@critiq/rules 0.2.0 → 0.3.0

package/rules/cfn/cfn.correctness.check-if-serverless-resources-have-serverless-transform.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-serverless-resources-have-serverless-transform
+  title: Check if serverless resources have serverless transform
+  summary: Check if serverless resources have serverless transform
+  rationale: cfn-lint reports E3038 when Check if serverless resources have serverless transform.
+  aliases:
+    - CFLIN-E3038
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3038
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3038
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if serverless resources have serverless transform
+    summary: "${captures.finding.text} matches cfn-lint E3038."
+  remediation:
+    summary: Resolve the cfn-lint E3038 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-if-the-referenced-conditions-are-defined.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-if-the-referenced-conditions-are-defined
+  title: Check if the referenced conditions are defined
+  summary: Check if the referenced conditions are defined
+  rationale: cfn-lint reports E8002 when Check if the referenced conditions are defined.
+  aliases:
+    - CFLIN-E8002
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e8002
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E8002
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check if the referenced conditions are defined
+    summary: "${captures.finding.text} matches cfn-lint E8002."
+  remediation:
+    summary: Resolve the cfn-lint E8002 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-minimum-90-period-is-met-between-backupplan-cold-and-delete
+  title: Check minimum 90 period is met between backupplan cold and delete
+  summary: Check minimum 90 period is met between backupplan cold and delete
+  rationale: cfn-lint reports E3504 when Check minimum 90 period is met between backupplan cold and delete.
+  aliases:
+    - CFLIN-E3504
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3504
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3504
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check minimum 90 period is met between backupplan cold and delete
+    summary: "${captures.finding.text} matches cfn-lint E3504."
+  remediation:
+    summary: Resolve the cfn-lint E3504 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-properties-that-are-mutually-exclusive.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-properties-that-are-mutually-exclusive
+  title: Check properties that are mutually exclusive
+  summary: Check properties that are mutually exclusive
+  rationale: cfn-lint reports E2520 when Check properties that are mutually exclusive.
+  aliases:
+    - CFLIN-E2520
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2520
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2520
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check properties that are mutually exclusive
+    summary: "${captures.finding.text} matches cfn-lint E2520."
+  remediation:
+    summary: Resolve the cfn-lint E2520 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-properties-that-are-required-together.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-properties-that-are-required-together
+  title: Check properties that are required together
+  summary: Check properties that are required together
+  rationale: cfn-lint reports E2521 when Check properties that are required together.
+  aliases:
+    - CFLIN-E2521
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2521
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2521
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check properties that are required together
+    summary: "${captures.finding.text} matches cfn-lint E2521."
+  remediation:
+    summary: Resolve the cfn-lint E2521 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-properties-that-need-at-least-one-of-a-list-of-properties
+  title: Check properties that need at least one of a list of properties
+  summary: Check properties that need at least one of a list of properties
+  rationale: cfn-lint reports E2522 when Check properties that need at least one of a list of properties.
+  aliases:
+    - CFLIN-E2522
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2522
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2522
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check properties that need at least one of a list of properties
+    summary: "${captures.finding.text} matches cfn-lint E2522."
+  remediation:
+    summary: Resolve the cfn-lint E2522 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-properties-that-need-only-one-of-a-list-of-properties
+  title: Check properties that need only one of a list of properties
+  summary: Check properties that need only one of a list of properties
+  rationale: cfn-lint reports E2523 when Check properties that need only one of a list of properties.
+  aliases:
+    - CFLIN-E2523
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2523
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2523
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check properties that need only one of a list of properties
+    summary: "${captures.finding.text} matches cfn-lint E2523."
+  remediation:
+    summary: Resolve the cfn-lint E2523 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-resource-properties-values.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-resource-properties-values
+  title: Check resource properties values
+  summary: Check resource properties values
+  rationale: cfn-lint reports E3012 when Check resource properties values.
+  aliases:
+    - CFLIN-E3012
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3012
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3012
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check resource properties values
+    summary: "${captures.finding.text} matches cfn-lint E3012."
+  remediation:
+    summary: Resolve the cfn-lint E3012 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-state-machine-definition-for-proper-syntax.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-state-machine-definition-for-proper-syntax
+  title: Check state machine definition for proper syntax
+  summary: Check state machine definition for proper syntax
+  rationale: cfn-lint reports E2532 when Check state machine definition for proper syntax.
+  aliases:
+    - CFLIN-E2532
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e2532
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E2532
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check state machine definition for proper syntax
+    summary: "${captures.finding.text} matches cfn-lint E2532."
+  remediation:
+    summary: Resolve the cfn-lint E2532 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-that-modules-resources-are-valid.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-that-modules-resources-are-valid
+  title: Check that modules resources are valid
+  summary: Check that modules resources are valid
+  rationale: cfn-lint reports E5001 when Check that modules resources are valid.
+  aliases:
+    - CFLIN-E5001
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e5001
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E5001
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check that modules resources are valid
+    summary: "${captures.finding.text} matches cfn-lint E5001."
+  remediation:
+    summary: Resolve the cfn-lint E5001 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-the-configuration-of-a-resources-updatepolicy.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-the-configuration-of-a-resources-updatepolicy
+  title: Check the configuration of a resources updatepolicy
+  summary: Check the configuration of a resources updatepolicy
+  rationale: cfn-lint reports E3016 when Check the configuration of a resources updatepolicy.
+  aliases:
+    - CFLIN-E3016
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3016
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3016
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check the configuration of a resources updatepolicy
+    summary: "${captures.finding.text} matches cfn-lint E3016."
+  remediation:
+    summary: Resolve the cfn-lint E3016 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-updatereplacepolicy-values-for-resources.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-updatereplacepolicy-values-for-resources
+  title: Check updatereplacepolicy values for resources
+  summary: Check updatereplacepolicy values for resources
+  rationale: cfn-lint reports E3036 when Check updatereplacepolicy values for resources.
+  aliases:
+    - CFLIN-E3036
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3036
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3036
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check updatereplacepolicy values for resources
+    summary: "${captures.finding.text} matches cfn-lint E3036."
+  remediation:
+    summary: Resolve the cfn-lint E3036 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.check-values-of-properties-for-valid-refs-and-getatts
+  title: Check values of properties for valid refs and getatts
+  summary: Check values of properties for valid refs and getatts
+  rationale: cfn-lint reports E3008 when Check values of properties for valid refs and getatts.
+  aliases:
+    - CFLIN-E3008
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e3008
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E3008
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Check values of properties for valid refs and getatts
+    summary: "${captures.finding.text} matches cfn-lint E3008."
+  remediation:
+    summary: Resolve the cfn-lint E3008 finding in this CloudFormation template.

