Documentation
¶
Index ¶
- Variables
- type AsyncPermission
- type AwsAPIGatewayMethodSettingsThrottlingRule
- func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Check(runner tflint.Runner) error
- func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Enabled() bool
- func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Link() string
- func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Name() string
- func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Severity() string
- type AwsAPIGatewayStageLoggingRule
- type AwsAPIGatewayStageTracingRule
- type AwsAPIGatewayStageV2LoggingRule
- func (r *AwsAPIGatewayStageV2LoggingRule) Check(runner tflint.Runner) error
- func (r *AwsAPIGatewayStageV2LoggingRule) Enabled() bool
- func (r *AwsAPIGatewayStageV2LoggingRule) Link() string
- func (r *AwsAPIGatewayStageV2LoggingRule) Name() string
- func (r *AwsAPIGatewayStageV2LoggingRule) Severity() string
- type AwsApigatewayStageStructuredLoggingRule
- func (r *AwsApigatewayStageStructuredLoggingRule) Check(runner tflint.Runner) error
- func (r *AwsApigatewayStageStructuredLoggingRule) Enabled() bool
- func (r *AwsApigatewayStageStructuredLoggingRule) Link() string
- func (r *AwsApigatewayStageStructuredLoggingRule) Name() string
- func (r *AwsApigatewayStageStructuredLoggingRule) Severity() string
- type AwsApigatewayV2StageStructuredLoggingRule
- func (r *AwsApigatewayV2StageStructuredLoggingRule) Check(runner tflint.Runner) error
- func (r *AwsApigatewayV2StageStructuredLoggingRule) Enabled() bool
- func (r *AwsApigatewayV2StageStructuredLoggingRule) Link() string
- func (r *AwsApigatewayV2StageStructuredLoggingRule) Name() string
- func (r *AwsApigatewayV2StageStructuredLoggingRule) Severity() string
- type AwsApigatewayV2StageThrottlingRule
- func (r *AwsApigatewayV2StageThrottlingRule) Check(runner tflint.Runner) error
- func (r *AwsApigatewayV2StageThrottlingRule) Enabled() bool
- func (r *AwsApigatewayV2StageThrottlingRule) Link() string
- func (r *AwsApigatewayV2StageThrottlingRule) Name() string
- func (r *AwsApigatewayV2StageThrottlingRule) Severity() string
- type AwsAppsyncGraphqlAPITracingRule
- func (r *AwsAppsyncGraphqlAPITracingRule) Check(runner tflint.Runner) error
- func (r *AwsAppsyncGraphqlAPITracingRule) Enabled() bool
- func (r *AwsAppsyncGraphqlAPITracingRule) Link() string
- func (r *AwsAppsyncGraphqlAPITracingRule) Name() string
- func (r *AwsAppsyncGraphqlAPITracingRule) Severity() string
- type AwsCloudwatchEventTargetNoDlqRule
- func (r *AwsCloudwatchEventTargetNoDlqRule) Check(runner tflint.Runner) error
- func (r *AwsCloudwatchEventTargetNoDlqRule) Enabled() bool
- func (r *AwsCloudwatchEventTargetNoDlqRule) Link() string
- func (r *AwsCloudwatchEventTargetNoDlqRule) Name() string
- func (r *AwsCloudwatchEventTargetNoDlqRule) Severity() string
- type AwsCloudwatchLogGroupLambdaRetentionRule
- func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Check(runner tflint.Runner) error
- func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Enabled() bool
- func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Link() string
- func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Name() string
- func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Severity() string
- type AwsIamRoleLambdaNoStarRule
- type AwsLambdaEventInvokeConfigAsyncOnFailureRule
- func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Check(runner tflint.Runner) error
- func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Enabled() bool
- func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Link() string
- func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Name() string
- func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Severity() string
- type AwsLambdaEventSourceMappingFailureDestinationRule
- func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Check(runner tflint.Runner) error
- func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Enabled() bool
- func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Link() string
- func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Name() string
- func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Severity() string
- type AwsLambdaFunctionDefaultMemoryRule
- func (r *AwsLambdaFunctionDefaultMemoryRule) Check(runner tflint.Runner) error
- func (r *AwsLambdaFunctionDefaultMemoryRule) Enabled() bool
