@mavogel/awscdk-rootmail 0.0.277 → 0.0.279
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +8 -8
- package/lib/rootmail.js +1 -1
- package/lib/ses-receive.js +1 -1
- package/node_modules/@aws-sdk/client-cloudwatch-logs/package.json +36 -36
- package/node_modules/@aws-sdk/client-route-53/package.json +36 -36
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteObjectCommand.d.ts +10 -10
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/PutObjectCommand.d.ts +47 -47
- package/node_modules/@aws-sdk/client-s3/package.json +50 -50
- package/node_modules/@aws-sdk/client-ses/package.json +34 -34
- package/node_modules/@aws-sdk/client-ssm/package.json +34 -34
- package/node_modules/@aws-sdk/client-sso/package.json +32 -32
- package/node_modules/@aws-sdk/core/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-env/package.json +5 -5
- package/node_modules/@aws-sdk/credential-provider-http/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-ini/package.json +13 -13
- package/node_modules/@aws-sdk/credential-provider-node/package.json +12 -12
- package/node_modules/@aws-sdk/credential-provider-process/package.json +6 -6
- package/node_modules/@aws-sdk/credential-provider-sso/package.json +8 -8
- package/node_modules/@aws-sdk/credential-provider-web-identity/package.json +6 -6
- package/node_modules/@aws-sdk/middleware-bucket-endpoint/package.json +5 -5
- package/node_modules/@aws-sdk/middleware-expect-continue/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-flexible-checksums/package.json +9 -9
- package/node_modules/@aws-sdk/middleware-host-header/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-location-constraint/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-logger/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-recursion-detection/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-sdk-route53/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-sdk-s3/package.json +11 -11
- package/node_modules/@aws-sdk/middleware-ssec/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-user-agent/package.json +7 -7
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/package.json +32 -32
- package/node_modules/@aws-sdk/region-config-resolver/package.json +5 -5
- package/node_modules/@aws-sdk/signature-v4-multi-region/package.json +6 -6
- package/node_modules/@aws-sdk/token-providers/package.json +6 -6
- package/node_modules/@aws-sdk/types/dist-types/identity/AwsCredentialIdentity.d.ts +17 -4
- package/node_modules/@aws-sdk/types/dist-types/ts3.4/identity/AwsCredentialIdentity.d.ts +7 -2
- package/node_modules/@aws-sdk/types/package.json +2 -2
- package/node_modules/@aws-sdk/util-endpoints/package.json +4 -4
- package/node_modules/@aws-sdk/util-user-agent-browser/package.json +3 -3
- package/node_modules/@aws-sdk/util-user-agent-node/package.json +5 -5
- package/node_modules/@aws-sdk/xml-builder/package.json +2 -2
- package/node_modules/cdk-nag/.jsii +19 -16
- package/node_modules/cdk-nag/API.md +1 -1
- package/node_modules/cdk-nag/RULES.md +4 -0
- package/node_modules/cdk-nag/lib/ignore-suppression-conditions.js +6 -6
- package/node_modules/cdk-nag/lib/index.js +8 -3
- package/node_modules/cdk-nag/lib/models/nag-suppression.d.ts +1 -1
- package/node_modules/cdk-nag/lib/nag-logger.js +10 -10
- package/node_modules/cdk-nag/lib/nag-pack.js +2 -2
- package/node_modules/cdk-nag/lib/nag-rules.d.ts +4 -4
- package/node_modules/cdk-nag/lib/nag-rules.js +5 -5
- package/node_modules/cdk-nag/lib/nag-suppressions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/aws-solutions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/hipaa-security.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/hipaa-security.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.js +18 -2
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.js +18 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/appsync/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloud9/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eventbridge/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.js +3 -3
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.js +7 -7
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lex/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.js +2 -2
- package/node_modules/cdk-nag/lib/rules/quicksight/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.js +3 -3
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.d.ts +8 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.js +27 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sns/index.d.ts +1 -0
- package/node_modules/cdk-nag/lib/rules/sns/index.js +4 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.js +4 -4
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/timestream/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/waf/index.js +2 -1
- package/node_modules/cdk-nag/lib/utils/flatten-cfn-reference.js +3 -2
- package/node_modules/cdk-nag/lib/utils/nag-suppression-helper.js +1 -1
- package/node_modules/cdk-nag/package.json +7 -13
- package/package.json +8 -8
|
@@ -36,7 +36,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
36
36
|
else {
|
|
37
37
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
38
38
|
}
|
|
39
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
39
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
40
40
|
/**
|
|
41
41
|
* Helper function to check whether the topic Policy requires SSL on the given topic.
