@mavogel/awscdk-rootmail 0.0.277 → 0.0.279
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +8 -8
- package/lib/rootmail.js +1 -1
- package/lib/ses-receive.js +1 -1
- package/node_modules/@aws-sdk/client-cloudwatch-logs/package.json +36 -36
- package/node_modules/@aws-sdk/client-route-53/package.json +36 -36
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteObjectCommand.d.ts +10 -10
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/PutObjectCommand.d.ts +47 -47
- package/node_modules/@aws-sdk/client-s3/package.json +50 -50
- package/node_modules/@aws-sdk/client-ses/package.json +34 -34
- package/node_modules/@aws-sdk/client-ssm/package.json +34 -34
- package/node_modules/@aws-sdk/client-sso/package.json +32 -32
- package/node_modules/@aws-sdk/core/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-env/package.json +5 -5
- package/node_modules/@aws-sdk/credential-provider-http/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-ini/package.json +13 -13
- package/node_modules/@aws-sdk/credential-provider-node/package.json +12 -12
- package/node_modules/@aws-sdk/credential-provider-process/package.json +6 -6
- package/node_modules/@aws-sdk/credential-provider-sso/package.json +8 -8
- package/node_modules/@aws-sdk/credential-provider-web-identity/package.json +6 -6
- package/node_modules/@aws-sdk/middleware-bucket-endpoint/package.json +5 -5
- package/node_modules/@aws-sdk/middleware-expect-continue/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-flexible-checksums/package.json +9 -9
- package/node_modules/@aws-sdk/middleware-host-header/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-location-constraint/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-logger/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-recursion-detection/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-sdk-route53/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-sdk-s3/package.json +11 -11
- package/node_modules/@aws-sdk/middleware-ssec/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-user-agent/package.json +7 -7
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/package.json +32 -32
- package/node_modules/@aws-sdk/region-config-resolver/package.json +5 -5
- package/node_modules/@aws-sdk/signature-v4-multi-region/package.json +6 -6
- package/node_modules/@aws-sdk/token-providers/package.json +6 -6
- package/node_modules/@aws-sdk/types/dist-types/identity/AwsCredentialIdentity.d.ts +17 -4
- package/node_modules/@aws-sdk/types/dist-types/ts3.4/identity/AwsCredentialIdentity.d.ts +7 -2
- package/node_modules/@aws-sdk/types/package.json +2 -2
- package/node_modules/@aws-sdk/util-endpoints/package.json +4 -4
- package/node_modules/@aws-sdk/util-user-agent-browser/package.json +3 -3
- package/node_modules/@aws-sdk/util-user-agent-node/package.json +5 -5
- package/node_modules/@aws-sdk/xml-builder/package.json +2 -2
- package/node_modules/cdk-nag/.jsii +19 -16
- package/node_modules/cdk-nag/API.md +1 -1
- package/node_modules/cdk-nag/RULES.md +4 -0
- package/node_modules/cdk-nag/lib/ignore-suppression-conditions.js +6 -6
- package/node_modules/cdk-nag/lib/index.js +8 -3
- package/node_modules/cdk-nag/lib/models/nag-suppression.d.ts +1 -1
- package/node_modules/cdk-nag/lib/nag-logger.js +10 -10
- package/node_modules/cdk-nag/lib/nag-pack.js +2 -2
- package/node_modules/cdk-nag/lib/nag-rules.d.ts +4 -4
- package/node_modules/cdk-nag/lib/nag-rules.js +5 -5
- package/node_modules/cdk-nag/lib/nag-suppressions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/aws-solutions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/hipaa-security.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/hipaa-security.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.js +18 -2
