rules

package
v0.0.0-...-0c493a3 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jan 3, 2025 License: MIT-0 Imports: 8 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

Functions

This section is empty.

Types

type AsyncPermission

type AsyncPermission struct {
	// contains filtered or unexported fields
}

type AwsAPIGatewayMethodSettingsThrottlingRule

type AwsAPIGatewayMethodSettingsThrottlingRule struct{}

AwsAPIGatewayMethodSettingsThrottlingRule checks whether there is a default "aws_api_gateway_method_settings" resource with throttling values

func NewAwsAPIGatewayMethodSettingsThrottlingRule

func NewAwsAPIGatewayMethodSettingsThrottlingRule() *AwsAPIGatewayMethodSettingsThrottlingRule

func (*AwsAPIGatewayMethodSettingsThrottlingRule) Check

Check checks whether default "aws_api_gateway_method_settings" have throttling values

func (*AwsAPIGatewayMethodSettingsThrottlingRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsAPIGatewayMethodSettingsThrottlingRule) Name

Name returns the rule name

func (*AwsAPIGatewayMethodSettingsThrottlingRule) Severity

Severity returns the rule severity

type AwsAPIGatewayStageLoggingRule

type AwsAPIGatewayStageLoggingRule struct {
	// contains filtered or unexported fields
}

AwsAPIGatewayStageLoggingRule checks whether "aws_api_gateway_stage" has Logging enabled.

func NewAwsAPIGatewayStageLoggingRule

func NewAwsAPIGatewayStageLoggingRule() *AwsAPIGatewayStageLoggingRule

NewAwsAPIGatewayStageLoggingRule returns new rule

func (*AwsAPIGatewayStageLoggingRule) Check

Check checks whether "aws_api_gateway_stage" has logging enabled

func (*AwsAPIGatewayStageLoggingRule) Enabled

func (r *AwsAPIGatewayStageLoggingRule) Enabled() bool

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsAPIGatewayStageLoggingRule) Name

Name returns the rule name

func (*AwsAPIGatewayStageLoggingRule) Severity

func (r *AwsAPIGatewayStageLoggingRule) Severity() string

Severity returns the rule severity

type AwsAPIGatewayStageTracingRule

type AwsAPIGatewayStageTracingRule struct {
	// contains filtered or unexported fields
}

AwsAPIGatewayStageTracingRule checks whether "aws_api_gateway_stage" has tracing enabled.

func NewAwsAPIGatewayStageTracingRule

func NewAwsAPIGatewayStageTracingRule() *AwsAPIGatewayStageTracingRule

NewAwsAPIGatewayStageTracingRule returns new rule

func (*AwsAPIGatewayStageTracingRule) Check

Check checks whether "aws_api_gateway_stage" has tracing enabled

func (*AwsAPIGatewayStageTracingRule) Enabled

func (r *AwsAPIGatewayStageTracingRule) Enabled() bool

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsAPIGatewayStageTracingRule) Name

Name returns the rule name

func (*AwsAPIGatewayStageTracingRule) Severity

func (r *AwsAPIGatewayStageTracingRule) Severity() string

Severity returns the rule severity

type AwsAPIGatewayStageV2LoggingRule

type AwsAPIGatewayStageV2LoggingRule struct {
	// contains filtered or unexported fields
}

AwsAPIGatewayStageV2LoggingRule checks whether "aws_api_gateway_stage" has Logging enabled.

func NewAwsAPIGatewayStageV2LoggingRule

func NewAwsAPIGatewayStageV2LoggingRule() *AwsAPIGatewayStageV2LoggingRule

NewAwsAPIGatewayStageV2LoggingRule returns new rule

func (*AwsAPIGatewayStageV2LoggingRule) Check

Check checks whether "aws_api_gateway_stage" has logging enabled

func (*AwsAPIGatewayStageV2LoggingRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsAPIGatewayStageV2LoggingRule) Name

