cfn-nag 0.4.68 → 0.4.69

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b886a3dc21b54772b8690e968bf202c87d05a76ee9ffd0488909e0e06d9c0ecf
-  data.tar.gz: ec94c7f22fc6f4dab76bbd60f3f005dadef813da75cd2041431b36ff7080cbb8
+  metadata.gz: b82485e14e76a4a11526a38def11fa31ab9aefa0a2af63bca6e2b856783d6820
+  data.tar.gz: e4340288aea5019332ade98880939f8e797fdd9f04e13f6618d5f2a53d7bfac7
 SHA512:
-  metadata.gz: 80aea9e5e5f618aa7d8d9bb5061211e6c8dff13eb0781a621975e2ff7a1f1e91fc8924e7a564ba7429eb7eea6eaa1913745d8439498bd5e21fb3eda82a44bb16
-  data.tar.gz: 57c36540c63a4da65e8482d074858dbdcddc7dca97c4ff7de12f7c14942a3ce0b55bb3624825cd08b1ab76bee37c94066ce348cc21c762f3938f1ce6c4896793
+  metadata.gz: f690578bce184b9b10bfca8f259ad2a8222408c8d618426af73c6be6f75d3c28ae04561a9dac36c7f8151617f8624a8c2f4c7b200a69982aa69df49ae3a0cc52
+  data.tar.gz: 47d66afbe48347ddaf3d6a770f0e3ae7f96841960741d72f193f12d7c4532060fbedf2569d19e3814641c0dce67fecd37f2f717997f8c9bc4d6bf7a58f24203b

data/lib/cfn-nag/custom_rules/PinpointAPNSChannelPrivateKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSChannelPrivateKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSChannel PrivateKey must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F57'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSChannel'
+  end
+
+  def password_property
+    :privateKey
+  end
+end

data/lib/cfn-nag/custom_rules/PinpointAPNSChannelTokenKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSChannelTokenKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSChannel TokenKey must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F56'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSChannel'
+  end
+
+  def password_property
+    :tokenKey
+  end
+end

data/lib/cfn-nag/custom_rules/PinpointAPNSSandboxChannelPrivateKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSSandboxChannelPrivateKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSSandboxChannel PrivateKey must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F42'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSSandboxChannel'
+  end
+
+  def password_property
+    :privateKey
+  end
+end

data/lib/cfn-nag/custom_rules/PinpointAPNSSandboxChannelTokenKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSSandboxChannelTokenKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSSandboxChannel TokenKey must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F43'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSSandboxChannel'
+  end
+
+  def password_property
+    :tokenKey
+  end
+end

data/lib/cfn-nag/custom_rules/PinpointAPNSVoipChannelPrivateKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSVoipChannelPrivateKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSVoipChannel PrivateKey must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F48'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSVoipChannel'
+  end
+
+  def password_property
+    :privateKey
+  end
+end

data/lib/cfn-nag/custom_rules/PinpointAPNSVoipChannelTokenKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSVoipChannelTokenKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSChannel TokenKey must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F49'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSVoipChannel'
+  end
+
+  def password_property
+    :tokenKey
+  end
+end

data/lib/cfn-nag/custom_rules/PinpointAPNSVoipSandboxChannelPrivateKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSVoipSandboxChannelPrivateKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSVoipSandboxChannel PrivateKey must not be a plaintext ' \
+    'string or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F46'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSVoipSandboxChannel'
+  end
+
+  def password_property
+    :privateKey
+  end
+end

data/lib/cfn-nag/custom_rules/PinpointAPNSVoipSandboxChannelTokenKeyRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class PinpointAPNSVoipSandboxChannelTokenKeyRule < PasswordBaseRule
+  def rule_text
+    'Pinpoint APNSVoipSandboxChannel TokenKey must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F47'
+  end
+
+  def resource_type
+    'AWS::Pinpoint::APNSVoipSandboxChannel'
+  end
+
+  def password_property
+    :tokenKey
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cfn-nag
 version: !ruby/object:Gem::Version
-  version: 0.4.68
+  version: 0.4.69
 platform: ruby
 authors:
 - Eric Kascic
@@ -222,6 +222,14 @@ files:
 - lib/cfn-nag/custom_rules/OpsWorksAppSslConfigurationPrivateKeyRule.rb
 - lib/cfn-nag/custom_rules/OpsWorksStackCustomCookbooksSourcePasswordRule.rb
 - lib/cfn-nag/custom_rules/OpsWorksStackRdsDbInstancesDbPasswordRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSChannelPrivateKeyRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSChannelTokenKeyRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSSandboxChannelPrivateKeyRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSSandboxChannelTokenKeyRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSVoipChannelPrivateKeyRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSVoipChannelTokenKeyRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSVoipSandboxChannelPrivateKeyRule.rb
+- lib/cfn-nag/custom_rules/PinpointAPNSVoipSandboxChannelTokenKeyRule.rb
 - lib/cfn-nag/custom_rules/PolicyOnUserRule.rb
 - lib/cfn-nag/custom_rules/RDSDBClusterMasterUserPasswordRule.rb
 - lib/cfn-nag/custom_rules/RDSDBClusterStorageEncryptedRule.rb