cdk-validator-cfnguard
cdk-validator-cfnguard copied to clipboard
Disabled rules are ignored
We are using aws-cdk version 2.92.0, Python 3.8 and cdklabs.cdk-validator-cfnguard 0.0.54
After defining the app stack the following way:
app = cdk.App(
policy_validation_beta1=[
CfnGuardValidator(
control_tower_rules_enabled=True,
disabled_rules=["ct-lambda-pr-3"]
)
]
)
We are still getting the error:
Description: [CT.LAMBDA.PR.3]: Require an AWS Lambda function to be in a customer-managed Amazon Virtual Private Cloud (VPC)
How to fix: [FIX]: In 'VpcConfig', provide the 'SubnetIds' property with one or more Subnet IDs, and provide the 'SecurityGroupIds' property with one or more Security Group IDs.
Rule Metadata:
DocumentationUrl: https://github.com/cdklabs/cdk-validator-cfnguard#bundled-control-tower-rules
After I downgraded to v0.0.51 it started working properly. However, since it says in release notes for v0.0.54 that this problem was fixed, I figured it would make sense if I reported the issue.