cfn-nag 0.5.31 → 0.5.32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/cfn-nag/custom_rules/SageMakerEndpointConfigKmsKeyIdRule.rb +26 -0
  3. data/lib/cfn-nag/custom_rules/SageMakerNotebookInstanceKmsKeyIdRule.rb +26 -0
  4. metadata +4 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 82fb8491f8e9dfb75a62a0dbd74d9e676f42759353693254fa8873cac6a80eab
4
- data.tar.gz: a668177c5071887cff434a47eba46a608182c401a23d184a090a68f23f913846
3
+ metadata.gz: 78145dc99c677f2edab3010caab4af6a64d43eba2f2d17246ff2fc8255ae5937
4
+ data.tar.gz: 95e3243d21594548693b2ef6062a4d79480d5ea758644bad224f8c5b09f7c56f
5
5
  SHA512:
6
- metadata.gz: 5094e3df1844fa55d20cca2a611674f83642af43e5bbe8429f60b3317fcf33a205185c1aca3538a016fcad90b3479304da1ab65e2e2bda2e89115f2c2565956b
7
- data.tar.gz: 5312028a55db16f42a659c3984b003890890d12fae12f51e5e992c784411ed6bb05924bfc29cf64c8d1ead85d528099f1822925bd4ab0ce0c476ddcefd56d0f5
6
+ metadata.gz: e652cf570e210598f16a7658f087f5415c3acfd2451eacffa72bf86ba56f6e749d6a16a47089f97998ca0ee3320cbc40e39d894f4c2b70e52e1922ce9b06e32b
7
+ data.tar.gz: 2697860ac860637093fdb39003080f8d54b2a7eee57094c7d2d4822376be48c3eb6b36e1bf8c1e47b619b0a4b99cf34edba660af9fe83ac4140d972f90ca6d55
data/lib/cfn-nag/custom_rules/SageMakerEndpointConfigKmsKeyIdRule.rb ADDED
@@ -0,0 +1,26 @@
1
+ # frozen_string_literal: true
2
+
3
+ require 'cfn-nag/violation'
4
+ require_relative 'boolean_base_rule'
5
+
6
+ class SageMakerEndpointConfigKmsKeyIdRule < BooleanBaseRule
7
+ def rule_text
8
+ 'SageMaker EndpointConfig should have a KmsKeyId property set.'
9
+ end
10
+
11
+ def rule_type
12
+ Violation::WARNING
13
+ end
14
+
15
+ def rule_id
16
+ 'W1200'
17
+ end
18
+
19
+ def resource_type
20
+ 'AWS::SageMaker::EndpointConfig'
21
+ end
22
+
23
+ def boolean_property
24
+ :kmsKeyId
25
+ end
26
+ end
data/lib/cfn-nag/custom_rules/SageMakerNotebookInstanceKmsKeyIdRule.rb ADDED
@@ -0,0 +1,26 @@
1
+ # frozen_string_literal: true
2
+
3
+ require 'cfn-nag/violation'
4
+ require_relative 'boolean_base_rule'
5
+
6
+ class SageMakerNotebookInstanceKmsKeyIdRule < BooleanBaseRule
7
+ def rule_text
8
+ 'SageMaker NotebookInstance should have a KmsKeyId property set.'
9
+ end
10
+
11
+ def rule_type
12
+ Violation::WARNING
13
+ end
14
+
15
+ def rule_id
16
+ 'W1201'
17
+ end
18
+
19
+ def resource_type
20
+ 'AWS::SageMaker::NotebookInstance'
21
+ end
22
+
23
+ def boolean_property
24
+ :kmsKeyId
25
+ end
26
+ end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: cfn-nag
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.5.31
4
+ version: 0.5.32
5
5
  platform: ruby
6
6
  authors:
7
7
  - Eric Kascic
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-03-18 00:00:00.000000000 Z
11
+ date: 2020-03-26 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rake
@@ -287,6 +287,8 @@ files:
287
287
  - lib/cfn-nag/custom_rules/S3BucketPolicyWildcardPrincipalRule.rb
288
288
  - lib/cfn-nag/custom_rules/S3BucketPublicReadAclRule.rb
289
289
  - lib/cfn-nag/custom_rules/S3BucketPublicReadWriteAclRule.rb
290
+ - lib/cfn-nag/custom_rules/SageMakerEndpointConfigKmsKeyIdRule.rb
291
+ - lib/cfn-nag/custom_rules/SageMakerNotebookInstanceKmsKeyIdRule.rb
290
292
  - lib/cfn-nag/custom_rules/SecurityGroupEgressAllProtocolsRule.rb
291
293
  - lib/cfn-nag/custom_rules/SecurityGroupEgressOpenToWorldRule.rb
292
294
  - lib/cfn-nag/custom_rules/SecurityGroupEgressPortRangeRule.rb