Name returns the rule name

func (*AwsAPIGatewayStageV2LoggingRule) Severity

Severity returns the rule severity

type AwsApigatewayStageStructuredLoggingRule

type AwsApigatewayStageStructuredLoggingRule struct {
	// contains filtered or unexported fields
}

AwsApigatewayStageStructuredLogging checks if API Gateway logging format is in JSON

func NewAwsApigatewayStageStructuredLoggingRule

func NewAwsApigatewayStageStructuredLoggingRule() *AwsApigatewayStageStructuredLoggingRule

NewAwsApigatewayStageStructuredLoggingRule returns new rule with default attributes

func (*AwsApigatewayStageStructuredLoggingRule) Check

Check checks if API Gateway logging format is in JSON

func (*AwsApigatewayStageStructuredLoggingRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsApigatewayStageStructuredLoggingRule) Name

Name returns the rule name

func (*AwsApigatewayStageStructuredLoggingRule) Severity

Severity returns the rule severity

type AwsApigatewayV2StageStructuredLoggingRule

type AwsApigatewayV2StageStructuredLoggingRule struct {
	// contains filtered or unexported fields
}

AwsApigatewayV2StageStructuredLogging checks if API Gateway logging format is in JSON

func NewAwsApigatewayV2StageStructuredLoggingRule

func NewAwsApigatewayV2StageStructuredLoggingRule() *AwsApigatewayV2StageStructuredLoggingRule

NewAwsApigatewayV2StageStructuredLoggingRule returns new rule with default attributes

func (*AwsApigatewayV2StageStructuredLoggingRule) Check

Check checks if API Gateway logging format is in JSON

func (*AwsApigatewayV2StageStructuredLoggingRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsApigatewayV2StageStructuredLoggingRule) Name

Name returns the rule name

func (*AwsApigatewayV2StageStructuredLoggingRule) Severity

Severity returns the rule severity

type AwsApigatewayV2StageThrottlingRule

type AwsApigatewayV2StageThrottlingRule struct {
	// contains filtered or unexported fields
}

AwsApigatewayV2StageThrottlingRule checks whether "aws_apigatewayv2_stage" has default throttling values.

func NewAwsApigatewayV2StageThrottlingRule

func NewAwsApigatewayV2StageThrottlingRule() *AwsApigatewayV2StageThrottlingRule

NewAwsApigatewayV2StageThrottlingRule returns new rule

func (*AwsApigatewayV2StageThrottlingRule) Check

Check checks whether "aws_apigatewayv2_stage" has has default throttling values

func (*AwsApigatewayV2StageThrottlingRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsApigatewayV2StageThrottlingRule) Name

Name returns the rule name

func (*AwsApigatewayV2StageThrottlingRule) Severity

Severity returns the rule severity

type AwsAppsyncGraphqlAPITracingRule

type AwsAppsyncGraphqlAPITracingRule struct {
	// contains filtered or unexported fields
}

func NewAwsAppsyncGraphqlAPITracingRule

func NewAwsAppsyncGraphqlAPITracingRule() *AwsAppsyncGraphqlAPITracingRule

func (*AwsAppsyncGraphqlAPITracingRule) Check

Check checks whether "aws_appsync_graphql_api" has tracing enabled

func (*AwsAppsyncGraphqlAPITracingRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsAppsyncGraphqlAPITracingRule) Name

Name returns the rule name

func (*AwsAppsyncGraphqlAPITracingRule) Severity

Severity returns the rule severity

type AwsCloudwatchEventTargetNoDlqRule

type AwsCloudwatchEventTargetNoDlqRule struct {
	// contains filtered or unexported fields
}

