@critiq/rules 0.1.0 → 0.3.0

package/rules/cfn/cfn.correctness.check-fn-if-structure-for-validity.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-fn-if-structure-for-validity
+  title: "Check fn::if structure for validity"
+  summary: "Check fn::if structure for validity"
+  rationale: "cfn-lint reports E1028 when Check fn::if structure for validity."
+  aliases:
+    - CFLIN-E1028
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1028
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1028
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: "Check fn::if structure for validity"
+    summary: "${captures.finding.text} matches cfn-lint E1028."
+  remediation:
+    summary: Resolve the cfn-lint E1028 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-fn-not-structure-for-validity.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-fn-not-structure-for-validity
+  title: "Check fn::not structure for validity"
+  summary: "Check fn::not structure for validity"
+  rationale: "cfn-lint reports E8005 when Check fn::not structure for validity."
+  aliases:
+    - CFLIN-E8005
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e8005
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E8005
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: "Check fn::not structure for validity"
+    summary: "${captures.finding.text} matches cfn-lint E8005."
+  remediation:
+    summary: Resolve the cfn-lint E8005 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-fn-or-structure-for-validity.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-fn-or-structure-for-validity
+  title: "Check fn::or structure for validity"
+  summary: "Check fn::or structure for validity"
+  rationale: "cfn-lint reports E8006 when Check fn::or structure for validity."
+  aliases:
+    - CFLIN-E8006
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e8006
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E8006
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: "Check fn::or structure for validity"
+    summary: "${captures.finding.text} matches cfn-lint E8006."
+  remediation:
+    summary: Resolve the cfn-lint E8006 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-for-subscriptionfilters-have-beyond-2-attachments-to-a-cloudwatch-log-group
+  title: Check for subscriptionfilters have beyond 2 attachments to a cloudwatch log group
+  summary: Check for subscriptionfilters have beyond 2 attachments to a cloudwatch log group
+  rationale: cfn-lint reports E2529 when Check for subscriptionfilters have beyond 2 attachments to a cloudwatch log group.
+  aliases:
+    - CFLIN-E2529
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2529
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2529
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check for subscriptionfilters have beyond 2 attachments to a cloudwatch log group
+    summary: "${captures.finding.text} matches cfn-lint E2529."
+  remediation:
+    summary: Resolve the cfn-lint E2529 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-a-json-object-is-within-size-limits.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-a-json-object-is-within-size-limits
+  title: Check if a json object is within size limits
+  summary: Check if a json object is within size limits
+  rationale: cfn-lint reports E3502 when Check if a json object is within size limits.
+  aliases:
+    - CFLIN-E3502
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3502
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3502
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if a json object is within size limits
+    summary: "${captures.finding.text} matches cfn-lint E3502."
+  remediation:
+    summary: Resolve the cfn-lint E3502 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-a-list-has-between-min-and-max-number-of-values-specified
+  title: Check if a list has between min and max number of values specified
+  summary: Check if a list has between min and max number of values specified
+  rationale: cfn-lint reports E3032 when Check if a list has between min and max number of values specified.
+  aliases:
+    - CFLIN-E3032
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3032
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3032
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if a list has between min and max number of values specified
+    summary: "${captures.finding.text} matches cfn-lint E3032."
+  remediation:
+    summary: Resolve the cfn-lint E3032 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-a-list-has-duplicate-values.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-a-list-has-duplicate-values
+  title: Check if a list has duplicate values
+  summary: Check if a list has duplicate values
+  rationale: cfn-lint reports E3037 when Check if a list has duplicate values.
+  aliases:
+    - CFLIN-E3037
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3037
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3037
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if a list has duplicate values
+    summary: "${captures.finding.text} matches cfn-lint E3037."
+  remediation:
+    summary: Resolve the cfn-lint E3037 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-a-number-is-between-min-and-max.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-a-number-is-between-min-and-max
+  title: Check if a number is between min and max
+  summary: Check if a number is between min and max
+  rationale: cfn-lint reports E3034 when Check if a number is between min and max.
+  aliases:
+    - CFLIN-E3034
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3034
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3034
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if a number is between min and max
+    summary: "${captures.finding.text} matches cfn-lint E3034."
+  remediation:
+    summary: Resolve the cfn-lint E3034 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-a-string-has-between-min-and-max-number-of-values-specified
+  title: Check if a string has between min and max number of values specified
+  summary: Check if a string has between min and max number of values specified
+  rationale: cfn-lint reports E3033 when Check if a string has between min and max number of values specified.
+  aliases:
+    - CFLIN-E3033
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3033
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3033
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if a string has between min and max number of values specified
+    summary: "${captures.finding.text} matches cfn-lint E3033."
+  remediation:
+    summary: Resolve the cfn-lint E3033 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-eol-lambda-function-runtimes-are-used.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-eol-lambda-function-runtimes-are-used
+  title: Check if eol lambda function runtimes are used
+  summary: Check if eol lambda function runtimes are used
+  rationale: cfn-lint reports E2531 when Check if eol lambda function runtimes are used.
+  aliases:
+    - CFLIN-E2531
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2531
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2531
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if eol lambda function runtimes are used
+    summary: "${captures.finding.text} matches cfn-lint E2531."
+  remediation:
+    summary: Resolve the cfn-lint E2531 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-properties-have-a-valid-value.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-properties-have-a-valid-value
+  title: Check if properties have a valid value
+  summary: Check if properties have a valid value
+  rationale: cfn-lint reports E3030 when Check if properties have a valid value.
+  aliases:
+    - CFLIN-E3030
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3030
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3030
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if properties have a valid value
+    summary: "${captures.finding.text} matches cfn-lint E3030."
+  remediation:
+    summary: Resolve the cfn-lint E3030 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-property-values-adhere-to-a-specific-pattern
+  title: Check if property values adhere to a specific pattern
+  summary: Check if property values adhere to a specific pattern
+  rationale: cfn-lint reports E3031 when Check if property values adhere to a specific pattern.
+  aliases:
+    - CFLIN-E3031
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3031
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3031
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if property values adhere to a specific pattern
+    summary: "${captures.finding.text} matches cfn-lint E3031."
+  remediation:
+    summary: Resolve the cfn-lint E3031 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-refing-to-a-iam-resource-with-path-set
+  title: Check if refing to a iam resource with path set
+  summary: Check if refing to a iam resource with path set
+  rationale: cfn-lint reports E3050 when Check if refing to a iam resource with path set.
+  aliases:
+    - CFLIN-E3050
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3050
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3050
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if refing to a iam resource with path set
+    summary: "${captures.finding.text} matches cfn-lint E3050."
+  remediation:
+    summary: Resolve the cfn-lint E3050 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-refs-exist.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-refs-exist
+  title: Check if refs exist
+  summary: Check if refs exist
+  rationale: cfn-lint reports E1012 when Check if refs exist.
+  aliases:
+    - CFLIN-E1012
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1012
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1012
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if refs exist
+    summary: "${captures.finding.text} matches cfn-lint E1012."
+  remediation:
+    summary: Resolve the cfn-lint E1012 finding in this CloudFormation template.