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.js +18 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/appsync/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloud9/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eventbridge/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.js +3 -3
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.js +7 -7
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lex/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.js +2 -2
- package/node_modules/cdk-nag/lib/rules/quicksight/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.js +3 -3
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.d.ts +8 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.js +27 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sns/index.d.ts +1 -0
- package/node_modules/cdk-nag/lib/rules/sns/index.js +4 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.js +4 -4
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/timestream/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/waf/index.js +2 -1
- package/node_modules/cdk-nag/lib/utils/flatten-cfn-reference.js +3 -2
- package/node_modules/cdk-nag/lib/utils/nag-suppression-helper.js +1 -1
- package/node_modules/cdk-nag/package.json +7 -13
- package/package.json +8 -8
|
@@ -22,5 +22,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
22
22
|
else {
|
|
23
23
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
24
24
|
}
|
|
25
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
26
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
25
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUmVkc2hpZnRDbHVzdGVySW5WUEMuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcnVsZXMvcmVkc2hpZnQvUmVkc2hpZnRDbHVzdGVySW5WUEMudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQTs7O0VBR0U7QUFDRiwrQkFBNkI7QUFFN0IsMkRBQXNEO0FBQ3RELCtDQUFvRDtBQUVwRDs7O0dBR0c7QUFDSCxrQkFBZSxNQUFNLENBQUMsY0FBYyxDQUNsQyxDQUFDLElBQWlCLEVBQXFCLEVBQUU7SUFDdkMsSUFBSSxJQUFJLFlBQVkseUJBQVUsRUFBRSxDQUFDO1FBQy9CLElBQ0UsSUFBSSxDQUFDLHNCQUFzQixJQUFJLFNBQVM7WUFDeEMsSUFBSSxDQUFDLHNCQUFzQixDQUFDLE1BQU0sSUFBSSxDQUFDLEVBQ3ZDLENBQUM7WUFDRCxPQUFPLDZCQUFpQixDQUFDLGFBQWEsQ0FBQztRQUN6QyxDQUFDO1FBQ0QsT0FBTyw2QkFBaUIsQ0FBQyxTQUFTLENBQUM7SUFDckMsQ0FBQztTQUFNLENBQUM7UUFDTixPQUFPLDZCQUFpQixDQUFDLGNBQWMsQ0FBQztJQUMxQyxDQUFDO0FBQ0gsQ0FBQyxFQUNELE1BQU0sRUFDTixFQUFFLEtBQUssRUFBRSxJQUFBLFlBQUssRUFBQyxVQUFVLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FDbEMsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbIi8qXG5Db3B5cmlnaHQgQW1hem9uLmNvbSwgSW5jLiBvciBpdHMgYWZmaWxpYXRlcy4gQWxsIFJpZ2h0cyBSZXNlcnZlZC5cblNQRFgtTGljZW5zZS1JZGVudGlmaWVyOiBBcGFjaGUtMi4wXG4qL1xuaW1wb3J0IHsgcGFyc2UgfSBmcm9tICdwYXRoJztcbmltcG9ydCB7IENmblJlc291cmNlIH0gZnJvbSAnYXdzLWNkay1saWInO1xuaW1wb3J0IHsgQ2ZuQ2x1c3RlciB9IGZyb20gJ2F3cy1jZGstbGliL2F3cy1yZWRzaGlmdCc7XG5pbXBvcnQgeyBOYWdSdWxlQ29tcGxpYW5jZSB9IGZyb20gJy4uLy4uL25hZy1ydWxlcyc7XG5cbi8qKlxuICogUmVkc2hpZnQgY2x1c3RlcnMgYXJlIHByb3Zpc2lvbmVkIGluIGEgVlBDXG4gKiBAcGFyYW0gbm9kZSB0aGUgQ2ZuUmVzb3VyY2UgdG8gY2hlY2tcbiAqL1xuZXhwb3J0IGRlZmF1bHQgT2JqZWN0LmRlZmluZVByb3BlcnR5KFxuICAobm9kZTogQ2ZuUmVzb3VyY2UpOiBOYWdSdWxlQ29tcGxpYW5jZSA9PiB7XG4gICAgaWYgKG5vZGUgaW5zdGFuY2VvZiBDZm5DbHVzdGVyKSB7XG4gICAgICBpZiAoXG4gICAgICAgIG5vZGUuY2x1c3RlclN1Ym5ldEdyb3VwTmFtZSA9PSB1bmRlZmluZWQgfHxcbiAgICAgICAgbm9kZS5jbHVzdGVyU3VibmV0R3JvdXBOYW1lLmxlbmd0aCA9PSAwXG4gICAgICApIHtcbiAgICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PTl9DT01QTElBTlQ7XG4gICAgICB9XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuQ09NUExJQU5UO1xuICAgIH0gZWxzZSB7XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuTk9UX0FQUExJQ0FCTEU7XG4gICAgfVxuICB9LFxuICAnbmFtZScsXG4gIHsgdmFsdWU6IHBhcnNlKF9fZmlsZW5hbWUpLm5hbWUgfVxuKTtcbiJdfQ==
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters have version upgrades enabled, automated snapshot retention periods enabled, and explicit maintenance windows configured
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -26,5 +26,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
