0465d16d1d
* added skeleton * added highlighting tip * added kinesis recommendations * removed template rule leftovers * removed unnecessary clause to avoid confusion * fixed highlighting tip mistake * fixed french syntax Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com> * fixed french syntax Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com> * removed quotes Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com> Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com> Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
31 lines
1.2 KiB
Plaintext
31 lines
1.2 KiB
Plaintext
=== Highlighting
|
|
|
|
For ``aws_kinesis_stream``:
|
|
|
|
* Highlight the resource if `encryption_type` is missing or set to ``NONE``
|
|
|
|
For `aws_elasticache_replication_group`:
|
|
|
|
* Highlight `transit_encryption_enabled` if it is specified but has the wrong value
|
|
* Highlight resource if `transit_encryption_enabled` is not set
|
|
|
|
For `aws_ecs_task_definition`:
|
|
|
|
* Highlight `transit_encryption` if it is specified but has the wrong value
|
|
* Highlight `efs_volume_configuration` if it exists but does not contain `transit_encryption`
|
|
|
|
* For `aws_lb_listener`:
|
|
** For a `fixed-response` or `forward` action: Highlight the root `protocol` if it is set to `HTTP`
|
|
** For a `redirect` action: Highlight the root `protocol` if `default_action.redirect.protocol` is set as `HTTP`
|
|
|
|
For `aws_elasticsearch_domain`:
|
|
|
|
* Highlight `enabled` field from `node_to_node_encryption` if it is specified but has the wrong value
|
|
* Highlight `enforce_https` field from `domain_endpoint_options` if it is specified but has the wrong value
|
|
* Highlight resource if `node_to_node_encryption` is not specified at all
|
|
|
|
For `aws_msk_cluster`:
|
|
|
|
* Highlight `client_broker` if it is specified but does not contain `TLS`
|
|
* Highlight `in_cluster` if it is specified but is set to `false`
|