- func (r *AwsLambdaFunctionDefaultMemoryRule) Link() string
- func (r *AwsLambdaFunctionDefaultMemoryRule) Name() string
- func (r *AwsLambdaFunctionDefaultMemoryRule) Severity() string
- type AwsLambdaFunctionDefaultTimeoutRule
- func (r *AwsLambdaFunctionDefaultTimeoutRule) Check(runner tflint.Runner) error
- func (r *AwsLambdaFunctionDefaultTimeoutRule) Enabled() bool
- func (r *AwsLambdaFunctionDefaultTimeoutRule) Link() string
- func (r *AwsLambdaFunctionDefaultTimeoutRule) Name() string
- func (r *AwsLambdaFunctionDefaultTimeoutRule) Severity() string
- type AwsLambdaFunctionEolRuntimeRule
- func (r *AwsLambdaFunctionEolRuntimeRule) Check(runner tflint.Runner) error
- func (r *AwsLambdaFunctionEolRuntimeRule) Enabled() bool
- func (r *AwsLambdaFunctionEolRuntimeRule) Link() string
- func (r *AwsLambdaFunctionEolRuntimeRule) Name() string
- func (r *AwsLambdaFunctionEolRuntimeRule) Severity() string
- type AwsLambdaFunctionTracingRule
- type AwsLambdaPermissionMultiplePrincipalsRule
- func (r *AwsLambdaPermissionMultiplePrincipalsRule) Check(runner tflint.Runner) error
- func (r *AwsLambdaPermissionMultiplePrincipalsRule) Enabled() bool
- func (r *AwsLambdaPermissionMultiplePrincipalsRule) Link() string
- func (r *AwsLambdaPermissionMultiplePrincipalsRule) Name() string
- func (r *AwsLambdaPermissionMultiplePrincipalsRule) Severity() string
- type AwsSfnStateMachineTracingRule
- type AwsSnsTopicSubscriptionRedrivePolicyRule
- func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Check(runner tflint.Runner) error
- func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Enabled() bool
- func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Link() string
- func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Name() string
- func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Severity() string
- type AwsSqsQueueRedrivePolicyRule
Constants ¶
This section is empty.
Variables ¶
var Rules = []tflint.Rule{ NewAwsAPIGatewayMethodSettingsThrottlingRule(), NewAwsAPIGatewayStageLoggingRule(), NewAwsAPIGatewayStageTracingRule(), NewAwsAPIGatewayStageV2LoggingRule(), NewAwsApigatewayStageStructuredLoggingRule(), NewAwsApigatewayV2StageStructuredLoggingRule(), NewAwsApigatewayV2StageThrottlingRule(), NewAwsAppsyncGraphqlAPITracingRule(), NewAwsCloudwatchEventTargetNoDlqRule(), NewAwsCloudwatchLogGroupLambdaRetentionRule(), NewAwsIamRoleLambdaNoStarRule(), NewAwsLambdaEventInvokeConfigAsyncOnFailureRule(), NewAwsLambdaEventSourceMappingFailureDestinationRule(), NewAwsLambdaFunctionDefaultMemoryRule(), NewAwsLambdaFunctionDefaultTimeoutRule(), NewAwsLambdaFunctionEolRuntimeRule(), NewAwsLambdaFunctionTracingRule(), NewAwsLambdaPermissionMultiplePrincipalsRule(), NewAwsSfnStateMachineTracingRule(), NewAwsSnsTopicSubscriptionRedrivePolicyRule(), NewAwsSqsQueueRedrivePolicyRule(), }
Functions ¶
This section is empty.
Types ¶
type AsyncPermission ¶
type AsyncPermission struct {
// contains filtered or unexported fields
}
type AwsAPIGatewayMethodSettingsThrottlingRule ¶
type AwsAPIGatewayMethodSettingsThrottlingRule struct{}
AwsAPIGatewayMethodSettingsThrottlingRule checks whether there is a default "aws_api_gateway_method_settings" resource with throttling values
func NewAwsAPIGatewayMethodSettingsThrottlingRule ¶
func NewAwsAPIGatewayMethodSettingsThrottlingRule() *AwsAPIGatewayMethodSettingsThrottlingRule
func (*AwsAPIGatewayMethodSettingsThrottlingRule) Check ¶
func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Check(runner tflint.Runner) error
Check checks whether default "aws_api_gateway_method_settings" have throttling values
func (*AwsAPIGatewayMethodSettingsThrottlingRule) Enabled ¶
func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsAPIGatewayMethodSettingsThrottlingRule) Link ¶
func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Link() string
Link returns the rule reference link
func (*AwsAPIGatewayMethodSettingsThrottlingRule) Name ¶
func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Name() string
Name returns the rule name
func (*AwsAPIGatewayMethodSettingsThrottlingRule) Severity ¶
func (r *AwsAPIGatewayMethodSettingsThrottlingRule) Severity() string
Severity returns the rule severity
type AwsAPIGatewayStageLoggingRule ¶
type AwsAPIGatewayStageLoggingRule struct {
// contains filtered or unexported fields
}
AwsAPIGatewayStageLoggingRule checks whether "aws_api_gateway_stage" has Logging enabled.