26
26
|
else {
|
|
27
27
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
28
28
|
}
|
|
29
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
30
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
29
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
30
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters do not use the default endpoint port
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -22,5 +22,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
22
22
|
else {
|
|
23
23
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
24
24
|
}
|
|
25
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
26
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
25
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters use custom user names vice the default (awsuser)
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -22,5 +22,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
22
22
|
else {
|
|
23
23
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
24
24
|
}
|
|
25
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
26
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
25
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters do not allow public access
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -22,5 +22,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
22
22
|
else {
|
|
23
23
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
24
24
|
}
|
|
25
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
26
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
25
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUmVkc2hpZnRDbHVzdGVyUHVibGljQWNjZXNzLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vc3JjL3J1bGVzL3JlZHNoaWZ0L1JlZHNoaWZ0Q2x1c3RlclB1YmxpY0FjY2Vzcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBOzs7RUFHRTtBQUNGLCtCQUE2QjtBQUU3QiwyREFBc0Q7QUFDdEQsK0NBQThEO0FBRTlEOzs7R0FHRztBQUNILGtCQUFlLE1BQU0sQ0FBQyxjQUFjLENBQ2xDLENBQUMsSUFBaUIsRUFBcUIsRUFBRTtJQUN2QyxJQUFJLElBQUksWUFBWSx5QkFBVSxFQUFFLENBQUM7UUFDL0IsTUFBTSxZQUFZLEdBQUcsb0JBQVEsQ0FBQyxrQkFBa0IsQ0FDOUMsSUFBSSxFQUNKLElBQUksQ0FBQyxrQkFBa0IsQ0FDeEIsQ0FBQztRQUNGLElBQUksWUFBWSxLQUFLLElBQUksRUFBRSxDQUFDO1lBQzFCLE9BQU8sNkJBQWlCLENBQUMsYUFBYSxDQUFDO1FBQ3pDLENBQUM7UUFDRCxPQUFPLDZCQUFpQixDQUFDLFNBQVMsQ0FBQztJQUNyQyxDQUFDO1NBQU0sQ0FBQztRQUNOLE9BQU8sNkJBQWlCLENBQUMsY0FBYyxDQUFDO0lBQzFDLENBQUM7QUFDSCxDQUFDLEVBQ0QsTUFBTSxFQUNOLEVBQUUsS0FBSyxFQUFFLElBQUEsWUFBSyxFQUFDLFVBQVUsQ0FBQyxDQUFDLElBQUksRUFBRSxDQUNsQyxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiLypcbkNvcHlyaWdodCBBbWF6b24uY29tLCBJbmMuIG9yIGl0cyBhZmZpbGlhdGVzLiBBbGwgUmlnaHRzIFJlc2VydmVkLlxuU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjBcbiovXG5pbXBvcnQgeyBwYXJzZSB9IGZyb20gJ3BhdGgnO1xuaW1wb3J0IHsgQ2ZuUmVzb3VyY2UgfSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBDZm5DbHVzdGVyIH0gZnJvbSAnYXdzLWNkay1saWIvYXdzLXJlZHNoaWZ0JztcbmltcG9ydCB7IE5hZ1J1bGVDb21wbGlhbmNlLCBOYWdSdWxlcyB9IGZyb20gJy4uLy4uL25hZy1ydWxlcyc7XG5cbi8qKlxuICogUmVkc2hpZnQgY2x1c3RlcnMgZG8gbm90IGFsbG93IHB1YmxpYyBhY2Nlc3NcbiAqIEBwYXJhbSBub2RlIHRoZSBDZm5SZXNvdXJjZSB0byBjaGVja1xuICovXG5leHBvcnQgZGVmYXVsdCBPYmplY3QuZGVmaW5lUHJvcGVydHkoXG4gIChub2RlOiBDZm5SZXNvdXJjZSk6IE5hZ1J1bGVDb21wbGlhbmNlID0+IHtcbiAgICBpZiAobm9kZSBpbnN0YW5jZW9mIENmbkNsdXN0ZXIpIHtcbiAgICAgIGNvbnN0IHB1YmxpY0FjY2VzcyA9IE5hZ1J1bGVzLnJlc29sdmVJZlByaW1pdGl2ZShcbiAgICAgICAgbm9kZSxcbiAgICAgICAgbm9kZS5wdWJsaWNseUFjY2Vzc2libGVcbiAgICAgICk7XG4gICAgICBpZiAocHVibGljQWNjZXNzID09PSB0cnVlKSB7XG4gICAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT05fQ09NUExJQU5UO1xuICAgICAgfVxuICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLkNPTVBMSUFOVDtcbiAgICB9IGVsc2Uge1xuICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PVF9BUFBMSUNBQkxFO1xuICAgIH1cbiAgfSxcbiAgJ25hbWUnLFxuICB7IHZhbHVlOiBwYXJzZShfX2ZpbGVuYW1lKS5uYW1lIH1cbik7XG4iXX0=
