws-marketplace:Subscribe on all resources.
+    - FAIL: The policy allows aws-marketplace:Subscribe on all resources.
+    """
+
+    def execute(self) -> list[Check_Report_AWS]:
+        """Execute the check logic.
+
+        Returns:
+            A list of reports containing the result of the check.
+        """
+        findings = []
+        for policy in iam_client.policies.values():
+            if policy.type == "Custom":
+                report = Check_Report_AWS(
+                    metadata=self.metadata(), resource=policy
+                )
+                report.region = iam_client.region
+                report.status = "PASS"
+                report.status_extended = f"IAM policy {policy.name} does not allow aws-marketplace:Subscribe on all resources."
+
+                if (
+                    policy.document
+                    and _policy_allows_marketplace_subscribe_on_all_resources(
+                        policy.document
+                    )
+                ):
+                    report.status = "FAIL"
+                    report.status_extended = f"IAM policy {policy.name} allows aws-marketplace:Subscribe on all resources."
+
+                findings.append(report)
+        return findings
diff --git a/tests/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/__init__.py b/tests/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/__init__.py
diff --git a/tests/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/bedrock_marketplace_subscription_access_least_privilege_test.py b/tests/providers/aws/services/bedrock/bedrock_marketplace_subscription_access_least_privilege/bedrock_marketplace_subscription_access_least_privilege_test.py

Original file line number	Diff line number	Diff line change
`@@ -344,6 +344,7 @@`
`344`	`344`	`}`
`345`	`345`	`],`
`346`	`346`	`"Checks": [`
	`347`	`+ "bedrock_marketplace_subscription_access_least_privilege",`
`347`	`348`	`"ec2_instance_profile_attached",`
`348`	`349`	`"iam_aws_attached_policy_no_administrative_privileges",`
`349`	`350`	`"iam_customer_attached_policy_no_administrative_privileges",`
Original file line number	Diff line number	Diff line change
`@@ -183,6 +183,7 @@`
`183`	`183`	`}`
`184`	`184`	`],`
`185`	`185`	`"Checks": [`
	`186`	`+ "bedrock_marketplace_subscription_access_least_privilege",`
`186`	`187`	`"elbv2_ssl_listeners",`
`187`	`188`	`"iam_no_custom_policy_permissive_role_assumption",`
`188`	`189`	`"iam_aws_attached_policy_no_administrative_privileges",`
Original file line number	Diff line number	Diff line change
`@@ -3317,6 +3317,7 @@`
`3317`	`3317`	`}`
`3318`	`3318`	`],`
`3319`	`3319`	`"Checks": [`
	`3320`	`+ "bedrock_marketplace_subscription_access_least_privilege",`
`3320`	`3321`	`"iam_aws_attached_policy_no_administrative_privileges",`
`3321`	`3322`	`"iam_customer_attached_policy_no_administrative_privileges",`
`3322`	`3323`	`"iam_inline_policy_no_administrative_privileges",`
Original file line number	Diff line number	Diff line change
`@@ -86,6 +86,7 @@`
`86`	`86`	`}`
`87`	`87`	`],`
`88`	`88`	`"Checks": [`
	`89`	`+ "bedrock_marketplace_subscription_access_least_privilege",`
`89`	`90`	`"iam_administrator_access_with_mfa",`
`90`	`91`	`"iam_aws_attached_policy_no_administrative_privileges",`
`91`	`92`	`"iam_customer_attached_policy_no_administrative_privileges",`
Original file line number	Diff line number	Diff line change
`@@ -300,6 +300,7 @@`
`300`	`300`	`}`
`301`	`301`	`],`
`302`	`302`	`"Checks": [`
	`303`	`+ "bedrock_marketplace_subscription_access_least_privilege",`
`303`	`304`	`"ec2_ebs_public_snapshot",`
`304`	`305`	`"ec2_instance_public_ip",`
`305`	`306`	`"ec2_instance_imdsv2_enabled",`
Original file line number	Diff line number	Diff line change
`@@ -418,6 +418,7 @@`
`418`	`418`	`}`
`419`	`419`	`],`
`420`	`420`	`"Checks": [`
	`421`	`+ "bedrock_marketplace_subscription_access_least_privilege",`
`421`	`422`	`"ec2_instance_profile_attached",`
`422`	`423`	`"iam_policy_attached_only_to_group_or_roles",`
`423`	`424`	`"iam_aws_attached_policy_no_administrative_privileges",`
Original file line number	Diff line number	Diff line change
`@@ -265,6 +265,7 @@`
`265`	`265`	`}`
`266`	`266`	`],`
`267`	`267`	`"Checks": [`
	`268`	`+ "bedrock_marketplace_subscription_access_least_privilege",`
`268`	`269`	`"iam_aws_attached_policy_no_administrative_privileges",`
`269`	`270`	`"iam_customer_attached_policy_no_administrative_privileges",`
`270`	`271`	`"iam_inline_policy_no_administrative_privileges"`