-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix TFSec Recommendations #56
Conversation
modules/aws/ECR-IAM-User/iam_role.tf
Outdated
@@ -14,6 +14,8 @@ resource "aws_iam_user" "ecr_access_user" { | |||
tags = var.tags | |||
} | |||
|
|||
# Ignoring as this IAM User is an Admin user used for accessing any ECR repository |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
In this comment, can you also add what AVD-AWS-0057 is about and the reason for ignoring this is not clear.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Better to add the documentation link for this violation if there is anything as such.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Shall we some specific format for this like the one below? it's easy to review then
# Ignore AVD-AWS-0057 (https://avd.aquasec.com/misconfig/aws/iam/avd-aws-0057):
# Reason: Ignoring as this IAM User is an Admin user used for accessing any ECR repository
# trivy:ignore:AVD-AWS-0057
fd819d5
to
8a4eeb8
Compare
https://github.com/wso2-enterprise/cloud-sre-common/issues/404