func NewAwsAPIGatewayStageLoggingRule ¶
func NewAwsAPIGatewayStageLoggingRule() *AwsAPIGatewayStageLoggingRule
NewAwsAPIGatewayStageLoggingRule returns new rule
func (*AwsAPIGatewayStageLoggingRule) Check ¶
func (r *AwsAPIGatewayStageLoggingRule) Check(runner tflint.Runner) error
Check checks whether "aws_api_gateway_stage" has logging enabled
func (*AwsAPIGatewayStageLoggingRule) Enabled ¶
func (r *AwsAPIGatewayStageLoggingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsAPIGatewayStageLoggingRule) Link ¶
func (r *AwsAPIGatewayStageLoggingRule) Link() string
Link returns the rule reference link
func (*AwsAPIGatewayStageLoggingRule) Name ¶
func (r *AwsAPIGatewayStageLoggingRule) Name() string
Name returns the rule name
func (*AwsAPIGatewayStageLoggingRule) Severity ¶
func (r *AwsAPIGatewayStageLoggingRule) Severity() string
Severity returns the rule severity
type AwsAPIGatewayStageTracingRule ¶
type AwsAPIGatewayStageTracingRule struct {
// contains filtered or unexported fields
}
AwsAPIGatewayStageTracingRule checks whether "aws_api_gateway_stage" has tracing enabled.
func NewAwsAPIGatewayStageTracingRule ¶
func NewAwsAPIGatewayStageTracingRule() *AwsAPIGatewayStageTracingRule
NewAwsAPIGatewayStageTracingRule returns new rule
func (*AwsAPIGatewayStageTracingRule) Check ¶
func (r *AwsAPIGatewayStageTracingRule) Check(runner tflint.Runner) error
Check checks whether "aws_api_gateway_stage" has tracing enabled
func (*AwsAPIGatewayStageTracingRule) Enabled ¶
func (r *AwsAPIGatewayStageTracingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsAPIGatewayStageTracingRule) Link ¶
func (r *AwsAPIGatewayStageTracingRule) Link() string
Link returns the rule reference link
func (*AwsAPIGatewayStageTracingRule) Name ¶
func (r *AwsAPIGatewayStageTracingRule) Name() string
Name returns the rule name
func (*AwsAPIGatewayStageTracingRule) Severity ¶
func (r *AwsAPIGatewayStageTracingRule) Severity() string
Severity returns the rule severity
type AwsAPIGatewayStageV2LoggingRule ¶
type AwsAPIGatewayStageV2LoggingRule struct {
// contains filtered or unexported fields
}
AwsAPIGatewayStageV2LoggingRule checks whether "aws_api_gateway_stage" has Logging enabled.
func NewAwsAPIGatewayStageV2LoggingRule ¶
func NewAwsAPIGatewayStageV2LoggingRule() *AwsAPIGatewayStageV2LoggingRule
NewAwsAPIGatewayStageV2LoggingRule returns new rule
func (*AwsAPIGatewayStageV2LoggingRule) Check ¶
func (r *AwsAPIGatewayStageV2LoggingRule) Check(runner tflint.Runner) error
Check checks whether "aws_api_gateway_stage" has logging enabled
func (*AwsAPIGatewayStageV2LoggingRule) Enabled ¶
func (r *AwsAPIGatewayStageV2LoggingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsAPIGatewayStageV2LoggingRule) Link ¶
func (r *AwsAPIGatewayStageV2LoggingRule) Link() string
Link returns the rule reference link
func (*AwsAPIGatewayStageV2LoggingRule) Name ¶
func (r *AwsAPIGatewayStageV2LoggingRule) Name() string
Name returns the rule name
func (*AwsAPIGatewayStageV2LoggingRule) Severity ¶
func (r *AwsAPIGatewayStageV2LoggingRule) Severity() string
Severity returns the rule severity
type AwsApigatewayStageStructuredLoggingRule ¶
type AwsApigatewayStageStructuredLoggingRule struct {
// contains filtered or unexported fields
}
AwsApigatewayStageStructuredLogging checks if API Gateway logging format is in JSON
func NewAwsApigatewayStageStructuredLoggingRule ¶
func NewAwsApigatewayStageStructuredLoggingRule() *AwsApigatewayStageStructuredLoggingRule
NewAwsApigatewayStageStructuredLoggingRule returns new rule with default attributes
func (*AwsApigatewayStageStructuredLoggingRule) Check ¶
func (r *AwsApigatewayStageStructuredLoggingRule) Check(runner tflint.Runner) error
Check checks if API Gateway logging format is in JSON
func (*AwsApigatewayStageStructuredLoggingRule) Enabled ¶
func (r *AwsApigatewayStageStructuredLoggingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsApigatewayStageStructuredLoggingRule) Link ¶
func (r *AwsApigatewayStageStructuredLoggingRule) Link() string
Link returns the rule reference link
func (*AwsApigatewayStageStructuredLoggingRule) Name ¶
