cfn-nag 0.5.31 → 0.5.32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 82fb8491f8e9dfb75a62a0dbd74d9e676f42759353693254fa8873cac6a80eab
-  data.tar.gz: a668177c5071887cff434a47eba46a608182c401a23d184a090a68f23f913846
+  metadata.gz: 78145dc99c677f2edab3010caab4af6a64d43eba2f2d17246ff2fc8255ae5937
+  data.tar.gz: 95e3243d21594548693b2ef6062a4d79480d5ea758644bad224f8c5b09f7c56f
 SHA512:
-  metadata.gz: 5094e3df1844fa55d20cca2a611674f83642af43e5bbe8429f60b3317fcf33a205185c1aca3538a016fcad90b3479304da1ab65e2e2bda2e89115f2c2565956b
-  data.tar.gz: 5312028a55db16f42a659c3984b003890890d12fae12f51e5e992c784411ed6bb05924bfc29cf64c8d1ead85d528099f1822925bd4ab0ce0c476ddcefd56d0f5
+  metadata.gz: e652cf570e210598f16a7658f087f5415c3acfd2451eacffa72bf86ba56f6e749d6a16a47089f97998ca0ee3320cbc40e39d894f4c2b70e52e1922ce9b06e32b
+  data.tar.gz: 2697860ac860637093fdb39003080f8d54b2a7eee57094c7d2d4822376be48c3eb6b36e1bf8c1e47b619b0a4b99cf34edba660af9fe83ac4140d972f90ca6d55

data/lib/cfn-nag/custom_rules/SageMakerEndpointConfigKmsKeyIdRule.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'boolean_base_rule'
+
+class SageMakerEndpointConfigKmsKeyIdRule < BooleanBaseRule
+  def rule_text
+    'SageMaker EndpointConfig should have a KmsKeyId property set.'
+  end
+
+  def rule_type
+    Violation::WARNING
+  end
+
+  def rule_id
+    'W1200'
+  end
+
+  def resource_type
+    'AWS::SageMaker::EndpointConfig'
+  end
+
+  def boolean_property
+    :kmsKeyId
+  end
+end

data/lib/cfn-nag/custom_rules/SageMakerNotebookInstanceKmsKeyIdRule.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'cfn-nag/violation'
+require_relative 'boolean_base_rule'
+
+class SageMakerNotebookInstanceKmsKeyIdRule < BooleanBaseRule
+  def rule_text
+    'SageMaker NotebookInstance should have a KmsKeyId property set.'
+  end
+
+  def rule_type
+    Violation::WARNING
+  end
+
+  def rule_id
+    'W1201'
+  end
+
+  def resource_type
+    'AWS::SageMaker::NotebookInstance'
+  end
+
+  def boolean_property
+    :kmsKeyId
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: cfn-nag
 version: !ruby/object:Gem::Version
-  version: 0.5.31
+  version: 0.5.32
 platform: ruby
 authors:
 - Eric Kascic
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-03-18 00:00:00.000000000 Z
+date: 2020-03-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -287,6 +287,8 @@ files:
 - lib/cfn-nag/custom_rules/S3BucketPolicyWildcardPrincipalRule.rb
 - lib/cfn-nag/custom_rules/S3BucketPublicReadAclRule.rb
 - lib/cfn-nag/custom_rules/S3BucketPublicReadWriteAclRule.rb
+- lib/cfn-nag/custom_rules/SageMakerEndpointConfigKmsKeyIdRule.rb
+- lib/cfn-nag/custom_rules/SageMakerNotebookInstanceKmsKeyIdRule.rb
 - lib/cfn-nag/custom_rules/SecurityGroupEgressAllProtocolsRule.rb
 - lib/cfn-nag/custom_rules/SecurityGroupEgressOpenToWorldRule.rb
 - lib/cfn-nag/custom_rules/SecurityGroupEgressPortRangeRule.rb