AwsCloudwatchEventTargetNoDlq checks if there is a DLQ configured on EventBridge targets

func NewAwsCloudwatchEventTargetNoDlqRule

func NewAwsCloudwatchEventTargetNoDlqRule() *AwsCloudwatchEventTargetNoDlqRule

NewAwsCloudwatchEventTargetNoDlqRule returns new rule with default attributes

func (*AwsCloudwatchEventTargetNoDlqRule) Check

Check checks if there is a DLQ configured on EventBridge targets

func (*AwsCloudwatchEventTargetNoDlqRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsCloudwatchEventTargetNoDlqRule) Name

Name returns the rule name

func (*AwsCloudwatchEventTargetNoDlqRule) Severity

Severity returns the rule severity

type AwsCloudwatchLogGroupLambdaRetentionRule

type AwsCloudwatchLogGroupLambdaRetentionRule struct {
	// contains filtered or unexported fields
}

AwsCloudwatchLogGroupLambdaRetention checks if Lambda functions have a corresponding log group with retention configured

func NewAwsCloudwatchLogGroupLambdaRetentionRule

func NewAwsCloudwatchLogGroupLambdaRetentionRule() *AwsCloudwatchLogGroupLambdaRetentionRule

NewAwsCloudwatchLogGroupLambdaRetentionRule returns new rule with default attributes

func (*AwsCloudwatchLogGroupLambdaRetentionRule) Check

Check checks if Lambda functions have a corresponding log group with retention configured

func (*AwsCloudwatchLogGroupLambdaRetentionRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsCloudwatchLogGroupLambdaRetentionRule) Name

Name returns the rule name

func (*AwsCloudwatchLogGroupLambdaRetentionRule) Severity

Severity returns the rule severity

type AwsIamRoleLambdaNoStarRule

type AwsIamRoleLambdaNoStarRule struct {
	// contains filtered or unexported fields
}

AwsIamRoleLambdaNoStar checks if an IAM role with a Lambda principal has broad permissions

func NewAwsIamRoleLambdaNoStarRule

func NewAwsIamRoleLambdaNoStarRule() *AwsIamRoleLambdaNoStarRule

NewAwsIamRoleLambdaNoStarRule returns new rule with default attributes

func (*AwsIamRoleLambdaNoStarRule) Check

func (r *AwsIamRoleLambdaNoStarRule) Check(runner tflint.Runner) error

Check checks if an IAM role with a Lambda principal has broad permissions

func (*AwsIamRoleLambdaNoStarRule) Enabled

func (r *AwsIamRoleLambdaNoStarRule) Enabled() bool

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsIamRoleLambdaNoStarRule) Name

Name returns the rule name

func (*AwsIamRoleLambdaNoStarRule) Severity

func (r *AwsIamRoleLambdaNoStarRule) Severity() string

Severity returns the rule severity

type AwsLambdaEventInvokeConfigAsyncOnFailureRule

type AwsLambdaEventInvokeConfigAsyncOnFailureRule struct {
	// contains filtered or unexported fields
}

AwsLambdaEventInvokeConfigAsyncOnFailure checks if an event invoke config has a destination on failure if the function has permission for an async principal

func NewAwsLambdaEventInvokeConfigAsyncOnFailureRule

func NewAwsLambdaEventInvokeConfigAsyncOnFailureRule() *AwsLambdaEventInvokeConfigAsyncOnFailureRule

NewAwsLambdaEventInvokeConfigAsyncOnFailureRule returns new rule with default attributes

func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Check

Check checks if an event invoke config has a destination on failure if the function has permission for an async principal

func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Name

Name returns the rule name

func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Severity

Severity returns the rule severity

type AwsLambdaEventSourceMappingFailureDestinationRule

type AwsLambdaEventSourceMappingFailureDestinationRule struct {
	// contains filtered or unexported fields
}

AwsLambdaEventSourceMappingFailureDestination checks if there is an on failure destination configured on event source mappings

func NewAwsLambdaEventSourceMappingFailureDestinationRule

func NewAwsLambdaEventSourceMappingFailureDestinationRule() *AwsLambdaEventSourceMappingFailureDestinationRule

