cfn-nag-rules-core 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: ca46bb48e356d7e599af004d7201acdebbd3493411985593500bb815404ba84e
+  data.tar.gz: 508cf5330a2a1494fa45c47372f1665b083f6328779f3fe497350a2467357989
+SHA512:
+  metadata.gz: 267567bd941950a2f80cd7840a5eb3602bb378a713d7f1ea92cf111902e58dda2fd2b8646f714517b7622cfd741af37992493532f9571698b6225bc3288c6181
+  data.tar.gz: '091f91c06d45b8995db0ba365f87b270ad730b5e1f817954a706cdc1c9241424e66f019bd41a4f29ff42fb8eeccea76439f7ec64947bf9a964470c9ade178299'

data/lib/cfn-nag-rules-core.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+gem_path = Gem.loaded_specs['cfn-nag-rules-core'].full_gem_path
+Dir.glob("#{gem_path}/lib/cfn-nag-rules-core/**/*.rb").each do |rule|
+  require rule
+end

data/lib/cfn-nag-rules-core/workspaces.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+class CfnNag
+  class Workspaces
+  end
+end

data/lib/cfn-nag-rules-core/workspaces/workspace_encryption_rule.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require 'cfn-nag/base_rule'
+require 'cfn-nag-rules-core/workspaces'
+
+class CfnNag
+  class Workspaces
+    class WorkspaceEncryptionRule < CfnNag::BaseRule
+      def rule_text
+        'Workspace should have encryption enabled'
+      end
+
+      def rule_type
+        Violation::FAILING_VIOLATION
+      end
+
+      def rule_id
+        'F29'
+      end
+
+      def audit_impl(cfn_model)
+        resources = cfn_model.resources_by_type('AWS::WorkSpaces::Workspace')
+
+        violating_workspaces = resources.select do |workspace|
+          workspace.userVolumeEncryptionEnabled.nil? ||
+            workspace.userVolumeEncryptionEnabled.to_s.casecmp('false').zero?
+        end
+
+        violating_workspaces.map(&:logical_resource_id)
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,103 @@
+--- !ruby/object:Gem::Specification
+name: cfn-nag-rules-core
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Eric Kascic
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2019-06-03 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: cfn-nag
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.4.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 0.4.0
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: cfn-model
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: The core rules for cfn_nag
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/cfn-nag-rules-core.rb
+- lib/cfn-nag-rules-core/workspaces.rb
+- lib/cfn-nag-rules-core/workspaces/workspace_encryption_rule.rb
+homepage: https://github.com/stelligent/cfn_nag
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '2.2'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.7
+signing_key: 
+specification_version: 4
+summary: Core Rules for cfn_nag
+test_files: []