func (r *AwsApigatewayStageStructuredLoggingRule) Name() string
Name returns the rule name
func (*AwsApigatewayStageStructuredLoggingRule) Severity ¶
func (r *AwsApigatewayStageStructuredLoggingRule) Severity() string
Severity returns the rule severity
type AwsApigatewayV2StageStructuredLoggingRule ¶
type AwsApigatewayV2StageStructuredLoggingRule struct {
// contains filtered or unexported fields
}
AwsApigatewayV2StageStructuredLogging checks if API Gateway logging format is in JSON
func NewAwsApigatewayV2StageStructuredLoggingRule ¶
func NewAwsApigatewayV2StageStructuredLoggingRule() *AwsApigatewayV2StageStructuredLoggingRule
NewAwsApigatewayV2StageStructuredLoggingRule returns new rule with default attributes
func (*AwsApigatewayV2StageStructuredLoggingRule) Check ¶
func (r *AwsApigatewayV2StageStructuredLoggingRule) Check(runner tflint.Runner) error
Check checks if API Gateway logging format is in JSON
func (*AwsApigatewayV2StageStructuredLoggingRule) Enabled ¶
func (r *AwsApigatewayV2StageStructuredLoggingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsApigatewayV2StageStructuredLoggingRule) Link ¶
func (r *AwsApigatewayV2StageStructuredLoggingRule) Link() string
Link returns the rule reference link
func (*AwsApigatewayV2StageStructuredLoggingRule) Name ¶
func (r *AwsApigatewayV2StageStructuredLoggingRule) Name() string
Name returns the rule name
func (*AwsApigatewayV2StageStructuredLoggingRule) Severity ¶
func (r *AwsApigatewayV2StageStructuredLoggingRule) Severity() string
Severity returns the rule severity
type AwsApigatewayV2StageThrottlingRule ¶
type AwsApigatewayV2StageThrottlingRule struct {
// contains filtered or unexported fields
}
AwsApigatewayV2StageThrottlingRule checks whether "aws_apigatewayv2_stage" has default throttling values.
func NewAwsApigatewayV2StageThrottlingRule ¶
func NewAwsApigatewayV2StageThrottlingRule() *AwsApigatewayV2StageThrottlingRule
NewAwsApigatewayV2StageThrottlingRule returns new rule
func (*AwsApigatewayV2StageThrottlingRule) Check ¶
func (r *AwsApigatewayV2StageThrottlingRule) Check(runner tflint.Runner) error
Check checks whether "aws_apigatewayv2_stage" has has default throttling values
func (*AwsApigatewayV2StageThrottlingRule) Enabled ¶
func (r *AwsApigatewayV2StageThrottlingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsApigatewayV2StageThrottlingRule) Link ¶
func (r *AwsApigatewayV2StageThrottlingRule) Link() string
Link returns the rule reference link
func (*AwsApigatewayV2StageThrottlingRule) Name ¶
func (r *AwsApigatewayV2StageThrottlingRule) Name() string
Name returns the rule name
func (*AwsApigatewayV2StageThrottlingRule) Severity ¶
func (r *AwsApigatewayV2StageThrottlingRule) Severity() string
Severity returns the rule severity
type AwsAppsyncGraphqlAPITracingRule ¶
type AwsAppsyncGraphqlAPITracingRule struct {
// contains filtered or unexported fields
}
func NewAwsAppsyncGraphqlAPITracingRule ¶
func NewAwsAppsyncGraphqlAPITracingRule() *AwsAppsyncGraphqlAPITracingRule
func (*AwsAppsyncGraphqlAPITracingRule) Check ¶
func (r *AwsAppsyncGraphqlAPITracingRule) Check(runner tflint.Runner) error
Check checks whether "aws_appsync_graphql_api" has tracing enabled
func (*AwsAppsyncGraphqlAPITracingRule) Enabled ¶
func (r *AwsAppsyncGraphqlAPITracingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsAppsyncGraphqlAPITracingRule) Link ¶
func (r *AwsAppsyncGraphqlAPITracingRule) Link() string
Link returns the rule reference link
func (*AwsAppsyncGraphqlAPITracingRule) Name ¶
func (r *AwsAppsyncGraphqlAPITracingRule) Name() string
Name returns the rule name
func (*AwsAppsyncGraphqlAPITracingRule) Severity ¶
func (r *AwsAppsyncGraphqlAPITracingRule) Severity() string
Severity returns the rule severity
type AwsCloudwatchEventTargetNoDlqRule ¶
type AwsCloudwatchEventTargetNoDlqRule struct {
// contains filtered or unexported fields
}
AwsCloudwatchEventTargetNoDlq checks if there is a DLQ configured on EventBridge targets
func NewAwsCloudwatchEventTargetNoDlqRule ¶
func NewAwsCloudwatchEventTargetNoDlqRule() *AwsCloudwatchEventTargetNoDlqRule
NewAwsCloudwatchEventTargetNoDlqRule returns new rule with default attributes
