cdk-validator-cfnguard
cdk-validator-cfnguard copied to clipboard
cdklabs
The links on the front page to the Bundled Control Tower Rules are broken. Eg: CT.SQS.PR.1 goes to https://docs.aws.amazon.com/controltower/latest/userguide/sqs-rules.html#ct-sqs-pr-1-description when it should go to: https://docs.aws.amazon.com/controltower/latest/controlreference/sqs-rules.html#ct-sqs-pr-1-description And the link in the...
I'm evaluating to move from CDK_NAG to this library, but found some missing functionalities. In CDK_NAG is possible to suppress a rule for a given construct (or path): ` NagSuppressions.addResourceSuppressions(test,...
I tried ``` const app = new App({ policyValidationBeta1: [new CfnGuardValidator()] }); ``` after adding the lib and got ``` ❯ npx cdk list Performing Policy Validations Validation Report -----------------...
Hello, I'm having issues to run the Validator when running `cdk synth`. ``` Here is the output: Validation Report ----------------- ╔════════════════════════════════════╗ ║ Plugin Report ║ ║ Plugin: cdk-validator-cfnguard ║ ║...
For making fine graned exceptions: I saw the usage in the [AWS Guard Rules Registry](https://github.com/aws-cloudformation/aws-guard-rules-registry/blob/main/rules/aws/api_gateway/api_gw_endpoint_type_check.guard) They just add a condition to the resource selectors: ```guard # # Select all API...
When running the `cdk synth` on windows machine we are getting the below error. Looks like `cdk-validator-cfnguard` is not supported as yet. Can run `cdk synth` using WSL. OS details...
For example, in a [Python-based AWS CDK application](https://github.com/alexpulver/usermanagement-backend/tree/bd7b324f854c2e844d9b9484ec7917a2ed749ee6), CfnGuardValidator doesn't show the location of the [Ingress custom construct](https://github.com/alexpulver/usermanagement-backend/blob/bd7b324f854c2e844d9b9484ec7917a2ed749ee6/service/ingress.py#L7), but an AWS CDK internal module. ``` api_gw_v2_access_logs_enabled_check (1 occurrences) Occurrences: -...
When I run a `cdk synth` with the `controlTowerRulesEnabled` enabled I run into the following error. ``` Performing Policy Validations Validation Report ----------------- ╔════════════════════════════════════╗ ║ Plugin Report ║ ║ Plugin:...
We are using aws-cdk version 2.92.0, Python 3.8 and cdklabs.cdk-validator-cfnguard 0.0.54 After defining the app stack the following way: ``` python app = cdk.App( policy_validation_beta1=[ CfnGuardValidator( control_tower_rules_enabled=True, disabled_rules=["ct-lambda-pr-3"] ) ]...
