cfn-nag 0.4.55 → 0.4.56

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2682c698c9f4b4cc462275cb36c2789f62305084d85175f5f3a2be1d1bc28095
-  data.tar.gz: f0718d888c66edb0d5efa8da809e0379be6c3b9f079299bee93bd73fc396b5d5
+  metadata.gz: 4ad40bd1c3c5d3a93f7f64ce1fceec0c7a2a78646cdcfa71afbc204ccee7632e
+  data.tar.gz: 0d150bfbcc7494f068f05adfd4bd2044633e3dd87727dba6c84e5006439fce59
 SHA512:
-  metadata.gz: 0042f93b7b41c7f3203b532d7bb4342adf8f5c61e0a0aecc962ecb7b2f2bda87cffaed100a6be8464399a9bd3355029f80178319653dfd7e05339e97d3eb149d
-  data.tar.gz: 1ea773c620e0d22ff2e1225022304879b13615c72aabbfbd813630d15b64a3f8c3e31f889fae37dc315fdf2b3990289b843033552c34c7d1dd46bce06834ede8
+  metadata.gz: 9791e0a44eda5c2ed9ee822f76ea85336dfa81e46e569fc7b6415512dda633e111df907eb07889683358f55c8d9f1affcb455291d45ccbdc00e72af4fbb3f9b7
+  data.tar.gz: 2ad60258fc5a0629dd61ca42ad91d1481064d3a2c07684f5f8326d391de54191e0378473c3a02ff0ff6e4cf94cf3bbc80f41c15b4f2f86e957540fefab989363

data/lib/cfn-nag/custom_rules/AmplifyAppAccessTokenRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class AmplifyAppAccessTokenRule < PasswordBaseRule
+  def rule_text
+    'Amplify App AccessToken must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F41'
+  end
+
+  def resource_type
+    'AWS::Amplify::App'
+  end
+
+  def password_property
+    :accessToken
+  end
+end

data/lib/cfn-nag/custom_rules/AmplifyAppOauthTokenRule.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class AmplifyAppOauthTokenRule < PasswordBaseRule
+  def rule_text
+    'Amplify App OauthToken must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F58'
+  end
+
+  def resource_type
+    'AWS::Amplify::App'
+  end
+
+  def password_property
+    :oauthToken
+  end
+end

data/lib/cfn-nag/custom_rules/AmplifyBranchBasicAuthConfigPasswordRule.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class AmplifyBranchBasicAuthConfigPasswordRule < PasswordBaseRule
+  def rule_text
+    'Amplify Branch BasicAuthConfig Password must not be a plaintext ' \
+    'string or a Ref to a NoEcho Parameter with a Default value.' \
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F60'
+  end
+
+  def resource_type
+    'AWS::Amplify::Branch'
+  end
+
+  def password_property
+    :basicAuthConfig
+  end
+
+  def sub_property_name
+    'Password'
+  end
+end

data/lib/cfn-nag/custom_rules/AppStreamDirectoryConfigServiceAccountCredentialsAccountPasswordRule.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class AppStreamDirectoryConfigServiceAccountCredentialsAccountPasswordRule < PasswordBaseRule
+  def rule_text
+    'AppStream DirectoryConfig ServiceAccountCredentials AccountPassword ' \
+    'must not be a plaintext string or a Ref to a NoEcho Parameter ' \
+    'with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F53'
+  end
+
+  def resource_type
+    'AWS::AppStream::DirectoryConfig'
+  end
+
+  def password_property
+    :serviceAccountCredentials
+  end
+
+  def sub_property_name
+    'AccountPassword'
+  end
+end

data/lib/cfn-nag/custom_rules/DMSEndpointMongoDbSettingsPasswordRule.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'password_base_rule'
+
+class DMSEndpointMongoDbSettingsPasswordRule < PasswordBaseRule
+  def rule_text
+    'DMS Endpoint MongoDbSettings Password must not be a plaintext string ' \
+    'or a Ref to a NoEcho Parameter with a Default value.'
+  end
+
+  def rule_type
+    Violation::FAILING_VIOLATION
+  end
+
+  def rule_id
+    'F55'
+  end
+
+  def resource_type
+    'AWS::DMS::Endpoint'
+  end
+
+  def password_property
+    :mongoDbSettings
+  end
+
+  def sub_property_name
+    'Password'
+  end
+end

data/lib/cfn-nag/result_view/rules_view.rb

@@ -42,10 +42,10 @@ class RulesView
 
   def emit_duplicates(duplicates)
     duplicates.each do |info|
-      puts '------------------'.red
-      puts "Rule ID conflict detected for #{info[:id]}.".red
-      puts "New rule: #{info[:new_message]}".red
-      puts "Registered rule: #{info[:registered_message]}".red
+      puts '------------------'
+      puts "Rule ID conflict detected for #{info[:id]}."
+      puts "New rule: #{info[:new_message]}"
+      puts "Registered rule: #{info[:registered_message]}"
     end
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-nag
 version: !ruby/object:Gem::Version
-  version: 0.4.55
+  version: 0.4.56
 platform: ruby
 authors:
 - Eric Kascic
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-10 00:00:00.000000000 Z
+date: 2019-12-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -157,13 +157,18 @@ files:
 - lib/cfn-nag/cli_options.rb
 - lib/cfn-nag/custom_rule_loader.rb
 - lib/cfn-nag/custom_rules/AmazonMQBrokerUserPasswordRule.rb
+- lib/cfn-nag/custom_rules/AmplifyAppAccessTokenRule.rb
 - lib/cfn-nag/custom_rules/AmplifyAppBasicAuthConfigPasswordRule.rb
+- lib/cfn-nag/custom_rules/AmplifyAppOauthTokenRule.rb
+- lib/cfn-nag/custom_rules/AmplifyBranchBasicAuthConfigPasswordRule.rb
 - lib/cfn-nag/custom_rules/ApiGatewayAccessLoggingRule.rb
 - lib/cfn-nag/custom_rules/ApiGatewayV2AccessLoggingRule.rb
+- lib/cfn-nag/custom_rules/AppStreamDirectoryConfigServiceAccountCredentialsAccountPasswordRule.rb
 - lib/cfn-nag/custom_rules/BatchJobDefinitionContainerPropertiesPrivilegedRule.rb
 - lib/cfn-nag/custom_rules/CloudFormationAuthenticationRule.rb
 - lib/cfn-nag/custom_rules/CloudFrontDistributionAccessLoggingRule.rb
 - lib/cfn-nag/custom_rules/CodeBuildEncryptionKeyRule.rb
+- lib/cfn-nag/custom_rules/DMSEndpointMongoDbSettingsPasswordRule.rb
 - lib/cfn-nag/custom_rules/DMSEndpointPasswordRule.rb
 - lib/cfn-nag/custom_rules/DirectoryServiceMicrosoftADPasswordRule.rb
 - lib/cfn-nag/custom_rules/DirectoryServiceSimpleADPasswordRule.rb