Add SAP BTP as a Cloud Provider

[picoroma]

New feature motivation

Have you in pipeline to add SAP BTP as cloud provider ?
If yes, when ?

Solution Proposed

More info on SAP BTP:
https://account.hana.ondemand.com/#/home/welcome
https://www.sap.com/products/technology-platform.html

Describe alternatives you've considered

NA

Additional context

NA

[puchy22]

Hi @picoroma,

At the moment, we don’t have plans to add that provider on our side. However, if you’d like to contribute it yourself, we’d be happy to welcome your contribution and provide any support and guidance you need throughout the process. The latest provider added by the community was NHN in the PR #6870 so you can get an idea of what’s involved in adding a new one.

Thank you very much for your interest in helping improve Prowler!

[picoroma]

I Attach here some documents\links in order to start to study a possible implementation.

1. https://assets.dm.ux.sap.com/sap-user-groups-k4u/pdfs/230511_sap_btp_security_and_compliance_overview.pdf
2. https://aws.amazon.com/blogs/awsforsap/automated-security-monitoring-for-rise-with-sap-and-sap-btp-on-aws/ - (For RISE with SAP customers in AWS)
3. https://www.sap.com/about/trust-center.html
4. https://help.sap.com/docs/btp/sap-btp-security-recommendations-c8a9bb59fe624f0981efa0eff2497d7d/sap-btp-security-recommendations

[picoroma]

Hi @picoroma,

At the moment, we don’t have plans to add that provider on our side. However, if you’d like to contribute it yourself, we’d be happy to welcome your contribution and provide any support and guidance you need throughout the process. The latest provider added by the community was NHN in the PR #6870 so you can get an idea of what’s involved in adding a new one.

Thank you very much for your interest in helping improve Prowler!

Is there a GUIDE or a checklist to follow in order to add a new provider ?
What are the prerequisites?
How have the check to be written?

[puchy22]

To contribute to Prowler, we have a dedicated guide in our documentation. There you’ll find everything you need to get started, and you’ll see it’s not as complex as it might seem at first.

If you’re looking to contribute a new provider, these are the most relevant pages:

• Overview of how to contribute:
  https://docs.prowler.com/projects/prowler-open-source/en/latest/developer-guide/introduction/
• Provider class documentation, which covers authentication and other provider-specific logic:
  https://docs.prowler.com/projects/prowler-open-source/en/latest/developer-guide/provider/
• Services guide, where you'll learn how to fetch data from the provider’s services:
  https://docs.prowler.com/projects/prowler-open-source/en/latest/developer-guide/services/
• Checks format documentation, which explains how each check should be structured:
  https://docs.prowler.com/projects/prowler-open-source/en/latest/developer-guide/checks/

Additionally, you can use Prowler Studio to help creating new checks. The only requirement is to have at least one manually written check for that service, so the system has a reference to work from.

And of course, we’re here to support you throughout the development process — don’t hesitate to reach out if you need any help!