cfn-nag 0.7.7 → 0.7.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ad2861d55fc444c4f16cba45a818e6d755124fe97f66ff2d3c9f138f2187b48b
-  data.tar.gz: c7af2ff8b96f46bb610303b546a1c8f62250c7e11af74f48bb1cabd7632e1d1d
+  metadata.gz: 695bb4f8d17329899b73fe3eef82245d3ac06e0bb9009f9b4ee02315db15248e
+  data.tar.gz: a66a14206f6f3bdb9e480b285c10fc57c18c7ec2d0627a5e801c5e121568f6ea
 SHA512:
-  metadata.gz: f4e8d41c2622ca328127c8baef0f34bd921b98239eaca3653e871db500cfb9e35cf107ffe50151ae3972f0874f8227d6a17767b325f9e1e38a66335d69f935a0
-  data.tar.gz: b5be427253e61a463d0fefa7477e5f426176a37abd85ba955a18f42b61ffe12ef15bcf9c09f23197df0274ff4405c510f4ee4771b9ae55b01108128afe2eb9f3
+  metadata.gz: e4d5a7bb8621be7687cb67636f11d2a7a0716cdb1542c5ff914603b278ed3b37bb302da2fef557afbd5e94e5bc9ac6e990c878e3bfa76eed17dd1b9f0bf94968
+  data.tar.gz: 1c6a0d7c60b3f5c6ca2e8824a03a49f2a00615ed4a1bedf6f810dc627030eb64d2211a433a84e09972cde1b847f0f9faae3405c4698c42b4882cbe82a1e9770a

data/lib/cfn-nag/custom_rules/DMSReplicationInstanceNotPublicRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/util/truthy'
+require 'cfn-nag/violation'
+require_relative 'base'
+
+class DMSReplicationInstanceNotPublicRule < BaseRule
+  def rule_text
+    'Database Migration Service replication instances are public, property PubliclyAccessible should be set to false'
+  end
+
+  def rule_type
+    Violation::WARNING
+  end
+
+  def rule_id
+    'W91'
+  end
+
+  def audit_impl(cfn_model)
+    violating_replications = cfn_model.resources_by_type('AWS::DMS::ReplicationInstance').select do |replication|
+      replication.publiclyAccessible.nil? || truthy?(replication.publiclyAccessible)
+    end
+
+    violating_replications.map(&:logical_resource_id)
+  end
+end

data/lib/cfn-nag/custom_rules/LambdaFunctionReservedConcurrentExecutionsRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'base'
+
+class LambdaFunctionReservedConcurrentExecutionsRule < BaseRule
+  def rule_text
+    'Lambda functions should define ReservedConcurrentExecutions to reserve simultaneous executions'
+  end
+
+  def rule_type
+    Violation::WARNING
+  end
+
+  def rule_id
+    'W92'
+  end
+
+  def audit_impl(cfn_model)
+    lambda_functions = cfn_model.resources_by_type('AWS::Lambda::Function')
+    violating_lambda_functions = lambda_functions.select do |lambda_function|
+      lambda_function.reservedConcurrentExecutions.nil?
+    end
+
+    violating_lambda_functions.map(&:logical_resource_id)
+  end
+end

data/lib/cfn-nag/rule_repos/file_based_rule_repo.rb

@@ -52,7 +52,7 @@ class FileBasedRuleRepo
 
     rule_filenames = discover_rule_filenames(rule_directory)
     rule_filenames.each do |rule_filename|
-      require(rule_filename)
+      require(File.absolute_path(rule_filename))
       rule_classname = File.basename(rule_filename, '.rb')
 
       rule_classes << Object.const_get(rule_classname)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-nag
 version: !ruby/object:Gem::Version
-  version: 0.7.7
+  version: 0.7.12
 platform: ruby
 authors:
 - Eric Kascic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-04-05 00:00:00.000000000 Z
+date: 2021-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -217,6 +217,7 @@ files:
 - lib/cfn-nag/custom_rules/DLMLifecyclePolicyCrossRegionCopyEncryptionRule.rb
 - lib/cfn-nag/custom_rules/DMSEndpointMongoDbSettingsPasswordRule.rb
 - lib/cfn-nag/custom_rules/DMSEndpointPasswordRule.rb
+- lib/cfn-nag/custom_rules/DMSReplicationInstanceNotPublicRule.rb
 - lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb
 - lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb
 - lib/cfn-nag/custom_rules/DocDBDBClusterMasterUserPasswordRule.rb
@@ -283,6 +284,7 @@ files:
 - lib/cfn-nag/custom_rules/KinesisStreamStreamEncryptionRule.rb
 - lib/cfn-nag/custom_rules/LambdaFunctionCloudWatchLogsRule.rb
 - lib/cfn-nag/custom_rules/LambdaFunctionInsideVPCRule.rb
+- lib/cfn-nag/custom_rules/LambdaFunctionReservedConcurrentExecutionsRule.rb
 - lib/cfn-nag/custom_rules/LambdaPermissionEventSourceTokenRule.rb
 - lib/cfn-nag/custom_rules/LambdaPermissionInvokeFunctionActionRule.rb
 - lib/cfn-nag/custom_rules/LambdaPermissionWildcardPrincipalRule.rb