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters have user user activity logging enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -36,7 +36,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
36
36
|
else {
|
|
37
37
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
38
38
|
}
|
|
39
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
39
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
40
40
|
/**
|
|
41
41
|
* Helper function to check whether a given cluster parameter group is compliant
|
|
42
42
|
* @param node the CfnClusterParameterGroup to check
|
|
@@ -56,4 +56,4 @@ function isCompliantClusterParameterGroup(node) {
|
|
|
56
56
|
}
|
|
57
57
|
return false;
|
|
58
58
|
}
|
|
59
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
59
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters have version upgrade enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -22,5 +22,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
22
22
|
else {
|
|
23
23
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
24
24
|
}
|
|
25
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
26
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
25
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUmVkc2hpZnRDbHVzdGVyVmVyc2lvblVwZ3JhZGUuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcnVsZXMvcmVkc2hpZnQvUmVkc2hpZnRDbHVzdGVyVmVyc2lvblVwZ3JhZGUudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQTs7O0VBR0U7QUFDRiwrQkFBNkI7QUFFN0IsMkRBQXNEO0FBQ3RELCtDQUE4RDtBQUU5RDs7O0dBR0c7QUFDSCxrQkFBZSxNQUFNLENBQUMsY0FBYyxDQUNsQyxDQUFDLElBQWlCLEVBQXFCLEVBQUU7SUFDdkMsSUFBSSxJQUFJLFlBQVkseUJBQVUsRUFBRSxDQUFDO1FBQy9CLE1BQU0sbUJBQW1CLEdBQUcsb0JBQVEsQ0FBQyxrQkFBa0IsQ0FDckQsSUFBSSxFQUNKLElBQUksQ0FBQyxtQkFBbUIsQ0FDekIsQ0FBQztRQUNGLElBQUksbUJBQW1CLEtBQUssS0FBSyxFQUFFLENBQUM7WUFDbEMsT0FBTyw2QkFBaUIsQ0FBQyxhQUFhLENBQUM7UUFDekMsQ0FBQztRQUNELE9BQU8sNkJBQWlCLENBQUMsU0FBUyxDQUFDO0lBQ3JDLENBQUM7U0FBTSxDQUFDO1FBQ04sT0FBTyw2QkFBaUIsQ0FBQyxjQUFjLENBQUM7SUFDMUMsQ0FBQztBQUNILENBQUMsRUFDRCxNQUFNLEVBQ04sRUFBRSxLQUFLLEVBQUUsSUFBQSxZQUFLLEVBQUMsVUFBVSxDQUFDLENBQUMsSUFBSSxFQUFFLENBQ2xDLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKlxuQ29weXJpZ2h0IEFtYXpvbi5jb20sIEluYy4gb3IgaXRzIGFmZmlsaWF0ZXMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuXG5TUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuKi9cbmltcG9ydCB7IHBhcnNlIH0gZnJvbSAncGF0aCc7XG5pbXBvcnQgeyBDZm5SZXNvdXJjZSB9IGZyb20gJ2F3cy1jZGstbGliJztcbmltcG9ydCB7IENmbkNsdXN0ZXIgfSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtcmVkc2hpZnQnO1xuaW1wb3J0IHsgTmFnUnVsZUNvbXBsaWFuY2UsIE5hZ1J1bGVzIH0gZnJvbSAnLi4vLi4vbmFnLXJ1bGVzJztcblxuLyoqXG4gKiBSZWRzaGlmdCBjbHVzdGVycyBoYXZlIHZlcnNpb24gdXBncmFkZSBlbmFibGVkXG4gKiBAcGFyYW0gbm9kZSB0aGUgQ2ZuUmVzb3VyY2UgdG8gY2hlY2tcbiAqL1xuZXhwb3J0IGRlZmF1bHQgT2JqZWN0LmRlZmluZVByb3BlcnR5KFxuICAobm9kZTogQ2ZuUmVzb3VyY2UpOiBOYWdSdWxlQ29tcGxpYW5jZSA9PiB7XG4gICAgaWYgKG5vZGUgaW5zdGFuY2VvZiBDZm5DbHVzdGVyKSB7XG4gICAgICBjb25zdCBhbGxvd1ZlcnNpb25VcGdyYWRlID0gTmFnUnVsZXMucmVzb2x2ZUlmUHJpbWl0aXZlKFxuICAgICAgICBub2RlLFxuICAgICAgICBub2RlLmFsbG93VmVyc2lvblVwZ3JhZGVcbiAgICAgICk7XG4gICAgICBpZiAoYWxsb3dWZXJzaW9uVXBncmFkZSA9PT0gZmFsc2UpIHtcbiAgICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PTl9DT01QTElBTlQ7XG4gICAgICB9XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuQ09NUExJQU5UO1xuICAgIH0gZWxzZSB7XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuTk9UX0FQUExJQ0FCTEU7XG4gICAgfVxuICB9LFxuICAnbmFtZScsXG4gIHsgdmFsdWU6IHBhcnNlKF9fZmlsZW5hbWUpLm5hbWUgfVxuKTtcbiJdfQ==
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters have enhanced VPC routing enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -22,5 +22,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
22
22
|
else {
|
|
23
23
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
24
24
|
}
|
|
25
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
26
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
25
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
26