func (*AwsCloudwatchEventTargetNoDlqRule) Check ¶
func (r *AwsCloudwatchEventTargetNoDlqRule) Check(runner tflint.Runner) error
Check checks if there is a DLQ configured on EventBridge targets
func (*AwsCloudwatchEventTargetNoDlqRule) Enabled ¶
func (r *AwsCloudwatchEventTargetNoDlqRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsCloudwatchEventTargetNoDlqRule) Link ¶
func (r *AwsCloudwatchEventTargetNoDlqRule) Link() string
Link returns the rule reference link
func (*AwsCloudwatchEventTargetNoDlqRule) Name ¶
func (r *AwsCloudwatchEventTargetNoDlqRule) Name() string
Name returns the rule name
func (*AwsCloudwatchEventTargetNoDlqRule) Severity ¶
func (r *AwsCloudwatchEventTargetNoDlqRule) Severity() string
Severity returns the rule severity
type AwsCloudwatchLogGroupLambdaRetentionRule ¶
type AwsCloudwatchLogGroupLambdaRetentionRule struct {
// contains filtered or unexported fields
}
AwsCloudwatchLogGroupLambdaRetention checks if Lambda functions have a corresponding log group with retention configured
func NewAwsCloudwatchLogGroupLambdaRetentionRule ¶
func NewAwsCloudwatchLogGroupLambdaRetentionRule() *AwsCloudwatchLogGroupLambdaRetentionRule
NewAwsCloudwatchLogGroupLambdaRetentionRule returns new rule with default attributes
func (*AwsCloudwatchLogGroupLambdaRetentionRule) Check ¶
func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Check(runner tflint.Runner) error
Check checks if Lambda functions have a corresponding log group with retention configured
func (*AwsCloudwatchLogGroupLambdaRetentionRule) Enabled ¶
func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsCloudwatchLogGroupLambdaRetentionRule) Link ¶
func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Link() string
Link returns the rule reference link
func (*AwsCloudwatchLogGroupLambdaRetentionRule) Name ¶
func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Name() string
Name returns the rule name
func (*AwsCloudwatchLogGroupLambdaRetentionRule) Severity ¶
func (r *AwsCloudwatchLogGroupLambdaRetentionRule) Severity() string
Severity returns the rule severity
type AwsIamRoleLambdaNoStarRule ¶
type AwsIamRoleLambdaNoStarRule struct {
// contains filtered or unexported fields
}
AwsIamRoleLambdaNoStar checks if an IAM role with a Lambda principal has broad permissions
func NewAwsIamRoleLambdaNoStarRule ¶
func NewAwsIamRoleLambdaNoStarRule() *AwsIamRoleLambdaNoStarRule
NewAwsIamRoleLambdaNoStarRule returns new rule with default attributes
func (*AwsIamRoleLambdaNoStarRule) Check ¶
func (r *AwsIamRoleLambdaNoStarRule) Check(runner tflint.Runner) error
Check checks if an IAM role with a Lambda principal has broad permissions
func (*AwsIamRoleLambdaNoStarRule) Enabled ¶
func (r *AwsIamRoleLambdaNoStarRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsIamRoleLambdaNoStarRule) Link ¶
func (r *AwsIamRoleLambdaNoStarRule) Link() string
Link returns the rule reference link
func (*AwsIamRoleLambdaNoStarRule) Name ¶
func (r *AwsIamRoleLambdaNoStarRule) Name() string
Name returns the rule name
func (*AwsIamRoleLambdaNoStarRule) Severity ¶
func (r *AwsIamRoleLambdaNoStarRule) Severity() string
Severity returns the rule severity
type AwsLambdaEventInvokeConfigAsyncOnFailureRule ¶
type AwsLambdaEventInvokeConfigAsyncOnFailureRule struct {
// contains filtered or unexported fields
}
AwsLambdaEventInvokeConfigAsyncOnFailure checks if an event invoke config has a destination on failure if the function has permission for an async principal
func NewAwsLambdaEventInvokeConfigAsyncOnFailureRule ¶
func NewAwsLambdaEventInvokeConfigAsyncOnFailureRule() *AwsLambdaEventInvokeConfigAsyncOnFailureRule
NewAwsLambdaEventInvokeConfigAsyncOnFailureRule returns new rule with default attributes
func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Check ¶
func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Check(runner tflint.Runner) error
Check checks if an event invoke config has a destination on failure if the function has permission for an async principal
func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Enabled ¶
