Merge pull request #85 from dasmeta/DMVP-5219 #261
Annotations
61 errors and 16 warnings
terraform-validate (modules/sns_to_lambda)
CKV_AWS_26: "Ensure all data stored in the SNS topic is encrypted"
|
terraform-validate (modules/sns_to_lambda)
CKV_AWS_186: "Ensure S3 bucket Object is encrypted by KMS using a customer managed Key (CMK)"
|
terraform-validate (modules/sns_to_lambda)
CKV_AWS_124: "Ensure that CloudFormation stacks are sending event notifications to an SNS topic"
|
terraform-validate (modules/sns_to_lambda)
CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"
|
terraform-validate (modules/sns_to_lambda)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/sns_to_lambda)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/sns_to_lambda)
CKV_AWS_158: "Ensure that CloudWatch Log Group is encrypted by KMS"
|
terraform-validate (modules/sns_to_lambda)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/sns_to_lambda)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/sns_to_lambda)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/eventbridge)
CKV_AWS_26: "Ensure all data stored in the SNS topic is encrypted"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/alerts)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/security-hub)
CKV_AWS_363: "Ensure Lambda Runtime is not deprecated"
|
terraform-validate (modules/security-hub)
CKV_AWS_50: "X-Ray tracing is enabled for Lambda"
|
terraform-validate (modules/security-hub)
CKV_AWS_258: "Ensure that Lambda function URLs AuthType is not None"
|
terraform-validate (modules/security-hub)
CKV_AWS_363: "Ensure Lambda Runtime is not deprecated"
|
terraform-validate (modules/security-hub)
CKV_AWS_50: "X-Ray tracing is enabled for Lambda"
|
terraform-validate (modules/security-hub)
CKV_AWS_258: "Ensure that Lambda function URLs AuthType is not None"
|
terraform-validate (modules/security-hub)
CKV_AWS_363: "Ensure Lambda Runtime is not deprecated"
|
terraform-validate (modules/security-hub)
CKV_AWS_50: "X-Ray tracing is enabled for Lambda"
|
terraform-validate (modules/security-hub)
CKV_AWS_258: "Ensure that Lambda function URLs AuthType is not None"
|
terraform-validate (modules/security-hub)
CKV_AWS_363: "Ensure Lambda Runtime is not deprecated"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_AWS_40: "Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_AWS_40: "Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/cloudwatch-alarm-actions)
CKV_AWS_40: "Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)"
|
terraform-validate (modules/dashboard)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/dashboard)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/dashboard)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/dashboard)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/dashboard)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (modules/dashboard)
CKV_AWS_158: "Ensure that CloudWatch Log Group is encrypted by KMS"
|
terraform-validate (modules/dashboard)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
|
terraform-validate (modules/dashboard)
CKV_AWS_66: "Ensure that CloudWatch Log Group specifies retention days"
|
terraform-validate (modules/dashboard)
CKV_AWS_158: "Ensure that CloudWatch Log Group is encrypted by KMS"
|
terraform-validate (modules/dashboard)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
|
terraform-validate (./)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (./)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (./)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (./)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (./)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (./)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (./)
CKV_AWS_40: "Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)"
|
terraform-validate (./)
CKV_AWS_40: "Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)"
|
terraform-validate (./)
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
terraform-validate (./)
CKV_AWS_40: "Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.)"
|
terraform-validate (modules/sns_to_lambda)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (modules/sns_to_lambda)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
terraform-validate (modules/eventbridge)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (modules/eventbridge)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
terraform-validate (modules/alerts)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (modules/alerts)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
terraform-validate (modules/security-hub)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (modules/security-hub)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
terraform-validate (modules/billing)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (modules/billing)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
terraform-validate (modules/cloudwatch-alarm-actions)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (modules/cloudwatch-alarm-actions)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
terraform-validate (modules/dashboard)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (modules/dashboard)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
terraform-validate (./)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
terraform-validate (./)
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|