fix(aws): list tags for DocumentDB clusters (#6605)

prowler-cloud · Jan 20, 2025 · bbba0ab · bbba0ab
1 parent d04fd80
commit bbba0ab
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 1 deletion.
diff --git a/prowler/providers/aws/services/documentdb/documentdb_service.py b/prowler/providers/aws/services/documentdb/documentdb_service.py
@@ -64,6 +64,17 @@ def _describe_db_instances(self, regional_client):
     def _list_tags_for_resource(self):
         logger.info("DocumentDB - List Tags...")
         try:
+            for cluster_arn, cluster in self.db_clusters.items():
+                try:
+                    regional_client = self.regional_clients[cluster.region]
+                    response = regional_client.list_tags_for_resource(
+                        ResourceName=cluster_arn
+                    )["TagList"]
+                    cluster.tags = response
+                except Exception as error:
+                    logger.error(
+                        f"{regional_client.region} -- {error.__class__.__name__}[{error.__traceback__.tb_lineno}]: {error}"
+                    )
             for instance_arn, instance in self.db_instances.items():
                 try:
                     regional_client = self.regional_clients[instance.region]

diff --git a/tests/providers/aws/services/documentdb/documentdb_service_test.py b/tests/providers/aws/services/documentdb/documentdb_service_test.py
@@ -179,7 +179,7 @@ def test_describe_db_clusters(self):
                 parameter_group="default.docdb3.6",
                 deletion_protection=True,
                 region=AWS_REGION_US_EAST_1,
-                tags=[],
+                tags=[{"Key": "environment", "Value": "test"}],
             )
         }