func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Link ¶
func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Link() string
Link returns the rule reference link
func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Name ¶
func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Name() string
Name returns the rule name
func (*AwsLambdaEventInvokeConfigAsyncOnFailureRule) Severity ¶
func (r *AwsLambdaEventInvokeConfigAsyncOnFailureRule) Severity() string
Severity returns the rule severity
type AwsLambdaEventSourceMappingFailureDestinationRule ¶
type AwsLambdaEventSourceMappingFailureDestinationRule struct {
// contains filtered or unexported fields
}
AwsLambdaEventSourceMappingFailureDestination checks if there is an on failure destination configured on event source mappings
func NewAwsLambdaEventSourceMappingFailureDestinationRule ¶
func NewAwsLambdaEventSourceMappingFailureDestinationRule() *AwsLambdaEventSourceMappingFailureDestinationRule
NewAwsLambdaEventSourceMappingFailureDestinationRule returns new rule with default attributes
func (*AwsLambdaEventSourceMappingFailureDestinationRule) Check ¶
func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Check(runner tflint.Runner) error
Check checks if aws_lambda_event_source_mapping as a destination on_failure configured
func (*AwsLambdaEventSourceMappingFailureDestinationRule) Enabled ¶
func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsLambdaEventSourceMappingFailureDestinationRule) Link ¶
func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Link() string
Link returns the rule reference link
func (*AwsLambdaEventSourceMappingFailureDestinationRule) Name ¶
func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Name() string
Name returns the rule name
func (*AwsLambdaEventSourceMappingFailureDestinationRule) Severity ¶
func (r *AwsLambdaEventSourceMappingFailureDestinationRule) Severity() string
Severity returns the rule severity
type AwsLambdaFunctionDefaultMemoryRule ¶
type AwsLambdaFunctionDefaultMemoryRule struct {
// contains filtered or unexported fields
}
AwsLambdaFunctionDefaultMemory checks if there is an explicit memory size
func NewAwsLambdaFunctionDefaultMemoryRule ¶
func NewAwsLambdaFunctionDefaultMemoryRule() *AwsLambdaFunctionDefaultMemoryRule
NewAwsLambdaFunctionDefaultMemoryRule returns new rule with default attributes
func (*AwsLambdaFunctionDefaultMemoryRule) Check ¶
func (r *AwsLambdaFunctionDefaultMemoryRule) Check(runner tflint.Runner) error
Check checks if there is an explicit memory size
func (*AwsLambdaFunctionDefaultMemoryRule) Enabled ¶
func (r *AwsLambdaFunctionDefaultMemoryRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsLambdaFunctionDefaultMemoryRule) Link ¶
func (r *AwsLambdaFunctionDefaultMemoryRule) Link() string
Link returns the rule reference link
func (*AwsLambdaFunctionDefaultMemoryRule) Name ¶
func (r *AwsLambdaFunctionDefaultMemoryRule) Name() string
Name returns the rule name
func (*AwsLambdaFunctionDefaultMemoryRule) Severity ¶
func (r *AwsLambdaFunctionDefaultMemoryRule) Severity() string
Severity returns the rule severity
type AwsLambdaFunctionDefaultTimeoutRule ¶
type AwsLambdaFunctionDefaultTimeoutRule struct {
// contains filtered or unexported fields
}
AwsLambdaFunctionDefaultTimeout checks if there is an explicit timeout
func NewAwsLambdaFunctionDefaultTimeoutRule ¶
func NewAwsLambdaFunctionDefaultTimeoutRule() *AwsLambdaFunctionDefaultTimeoutRule
NewAwsLambdaFunctionDefaultTimeoutRule returns new rule with default attributes
func (*AwsLambdaFunctionDefaultTimeoutRule) Check ¶
func (r *AwsLambdaFunctionDefaultTimeoutRule) Check(runner tflint.Runner) error
Check checks if there is an explicit timeout
func (*AwsLambdaFunctionDefaultTimeoutRule) Enabled ¶
func (r *AwsLambdaFunctionDefaultTimeoutRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsLambdaFunctionDefaultTimeoutRule) Link ¶
func (r *AwsLambdaFunctionDefaultTimeoutRule) Link() string
Link returns the rule reference link
func (*AwsLambdaFunctionDefaultTimeoutRule) Name ¶
func (r *AwsLambdaFunctionDefaultTimeoutRule) Name() string
Name returns the rule name