package/rules/cfn/cfn.correctness.cidr-validation-of-parameters.rule.yaml

@@ -0,0 +1,49 @@
+apiVersion: critiq.dev/v1alpha1
+kind: Rule
+metadata:
+  id: cfn.correctness.cidr-validation-of-parameters
+  title: Cidr validation of parameters
+  summary: Cidr validation of parameters
+  rationale: cfn-lint reports E1024 when Cidr validation of parameters.
+  aliases:
+    - CFLIN-E1024
+  tags:
+    - cfn
+    - cfn-lint
+    - cloudformation
+    - e1024
+    - rules-catalog
+  stability: stable
+  appliesTo: file
+  detection:
+    kind: pattern
+scope:
+  languages:
+    - all
+  paths:
+    include:
+      - "**/*.yaml"
+      - "**/*.yml"
+      - "**/*.json"
+    exclude:
+      - "**/node_modules/**"
+match:
+  fact:
+    kind: cfn.lint.finding
+    bind: finding
+    where:
+      - path: ruleId
+        equals: E1024
+emit:
+  finding:
+    category: correctness.configuration
+    severity: high
+    confidence: 0.9
+    tags:
+      - cfn
+      - cloudformation
+  message:
+    title: Cidr validation of parameters
+    summary: "${captures.finding.text} matches cfn-lint E1024."
+  remediation:
+    summary: Resolve the cfn-lint E1024 finding in this CloudFormation template.