baf4eb7abd
* added highlighting tips * removed highlighting tip making no sense * fixed french syntax Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com> * added streamencryption bloc * Update rules/S5332/cloudformation/rule.adoc Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com> Co-authored-by: Karim El Ouerghemmi <64004037+karim-ouerghemmi-sonarsource@users.noreply.github.com>
33 lines
1.4 KiB
Plaintext
33 lines
1.4 KiB
Plaintext
=== Highlighting
|
|
|
|
For `AWS::Kinesis::Stream`, in `StreamEncryption` :
|
|
|
|
* Highlight the resource bloc if ``StreamEncryption`` is missing
|
|
|
|
For `AWS::ElastiCache::ReplicationGroup`:
|
|
|
|
* Highlight `TransitEncryptionEnabled` if it is specified but has the wrong value
|
|
* Highlight resource if `TransitEncryptionEnabled` not set
|
|
|
|
For `AWS::ECS::TaskDefinition`:
|
|
|
|
* Highlight `TransitEncryption` if it is specified but has the wrong value
|
|
* Highlight `EFSVolumeConfiguration` if it exists but does not contain `TransitEncryption`
|
|
|
|
For `AWS::ElasticLoadBalancingV2::Listener`:
|
|
* For a `fixed-response` or `forward` action: Highlight `Protocol` if it is set to `HTTP`
|
|
* For a `redirect` action: Highlight `Protocol` if `RedirectConfig.Protocol` is set as `HTTP`
|
|
|
|
For `AWS::Elasticsearch::Domain` and `AWS::OpenSearchService::Domain`:
|
|
|
|
* Highlight `Enabled` if it is specified but has the wrong value
|
|
* Highlight `NodeToNodeEncryptionOptions` if it is specified but does not contain `Enabled`
|
|
* Highlight `EnforceHTTPS` if it is specified but has the wrong value
|
|
* Highlight `DomainEndpointOption` if it is specified but does not contain `EnforceHTTPS`
|
|
* Highlight resource if `NodeToNodeEncryptionOptions` or `DomainEndpointOption` are not specified at all
|
|
|
|
For `AWS::MSK::Cluster`:
|
|
|
|
* Highlight `ClientBroker` if it is specified but does not contain `TLS`
|
|
* Highlight `InCluster` if it is specified but is set to `false`
|