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Redshift clusters require TLS/SSL encryption
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -35,7 +35,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
35
35
|
else {
|
|
36
36
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
37
37
|
}
|
|
38
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
38
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
39
39
|
/**
|
|
40
40
|
* Helper function to check whether the Parameter Group enforces SSL and is associated with the given Redshift cluster
|
|
41
41
|
* @param node the CfnClusterParameterGroup to check
|
|
@@ -58,4 +58,4 @@ function isMatchingParameterGroup(node, parameterGroupName) {
|
|
|
58
58
|
}
|
|
59
59
|
return false;
|
|
60
60
|
}
|
|
61
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
61
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.RedshiftRequireTlsSSL = exports.RedshiftEnhancedVPCRoutingEnabled = exports.RedshiftClusterVersionUpgrade = exports.RedshiftClusterUserActivityLogging = exports.RedshiftClusterPublicAccess = exports.RedshiftClusterNonDefaultUsername = exports.RedshiftClusterMaintenanceSettings = exports.RedshiftClusterNonDefaultPort = exports.RedshiftClusterInVPC = exports.RedshiftClusterEncryptionAtRest = exports.RedshiftClusterConfiguration = exports.RedshiftClusterAuditLogging = exports.RedshiftBackupEnabled = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -30,4 +31,4 @@ var RedshiftEnhancedVPCRoutingEnabled_1 = require("./RedshiftEnhancedVPCRoutingE
|
|
|
30
31
|
Object.defineProperty(exports, "RedshiftEnhancedVPCRoutingEnabled", { enumerable: true, get: function () { return RedshiftEnhancedVPCRoutingEnabled_1.default; } });
|
|
31
32
|
var RedshiftRequireTlsSSL_1 = require("./RedshiftRequireTlsSSL");
|
|
32
33
|
Object.defineProperty(exports, "RedshiftRequireTlsSSL", { enumerable: true, get: function () { return RedshiftRequireTlsSSL_1.default; } });
|
|
33
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
34
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets have object lock enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -26,5 +26,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
26
26
|
else {
|
|
27
27
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
28
28
|
}
|
|
29
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
30
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
29
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
30
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets prohibit public access through bucket level settings
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -33,5 +33,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
33
33
|
else {
|
|
34
34
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
35
35
|
}
|
|
36
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
37
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
36
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
37
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets have server access logs enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -39,7 +39,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
39
39
|
else {
|
|
40
40
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
41
41
|
}
|
|
42
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
42
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
43
43
|
/**
|
|
44
44
|
* Helper function to check whether a given S3 Bucket uses the target S3 bucket for access logs
|
|
45
45
|
* @param node the CfnBucket to check
|
|
@@ -48,11 +48,11 @@ exports.default = Object.defineProperty((node) => {
|
|
|
48
48
|
* returns whether the CfnBucket uses the target S3 bucket for access logs
|
|
49
49
|
*/
|
|
50
50
|
function isMatchingBucket(node, bucketLogicalId, bucketName) {
|
|
51
|
-