NewAwsLambdaEventSourceMappingFailureDestinationRule returns new rule with default attributes

func (*AwsLambdaEventSourceMappingFailureDestinationRule) Check

Check checks if aws_lambda_event_source_mapping as a destination on_failure configured

func (*AwsLambdaEventSourceMappingFailureDestinationRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsLambdaEventSourceMappingFailureDestinationRule) Name

Name returns the rule name

func (*AwsLambdaEventSourceMappingFailureDestinationRule) Severity

Severity returns the rule severity

type AwsLambdaFunctionDefaultMemoryRule

type AwsLambdaFunctionDefaultMemoryRule struct {
	// contains filtered or unexported fields
}

AwsLambdaFunctionDefaultMemory checks if there is an explicit memory size

func NewAwsLambdaFunctionDefaultMemoryRule

func NewAwsLambdaFunctionDefaultMemoryRule() *AwsLambdaFunctionDefaultMemoryRule

NewAwsLambdaFunctionDefaultMemoryRule returns new rule with default attributes

func (*AwsLambdaFunctionDefaultMemoryRule) Check

Check checks if there is an explicit memory size

func (*AwsLambdaFunctionDefaultMemoryRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsLambdaFunctionDefaultMemoryRule) Name

Name returns the rule name

func (*AwsLambdaFunctionDefaultMemoryRule) Severity

Severity returns the rule severity

type AwsLambdaFunctionDefaultTimeoutRule

type AwsLambdaFunctionDefaultTimeoutRule struct {
	// contains filtered or unexported fields
}

AwsLambdaFunctionDefaultTimeout checks if there is an explicit timeout

func NewAwsLambdaFunctionDefaultTimeoutRule

func NewAwsLambdaFunctionDefaultTimeoutRule() *AwsLambdaFunctionDefaultTimeoutRule

NewAwsLambdaFunctionDefaultTimeoutRule returns new rule with default attributes

func (*AwsLambdaFunctionDefaultTimeoutRule) Check

Check checks if there is an explicit timeout

func (*AwsLambdaFunctionDefaultTimeoutRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsLambdaFunctionDefaultTimeoutRule) Name

Name returns the rule name

func (*AwsLambdaFunctionDefaultTimeoutRule) Severity

Severity returns the rule severity

type AwsLambdaFunctionEolRuntimeRule

type AwsLambdaFunctionEolRuntimeRule struct {
	// contains filtered or unexported fields
}

TODO: Write the rule's description here AwsLambdaFunctionEolRuntime checks if the runtime is marked as end-of-life

func NewAwsLambdaFunctionEolRuntimeRule

func NewAwsLambdaFunctionEolRuntimeRule() *AwsLambdaFunctionEolRuntimeRule

NewAwsLambdaFunctionEolRuntimeRule returns new rule with default attributes

func (*AwsLambdaFunctionEolRuntimeRule) Check

Check checks if the runtime is marked as end-of-life

func (*AwsLambdaFunctionEolRuntimeRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsLambdaFunctionEolRuntimeRule) Name

Name returns the rule name

func (*AwsLambdaFunctionEolRuntimeRule) Severity

Severity returns the rule severity

type AwsLambdaFunctionTracingRule

type AwsLambdaFunctionTracingRule struct {
	// contains filtered or unexported fields
}

AwsLambdaFunctionTracingRule checks whether "aws_lambda_function" has tracing enabled.

func NewAwsLambdaFunctionTracingRule

func NewAwsLambdaFunctionTracingRule() *AwsLambdaFunctionTracingRule

NewAwsLambdaFunctionTracingRule returns new rule

func (*AwsLambdaFunctionTracingRule) Check

Check checks whether "aws_lambda_function" has tracing enabled

func (*AwsLambdaFunctionTracingRule) Enabled

func (r *AwsLambdaFunctionTracingRule) Enabled() bool

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsLambdaFunctionTracingRule) Name

Name returns the rule name

func (*AwsLambdaFunctionTracingRule) Severity

func (r *AwsLambdaFunctionTracingRule) Severity() string

Severity returns the rule severity

type AwsLambdaPermissionMultiplePrincipalsRule

type AwsLambdaPermissionMultiplePrincipalsRule struct {
	// contains filtered or unexported fields
}

AwsLambdaPermissionMultiplePrincipals checks if there are multiple Lambda permission with different principals for a single function

func NewAwsLambdaPermissionMultiplePrincipalsRule

func NewAwsLambdaPermissionMultiplePrincipalsRule() *AwsLambdaPermissionMultiplePrincipalsRule

NewAwsLambdaPermissionMultiplePrincipalsRule returns new rule with default attributes

func (*AwsLambdaPermissionMultiplePrincipalsRule) Check

Check checks if there are multiple Lambda permission with different principals for a single function

func (*AwsLambdaPermissionMultiplePrincipalsRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsLambdaPermissionMultiplePrincipalsRule) Name

Name returns the rule name

func (*AwsLambdaPermissionMultiplePrincipalsRule) Severity

Severity returns the rule severity

type AwsSfnStateMachineTracingRule

type AwsSfnStateMachineTracingRule struct {
	// contains filtered or unexported fields
}

AwsSfnStateMachineTracing checks if tracing is enabled for Step functions

func NewAwsSfnStateMachineTracingRule

func NewAwsSfnStateMachineTracingRule() *AwsSfnStateMachineTracingRule

NewAwsSfnStateMachineTracingRule returns new rule with default attributes

func (*AwsSfnStateMachineTracingRule) Check

TODO: Write the details of the inspection Check checks if tracing is enabled for Step functions

func (*AwsSfnStateMachineTracingRule) Enabled

func (r *AwsSfnStateMachineTracingRule) Enabled() bool

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsSfnStateMachineTracingRule) Name

Name returns the rule name

func (*AwsSfnStateMachineTracingRule) Severity

func (r *AwsSfnStateMachineTracingRule) Severity() string

Severity returns the rule severity

type AwsSnsTopicSubscriptionRedrivePolicyRule

type AwsSnsTopicSubscriptionRedrivePolicyRule struct {
	// contains filtered or unexported fields
}

TODO: Write the rule's description here AwsSnsTopicSubscriptionRedrivePolicy checks that an SNS subscription has a redrive policy configured

func NewAwsSnsTopicSubscriptionRedrivePolicyRule

func NewAwsSnsTopicSubscriptionRedrivePolicyRule() *AwsSnsTopicSubscriptionRedrivePolicyRule

NewAwsSnsTopicSubscriptionRedrivePolicyRule returns new rule with default attributes

func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Check

Check checks that an SNS subscription has a redrive policy configured

func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Enabled

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Name

Name returns the rule name

func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Severity

Severity returns the rule severity

type AwsSqsQueueRedrivePolicyRule

type AwsSqsQueueRedrivePolicyRule struct {
	// contains filtered or unexported fields
}

AwsSqsQueueRedrivePolicy checks if an SQS Queue has a redrive policy configured

func NewAwsSqsQueueRedrivePolicyRule

func NewAwsSqsQueueRedrivePolicyRule() *AwsSqsQueueRedrivePolicyRule

NewAwsSqsQueueRedrivePolicyRule returns new rule with default attributes

func (*AwsSqsQueueRedrivePolicyRule) Check

Check checks if an SQS Queue has a redrive policy configured

func (*AwsSqsQueueRedrivePolicyRule) Enabled

func (r *AwsSqsQueueRedrivePolicyRule) Enabled() bool

Enabled returns whether the rule is enabled by default

Link returns the rule reference link

func (*AwsSqsQueueRedrivePolicyRule) Name

Name returns the rule name

func (*AwsSqsQueueRedrivePolicyRule) Severity

func (r *AwsSqsQueueRedrivePolicyRule) Severity() string

Severity returns the rule severity

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL