ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create rule S5332[cloudformation]: Add kinesis data stream (#501)

Browse Source 
* added highlighting tips

* removed highlighting tip making no sense

* fixed french syntax

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* added streamencryption bloc

* Update rules/S5332/cloudformation/rule.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
This commit is contained in:
Loris S 2021-11-09 20:49:40 +01:00 committed by GitHub
parent 3496d4bedd
commit baf4eb7abd
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
rules/S5332/cloudformation/highlighting.adoc
View File

@ -1,5 +1,9 @@
=== Highlighting
For `AWS::Kinesis::Stream`, in `StreamEncryption` :
* Highlight the resource bloc if ``StreamEncryption`` is missing
For `AWS::ElastiCache::ReplicationGroup`:
* Highlight `TransitEncryptionEnabled` if it is specified but has the wrong value

24
rules/S5332/cloudformation/rule.adoc
View File

@ -6,6 +6,18 @@ include::../recommended.adoc[]
== Sensitive Code Example
For https://aws.amazon.com/kinesis/[AWS Kinesis] Data Streams, server-side encryption is disabled by default:
----
AWSTemplateFormatVersion: 2010-09-09
Resources:
KinesisStream: # Sensitive
Type: AWS::Kinesis::Stream
Properties:
# StreamEncryption:
# EncryptionType: KMS
----
For https://aws.amazon.com/elasticache/[Amazon ElastiCache]:
----
@ -82,6 +94,18 @@ Resources:
== Compliant Solution
For https://aws.amazon.com/kinesis/[AWS Kinesis] Data Streams server-side encryption:
----
AWSTemplateFormatVersion: 2010-09-09
Resources:
KinesisStream:
Type: AWS::Kinesis::Stream
Properties:
StreamEncryption:
EncryptionType: KMS
----
For https://aws.amazon.com/elasticache/[Amazon ElastiCache]:
----