func (*AwsLambdaFunctionDefaultTimeoutRule) Severity ¶
func (r *AwsLambdaFunctionDefaultTimeoutRule) Severity() string
Severity returns the rule severity
type AwsLambdaFunctionEolRuntimeRule ¶
type AwsLambdaFunctionEolRuntimeRule struct {
// contains filtered or unexported fields
}
TODO: Write the rule's description here AwsLambdaFunctionEolRuntime checks if the runtime is marked as end-of-life
func NewAwsLambdaFunctionEolRuntimeRule ¶
func NewAwsLambdaFunctionEolRuntimeRule() *AwsLambdaFunctionEolRuntimeRule
NewAwsLambdaFunctionEolRuntimeRule returns new rule with default attributes
func (*AwsLambdaFunctionEolRuntimeRule) Check ¶
func (r *AwsLambdaFunctionEolRuntimeRule) Check(runner tflint.Runner) error
Check checks if the runtime is marked as end-of-life
func (*AwsLambdaFunctionEolRuntimeRule) Enabled ¶
func (r *AwsLambdaFunctionEolRuntimeRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsLambdaFunctionEolRuntimeRule) Link ¶
func (r *AwsLambdaFunctionEolRuntimeRule) Link() string
Link returns the rule reference link
func (*AwsLambdaFunctionEolRuntimeRule) Name ¶
func (r *AwsLambdaFunctionEolRuntimeRule) Name() string
Name returns the rule name
func (*AwsLambdaFunctionEolRuntimeRule) Severity ¶
func (r *AwsLambdaFunctionEolRuntimeRule) Severity() string
Severity returns the rule severity
type AwsLambdaFunctionTracingRule ¶
type AwsLambdaFunctionTracingRule struct {
// contains filtered or unexported fields
}
AwsLambdaFunctionTracingRule checks whether "aws_lambda_function" has tracing enabled.
func NewAwsLambdaFunctionTracingRule ¶
func NewAwsLambdaFunctionTracingRule() *AwsLambdaFunctionTracingRule
NewAwsLambdaFunctionTracingRule returns new rule
func (*AwsLambdaFunctionTracingRule) Check ¶
func (r *AwsLambdaFunctionTracingRule) Check(runner tflint.Runner) error
Check checks whether "aws_lambda_function" has tracing enabled
func (*AwsLambdaFunctionTracingRule) Enabled ¶
func (r *AwsLambdaFunctionTracingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsLambdaFunctionTracingRule) Link ¶
func (r *AwsLambdaFunctionTracingRule) Link() string
Link returns the rule reference link
func (*AwsLambdaFunctionTracingRule) Name ¶
func (r *AwsLambdaFunctionTracingRule) Name() string
Name returns the rule name
func (*AwsLambdaFunctionTracingRule) Severity ¶
func (r *AwsLambdaFunctionTracingRule) Severity() string
Severity returns the rule severity
type AwsLambdaPermissionMultiplePrincipalsRule ¶
type AwsLambdaPermissionMultiplePrincipalsRule struct {
// contains filtered or unexported fields
}
AwsLambdaPermissionMultiplePrincipals checks if there are multiple Lambda permission with different principals for a single function
func NewAwsLambdaPermissionMultiplePrincipalsRule ¶
func NewAwsLambdaPermissionMultiplePrincipalsRule() *AwsLambdaPermissionMultiplePrincipalsRule
NewAwsLambdaPermissionMultiplePrincipalsRule returns new rule with default attributes
func (*AwsLambdaPermissionMultiplePrincipalsRule) Check ¶
func (r *AwsLambdaPermissionMultiplePrincipalsRule) Check(runner tflint.Runner) error
Check checks if there are multiple Lambda permission with different principals for a single function
func (*AwsLambdaPermissionMultiplePrincipalsRule) Enabled ¶
func (r *AwsLambdaPermissionMultiplePrincipalsRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsLambdaPermissionMultiplePrincipalsRule) Link ¶
func (r *AwsLambdaPermissionMultiplePrincipalsRule) Link() string
Link returns the rule reference link
func (*AwsLambdaPermissionMultiplePrincipalsRule) Name ¶
func (r *AwsLambdaPermissionMultiplePrincipalsRule) Name() string
Name returns the rule name
func (*AwsLambdaPermissionMultiplePrincipalsRule) Severity ¶
func (r *AwsLambdaPermissionMultiplePrincipalsRule) Severity() string
Severity returns the rule severity
type AwsSfnStateMachineTracingRule ¶
type AwsSfnStateMachineTracingRule struct {
// contains filtered or unexported fields
}
AwsSfnStateMachineTracing checks if tracing is enabled for Step functions
func NewAwsSfnStateMachineTracingRule ¶
func NewAwsSfnStateMachineTracingRule() *AwsSfnStateMachineTracingRule