const destinationBucketName = flatten_cfn_reference_1.flattenCfnReference(aws_cdk_lib_1.Stack.of(node).resolve(aws_cdk_lib_1.Stack.of(node).resolve(node.loggingConfiguration)?.destinationBucketName));
|
|
51
|
+
const destinationBucketName = (0, flatten_cfn_reference_1.flattenCfnReference)(aws_cdk_lib_1.Stack.of(node).resolve(aws_cdk_lib_1.Stack.of(node).resolve(node.loggingConfiguration)?.destinationBucketName));
|
|
52
52
|
if (new RegExp(`${bucketLogicalId}(?![\\w])`).test(destinationBucketName) ||
|
|
53
53
|
bucketName === destinationBucketName) {
|
|
54
54
|
return true;
|
|
55
55
|
}
|
|
56
56
|
return false;
|
|
57
57
|
}
|
|
58
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
58
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUzNCdWNrZXRMb2dnaW5nRW5hYmxlZC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9ydWxlcy9zMy9TM0J1Y2tldExvZ2dpbmdFbmFibGVkLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUE7OztFQUdFO0FBQ0YsK0JBQTZCO0FBQzdCLDZDQUFpRDtBQUNqRCwrQ0FBK0M7QUFDL0MsK0NBQThEO0FBQzlELDZFQUF3RTtBQUV4RTs7O0dBR0c7QUFDSCxrQkFBZSxNQUFNLENBQUMsY0FBYyxDQUNsQyxDQUFDLElBQWlCLEVBQXFCLEVBQUU7SUFDdkMsSUFBSSxJQUFJLFlBQVksa0JBQVMsRUFBRSxDQUFDO1FBQzlCLE1BQU0sT0FBTyxHQUFHLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsb0JBQW9CLENBQUMsQ0FBQztRQUNsRSxJQUNFLE9BQU8sSUFBSSxTQUFTO1lBQ3BCLENBQUMsT0FBTyxDQUFDLHFCQUFxQixJQUFJLFNBQVM7Z0JBQ3pDLE9BQU8sQ0FBQyxhQUFhLElBQUksU0FBUyxDQUFDLEVBQ3JDLENBQUM7WUFDRCxJQUFJLEtBQUssR0FBRyxLQUFLLENBQUM7WUFDbEIsTUFBTSxlQUFlLEdBQUcsb0JBQVEsQ0FBQyw2QkFBNkIsQ0FDNUQsSUFBSSxFQUNKLElBQUksQ0FBQyxHQUFHLENBQ1QsQ0FBQztZQUNGLE1BQU0sVUFBVSxHQUFHLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLENBQUM7WUFDM0QsS0FBSyxNQUFNLEtBQUssSUFBSSxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLEVBQUUsQ0FBQztnQkFDbEQsSUFBSSxLQUFLLFlBQVksa0JBQVMsRUFBRSxDQUFDO29CQUMvQixJQUFJLGdCQUFnQixDQUFDLEtBQUssRUFBRSxlQUFlLEVBQUUsVUFBVSxDQUFDLEVBQUUsQ0FBQzt3QkFDekQsS0FBSyxHQUFHLElBQUksQ0FBQzt3QkFDYixNQUFNO29CQUNSLENBQUM7Z0JBQ0gsQ0FBQztZQUNILENBQUM7WUFDRCxJQUFJLENBQUMsS0FBSyxFQUFFLENBQUM7Z0JBQ1gsT0FBTyw2QkFBaUIsQ0FBQyxhQUFhLENBQUM7WUFDekMsQ0FBQztRQUNILENBQUM7UUFDRCxPQUFPLDZCQUFpQixDQUFDLFNBQVMsQ0FBQztJQUNyQyxDQUFDO1NBQU0sQ0FBQztRQUNOLE9BQU8sNkJBQWlCLENBQUMsY0FBYyxDQUFDO0lBQzFDLENBQUM7QUFDSCxDQUFDLEVBQ0QsTUFBTSxFQUNOLEVBQUUsS0FBSyxFQUFFLElBQUEsWUFBSyxFQUFDLFVBQVUsQ0FBQyxDQUFDLElBQUksRUFBRSxDQUNsQyxDQUFDO0FBRUY7Ozs7OztHQU1HO0FBQ0gsU0FBUyxnQkFBZ0IsQ0FDdkIsSUFBZSxFQUNmLGVBQXVCLEVBQ3ZCLFVBQThCO0lBRTlCLE1BQU0scUJBQXFCLEdBQUcsSUFBQSwyQ0FBbUIsRUFDL0MsbUJBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUMsT0FBTyxDQUNwQixtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLG9CQUFvQixDQUFDLEVBQUUscUJBQXFCLENBQ3pFLENBQ0YsQ0FBQztJQUNGLElBQ0UsSUFBSSxNQUFNLENBQUMsR0FBRyxlQUFlLFdBQVcsQ0FBQyxDQUFDLElBQUksQ0FBQyxxQkFBcUIsQ0FBQztRQUNyRSxVQUFVLEtBQUsscUJBQXFCLEVBQ3BDLENBQUM7UUFDRCxPQUFPLElBQUksQ0FBQztJQUNkLENBQUM7SUFDRCxPQUFPLEtBQUssQ0FBQztBQUNmLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKlxuQ29weXJpZ2h0IEFtYXpvbi5jb20sIEluYy4gb3IgaXRzIGFmZmlsaWF0ZXMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuXG5TUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuKi9cbmltcG9ydCB7IHBhcnNlIH0gZnJvbSAncGF0aCc7XG5pbXBvcnQgeyBDZm5SZXNvdXJjZSwgU3RhY2sgfSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBDZm5CdWNrZXQgfSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtczMnO1xuaW1wb3J0IHsgTmFnUnVsZUNvbXBsaWFuY2UsIE5hZ1J1bGVzIH0gZnJvbSAnLi4vLi4vbmFnLXJ1bGVzJztcbmltcG9ydCB7IGZsYXR0ZW5DZm5SZWZlcmVuY2UgfSBmcm9tICcuLi8uLi91dGlscy9mbGF0dGVuLWNmbi1yZWZlcmVuY2UnO1xuXG4vKipcbiAqIFMzIEJ1Y2tldHMgaGF2ZSBzZXJ2ZXIgYWNjZXNzIGxvZ3MgZW5hYmxlZFxuICogQHBhcmFtIG5vZGUgdGhlIENmblJlc291cmNlIHRvIGNoZWNrXG4gKi9cbmV4cG9ydCBkZWZhdWx0IE9iamVjdC5kZWZpbmVQcm9wZXJ0eShcbiAgKG5vZGU6IENmblJlc291cmNlKTogTmFnUnVsZUNvbXBsaWFuY2UgPT4ge1xuICAgIGlmIChub2RlIGluc3RhbmNlb2YgQ2ZuQnVja2V0KSB7XG4gICAgICBjb25zdCBsb2dnaW5nID0gU3RhY2sub2Yobm9kZSkucmVzb2x2ZShub2RlLmxvZ2dpbmdDb25maWd1cmF0aW9uKTtcbiAgICAgIGlmIChcbiAgICAgICAgbG9nZ2luZyA9PSB1bmRlZmluZWQgfHxcbiAgICAgICAgKGxvZ2dpbmcuZGVzdGluYXRpb25CdWNrZXROYW1lID09IHVuZGVmaW5lZCAmJlxuICAgICAgICAgIGxvZ2dpbmcubG9nRmlsZVByZWZpeCA9PSB1bmRlZmluZWQpXG4gICAgICApIHtcbiAgICAgICAgbGV0IGZvdW5kID0gZmFsc2U7XG4gICAgICAgIGNvbnN0IGJ1Y2tldExvZ2ljYWxJZCA9IE5hZ1J1bGVzLnJlc29sdmVSZXNvdXJjZUZyb21JbnN0cmluc2ljKFxuICAgICAgICAgIG5vZGUsXG4gICAgICAgICAgbm9kZS5yZWZcbiAgICAgICAgKTtcbiAgICAgICAgY29uc3QgYnVja2V0TmFtZSA9IFN0YWNrLm9mKG5vZGUpLnJlc29sdmUobm9kZS5idWNrZXROYW1lKTtcbiAgICAgICAgZm9yIChjb25zdCBjaGlsZCBvZiBTdGFjay5vZihub2RlKS5ub2RlLmZpbmRBbGwoKSkge1xuICAgICAgICAgIGlmIChjaGlsZCBpbnN0YW5jZW9mIENmbkJ1Y2tldCkge1xuICAgICAgICAgICAgaWYgKGlzTWF0Y2hpbmdCdWNrZXQoY2hpbGQsIGJ1Y2tldExvZ2ljYWxJZCwgYnVja2V0TmFtZSkpIHtcbiAgICAgICAgICAgICAgZm91bmQgPSB0cnVlO1xuICAgICAgICAgICAgICBicmVhaztcbiAgICAgICAgICAgIH1cbiAgICAgICAgICB9XG4gICAgICAgIH1cbiAgICAgICAgaWYgKCFmb3VuZCkge1xuICAgICAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT05fQ09NUExJQU5UO1xuICAgICAgICB9XG4gICAgICB9XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuQ09NUExJQU5UO1xuICAgIH0gZWxzZSB7XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuTk9UX0FQUExJQ0FCTEU7XG4gICAgfVxuICB9LFxuICAnbmFtZScsXG4gIHsgdmFsdWU6IHBhcnNlKF9fZmlsZW5hbWUpLm5hbWUgfVxuKTtcblxuLyoqXG4gKiBIZWxwZXIgZnVuY3Rpb24gdG8gY2hlY2sgd2hldGhlciBhIGdpdmVuIFMzIEJ1Y2tldCB1c2VzIHRoZSB0YXJnZXQgUzMgYnVja2V0IGZvciBhY2Nlc3MgbG9nc1xuICogQHBhcmFtIG5vZGUgdGhlIENmbkJ1Y2tldCB0byBjaGVja1xuICogQHBhcmFtIGJ1Y2tldExvZ2ljYWxJZCB0aGUgQ2ZuIExvZ2ljYWwgSUQgb2YgdGhlIHRhcmdldCBidWNrZXRcbiAqIEBwYXJhbSBidWNrZXROYW1lIHRoZSBuYW1lIG9mIHRoZSB0YXJnZXQgYnVja2V0XG4gKiByZXR1cm5zIHdoZXRoZXIgdGhlIENmbkJ1Y2tldCB1c2VzIHRoZSB0YXJnZXQgUzMgYnVja2V0IGZvciBhY2Nlc3MgbG9nc1xuICovXG5mdW5jdGlvbiBpc01hdGNoaW5nQnVja2V0KFxuICBub2RlOiBDZm5CdWNrZXQsXG4gIGJ1Y2tldExvZ2ljYWxJZDogc3RyaW5nLFxuICBidWNrZXROYW1lOiBzdHJpbmcgfCB1bmRlZmluZWRcbik6IGJvb2xlYW4ge1xuICBjb25zdCBkZXN0aW5hdGlvbkJ1Y2tldE5hbWUgPSBmbGF0dGVuQ2ZuUmVmZXJlbmNlKFxuICAgIFN0YWNrLm9mKG5vZGUpLnJlc29sdmUoXG4gICAgICBTdGFjay5vZihub2RlKS5yZXNvbHZlKG5vZGUubG9nZ2luZ0NvbmZpZ3VyYXRpb24pPy5kZXN0aW5hdGlvbkJ1Y2tldE5hbWVcbiAgICApXG4gICk7XG4gIGlmIChcbiAgICBuZXcgUmVnRXhwKGAke2J1Y2tldExvZ2ljYWxJZH0oPyFbXFxcXHddKWApLnRlc3QoZGVzdGluYXRpb25CdWNrZXROYW1lKSB8fFxuICAgIGJ1Y2tldE5hbWUgPT09IGRlc3RpbmF0aW9uQnVja2V0TmFtZVxuICApIHtcbiAgICByZXR1cm4gdHJ1ZTtcbiAgfVxuICByZXR1cm4gZmFsc2U7XG59XG4iXX0=
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets prohibit public read access through their Block Public Access configurations and bucket ACLs
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -31,5 +31,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
31
31
|
else {
|
|
32
32
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
33
33
|
}
|
|
34
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
35
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
34
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
35
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUzNCdWNrZXRQdWJsaWNSZWFkUHJvaGliaXRlZC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9ydWxlcy9zMy9TM0J1Y2tldFB1YmxpY1JlYWRQcm9oaWJpdGVkLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUE7OztFQUdFO0FBQ0YsK0JBQTZCO0FBQzdCLDZDQUFpRDtBQUNqRCwrQ0FBK0M7QUFDL0MsK0NBQThEO0FBRTlEOzs7R0FHRztBQUNILGtCQUFlLE1BQU0sQ0FBQyxjQUFjLENBQ2xDLENBQUMsSUFBaUIsRUFBcUIsRUFBRTtJQUN2QyxJQUFJLElBQUksWUFBWSxrQkFBUyxFQUFFLENBQUM7UUFDOUIsTUFBTSw4QkFBOEIsR0FBRyxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLENBQzNELElBQUksQ0FBQyw4QkFBOEIsQ0FDcEMsQ0FBQztRQUNGLElBQ0UsOEJBQThCLEtBQUssU0FBUztZQUM1QyxvQkFBUSxDQUFDLGtCQUFrQixDQUN6QixJQUFJLEVBQ0osOEJBQThCLENBQUMsaUJBQWlCLENBQ2pELEtBQUssSUFBSSxFQUNWLENBQUM7WUFDRCxPQUFPLDZCQUFpQixDQUFDLGFBQWEsQ0FBQztRQUN6QyxDQUFDO1FBQ0QsTUFBTSxhQUFhLEdBQUcsb0JBQVEsQ0FBQyxrQkFBa0IsQ0FDL0MsSUFBSSxFQUNKLElBQUksQ0FBQyxhQUFhLENBQ25CLENBQUM7UUFDRixNQUFNLGVBQWUsR0FBRyxvQkFBUSxDQUFDLGtCQUFrQixDQUNqRCxJQUFJLEVBQ0osOEJBQThCLENBQUMsZUFBZSxDQUMvQyxDQUFDO1FBQ0YsSUFDRSxDQUFDLGFBQWEsS0FBSyxZQUFZO1lBQzdCLGFBQWEsS0FBSyxpQkFBaUIsQ0FBQztZQUN0QyxlQUFlLEtBQUssSUFBSSxFQUN4QixDQUFDO1lBQ0QsT0FBTyw2QkFBaUIsQ0FBQyxhQUFhLENBQUM7UUFDekMsQ0FBQztRQUNELE9BQU8sNkJBQWlCLENBQUMsU0FBUyxDQUFDO0lBQ3JDLENBQUM7U0FBTSxDQUFDO1FBQ04sT0FBTyw2QkFBaUIsQ0FBQyxjQUFjLENBQUM7SUFDMUMsQ0FBQztBQUNILENBQUMsRUFDRCxNQUFNLEVBQ04sRUFBRSxLQUFLLEVBQUUsSUFBQSxZQUFLLEVBQUMsVUFBVSxDQUFDLENBQUMsSUFBSSxFQUFFLENBQ2xDLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKlxuQ29weXJpZ2h0IEFtYXpvbi5jb20sIEluYy4gb3IgaXRzIGFmZmlsaWF0ZXMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuXG5TUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuKi9cbmltcG9ydCB7IHBhcnNlIH0gZnJvbSAncGF0aCc7XG5pbXBvcnQgeyBDZm5SZXNvdXJjZSwgU3RhY2sgfSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBDZm5CdWNrZXQgfSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtczMnO1xuaW1wb3J0IHsgTmFnUnVsZUNvbXBsaWFuY2UsIE5hZ1J1bGVzIH0gZnJvbSAnLi4vLi4vbmFnLXJ1bGVzJztcblxuLyoqXG4gKiBTMyBCdWNrZXRzIHByb2hpYml0IHB1YmxpYyByZWFkIGFjY2VzcyB0aHJvdWdoIHRoZWlyIEJsb2NrIFB1YmxpYyBBY2Nlc3MgY29uZmlndXJhdGlvbnMgYW5kIGJ1Y2tldCBBQ0xzXG4gKiBAcGFyYW0gbm9kZSB0aGUgQ2ZuUmVzb3VyY2UgdG8gY2hlY2tcbiAqL1xuZXhwb3J0IGRlZmF1bHQgT2JqZWN0LmRlZmluZVByb3BlcnR5KFxuICAobm9kZTogQ2ZuUmVzb3VyY2UpOiBOYWdSdWxlQ29tcGxpYW5jZSA9PiB7XG4gICAgaWYgKG5vZGUgaW5zdGFuY2VvZiBDZm5CdWNrZXQpIHtcbiAgICAgIGNvbnN0IHB1YmxpY0FjY2Vzc0Jsb2NrQ29uZmlndXJhdGlvbiA9IFN0YWNrLm9mKG5vZGUpLnJlc29sdmUoXG4gICAgICAgIG5vZGUucHVibGljQWNjZXNzQmxvY2tDb25maWd1cmF0aW9uXG4gICAgICApO1xuICAgICAgaWYgKFxuICAgICAgICBwdWJsaWNBY2Nlc3NCbG9ja0NvbmZpZ3VyYXRpb24gPT09IHVuZGVmaW5lZCB8fFxuICAgICAgICBOYWdSdWxlcy5yZXNvbHZlSWZQcmltaXRpdmUoXG4gICAgICAgICAgbm9kZSxcbiAgICAgICAgICBwdWJsaWNBY2Nlc3NCbG9ja0NvbmZpZ3VyYXRpb24uYmxvY2tQdWJsaWNQb2xpY3lcbiAgICAgICAgKSAhPT0gdHJ1ZVxuICAgICAgKSB7XG4gICAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT05fQ09NUExJQU5UO1xuICAgICAgfVxuICAgICAgY29uc3QgYWNjZXNzQ29udHJvbCA9IE5hZ1J1bGVzLnJlc29sdmVJZlByaW1pdGl2ZShcbiAgICAgICAgbm9kZSxcbiAgICAgICAgbm9kZS5hY2Nlc3NDb250cm9sXG4gICAgICApO1xuICAgICAgY29uc3QgYmxvY2tQdWJsaWNBY2xzID0gTmFnUnVsZXMucmVzb2x2ZUlmUHJpbWl0aXZlKFxuICAgICAgICBub2RlLFxuICAgICAgICBwdWJsaWNBY2Nlc3NCbG9ja0NvbmZpZ3VyYXRpb24uYmxvY2tQdWJsaWNBY2xzXG4gICAgICApO1xuICAgICAgaWYgKFxuICAgICAgICAoYWNjZXNzQ29udHJvbCA9PT0gJ1B1YmxpY1JlYWQnIHx8XG4gICAgICAgICAgYWNjZXNzQ29udHJvbCA9PT0gJ1B1YmxpY1JlYWRXcml0ZScpICYmXG4gICAgICAgIGJsb2NrUHVibGljQWNscyAhPT0gdHJ1ZVxuICAgICAgKSB7XG4gICAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT05fQ09NUExJQU5UO1xuICAgICAgfVxuICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLkNPTVBMSUFOVDtcbiAgICB9IGVsc2Uge1xuICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PVF9BUFBMSUNBQkxFO1xuICAgIH1cbiAgfSxcbiAgJ25hbWUnLFxuICB7IHZhbHVlOiBwYXJzZShfX2ZpbGVuYW1lKS5uYW1lIH1cbik7XG4iXX0=
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets prohibit public write access through their Block Public Access configurations and bucket ACLs
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -29,5 +29,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
29
29
|
else {
|
|
30
30
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
31
31
|
}
|
|
32
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
33
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
32
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
33
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets have replication enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -35,5 +35,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
35
35
|
else {
|
|
36
36
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
37
37
|
}
|
|
38
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
39
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
38
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
39
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets and bucket policies require requests to use SSL
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|