NewAwsSfnStateMachineTracingRule returns new rule with default attributes
func (*AwsSfnStateMachineTracingRule) Check ¶
func (r *AwsSfnStateMachineTracingRule) Check(runner tflint.Runner) error
TODO: Write the details of the inspection Check checks if tracing is enabled for Step functions
func (*AwsSfnStateMachineTracingRule) Enabled ¶
func (r *AwsSfnStateMachineTracingRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsSfnStateMachineTracingRule) Link ¶
func (r *AwsSfnStateMachineTracingRule) Link() string
Link returns the rule reference link
func (*AwsSfnStateMachineTracingRule) Name ¶
func (r *AwsSfnStateMachineTracingRule) Name() string
Name returns the rule name
func (*AwsSfnStateMachineTracingRule) Severity ¶
func (r *AwsSfnStateMachineTracingRule) Severity() string
Severity returns the rule severity
type AwsSnsTopicSubscriptionRedrivePolicyRule ¶
type AwsSnsTopicSubscriptionRedrivePolicyRule struct {
// contains filtered or unexported fields
}
TODO: Write the rule's description here AwsSnsTopicSubscriptionRedrivePolicy checks that an SNS subscription has a redrive policy configured
func NewAwsSnsTopicSubscriptionRedrivePolicyRule ¶
func NewAwsSnsTopicSubscriptionRedrivePolicyRule() *AwsSnsTopicSubscriptionRedrivePolicyRule
NewAwsSnsTopicSubscriptionRedrivePolicyRule returns new rule with default attributes
func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Check ¶
func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Check(runner tflint.Runner) error
Check checks that an SNS subscription has a redrive policy configured
func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Enabled ¶
func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Link ¶
func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Link() string
Link returns the rule reference link
func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Name ¶
func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Name() string
Name returns the rule name
func (*AwsSnsTopicSubscriptionRedrivePolicyRule) Severity ¶
func (r *AwsSnsTopicSubscriptionRedrivePolicyRule) Severity() string
Severity returns the rule severity
type AwsSqsQueueRedrivePolicyRule ¶
type AwsSqsQueueRedrivePolicyRule struct {
// contains filtered or unexported fields
}
AwsSqsQueueRedrivePolicy checks if an SQS Queue has a redrive policy configured
func NewAwsSqsQueueRedrivePolicyRule ¶
func NewAwsSqsQueueRedrivePolicyRule() *AwsSqsQueueRedrivePolicyRule
NewAwsSqsQueueRedrivePolicyRule returns new rule with default attributes
func (*AwsSqsQueueRedrivePolicyRule) Check ¶
func (r *AwsSqsQueueRedrivePolicyRule) Check(runner tflint.Runner) error
Check checks if an SQS Queue has a redrive policy configured
func (*AwsSqsQueueRedrivePolicyRule) Enabled ¶
func (r *AwsSqsQueueRedrivePolicyRule) Enabled() bool
Enabled returns whether the rule is enabled by default
func (*AwsSqsQueueRedrivePolicyRule) Link ¶
func (r *AwsSqsQueueRedrivePolicyRule) Link() string
Link returns the rule reference link
func (*AwsSqsQueueRedrivePolicyRule) Name ¶
func (r *AwsSqsQueueRedrivePolicyRule) Name() string
Name returns the rule name
func (*AwsSqsQueueRedrivePolicyRule) Severity ¶
func (r *AwsSqsQueueRedrivePolicyRule) Severity() string
Severity returns the rule severity
Source Files
¶
- aws_api_gateway_method_settings_throttling.go
- aws_api_gateway_stage_logging.go
- aws_api_gateway_stage_structured_logging.go
- aws_api_gateway_stage_tracing.go
- aws_apigatewayv2_stage_logging.go
- aws_apigatewayv2_stage_structured_logging.go
- aws_apigatewayv2_stage_throttling.go
- aws_appsync_graphql_api_tracing.go
- aws_cloudwatch_event_target_no_dlq.go
- aws_cloudwatch_log_group_lambda_retention.go
- aws_iam_role_lambda_no_star.go
- aws_lambda_event_invoke_config_async_on_failure.go
- aws_lambda_event_source_mapping_failure_destination.go
- aws_lambda_function_default_memory.go
- aws_lambda_function_default_timeout.go
- aws_lambda_function_eol_runtime.go
- aws_lambda_function_tracing.go
- aws_lambda_permission_multiple_principals.go
- aws_sfn_state_machine_tracing.go
- aws_sns_topic_subscription_redrive_policy.go
- aws_sqs_queue_redrive_policy.go
- provider.go