|
|
42
42
|
* @param node The CfnTopicPolicy to check.
|
|
@@ -112,4 +112,4 @@ function checkMatchingPrincipal(principals) {
|
|
|
112
112
|
}
|
|
113
113
|
return false;
|
|
114
114
|
}
|
|
115
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
115
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiU05TVG9waWNTU0xQdWJsaXNoT25seS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9ydWxlcy9zbnMvU05TVG9waWNTU0xQdWJsaXNoT25seS50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBOzs7RUFHRTtBQUNGLCtCQUE2QjtBQUM3Qiw2Q0FBaUQ7QUFDakQsaURBQStEO0FBQy9ELCtDQUE4RDtBQUU5RDs7O0dBR0c7QUFDSCxrQkFBZSxNQUFNLENBQUMsY0FBYyxDQUNsQyxDQUFDLElBQWlCLEVBQXFCLEVBQUU7SUFDdkMsSUFBSSxJQUFJLFlBQVksa0JBQVEsRUFBRSxDQUFDO1FBQzdCLE1BQU0sUUFBUSxHQUFHLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsY0FBYyxDQUFDLENBQUM7UUFDN0QsSUFBSSxRQUFRLEtBQUssU0FBUyxFQUFFLENBQUM7WUFDM0IsTUFBTSxjQUFjLEdBQUcsb0JBQVEsQ0FBQyw2QkFBNkIsQ0FDM0QsSUFBSSxFQUNKLElBQUksQ0FBQyxHQUFHLENBQ1QsQ0FBQztZQUNGLE1BQU0sU0FBUyxHQUFHLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLENBQUM7WUFDekQsSUFBSSxLQUFLLEdBQUcsS0FBSyxDQUFDO1lBQ2xCLEtBQUssTUFBTSxLQUFLLElBQUksbUJBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUMsSUFBSSxDQUFDLE9BQU8sRUFBRSxFQUFFLENBQUM7Z0JBQ2xELElBQUksS0FBSyxZQUFZLHdCQUFjLEVBQUUsQ0FBQztvQkFDcEMsSUFBSSx5QkFBeUIsQ0FBQyxLQUFLLEVBQUUsY0FBYyxFQUFFLFNBQVMsQ0FBQyxFQUFFLENBQUM7d0JBQ2hFLEtBQUssR0FBRyxJQUFJLENBQUM7d0JBQ2IsTUFBTTtvQkFDUixDQUFDO2dCQUNILENBQUM7WUFDSCxDQUFDO1lBQ0QsSUFBSSxDQUFDLEtBQUssRUFBRSxDQUFDO2dCQUNYLE9BQU8sNkJBQWlCLENBQUMsYUFBYSxDQUFDO1lBQ3pDLENBQUM7UUFDSCxDQUFDO1FBQ0QsT0FBTyw2QkFBaUIsQ0FBQyxTQUFTLENBQUM7SUFDckMsQ0FBQztTQUFNLENBQUM7UUFDTixPQUFPLDZCQUFpQixDQUFDLGNBQWMsQ0FBQztJQUMxQyxDQUFDO0FBQ0gsQ0FBQyxFQUNELE1BQU0sRUFDTixFQUFFLEtBQUssRUFBRSxJQUFBLFlBQUssRUFBQyxVQUFVLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FDbEMsQ0FBQztBQUVGOzs7Ozs7R0FNRztBQUNILFNBQVMseUJBQXlCLENBQ2hDLElBQW9CLEVBQ3BCLGNBQXNCLEVBQ3RCLFNBQTZCO0lBRTdCLElBQUksS0FBSyxHQUFHLEtBQUssQ0FBQztJQUNsQixLQUFLLE1BQU0sS0FBSyxJQUFJLElBQUksQ0FBQyxNQUFNLEVBQUUsQ0FBQztRQUNoQyxNQUFNLGFBQWEsR0FBRyxvQkFBUSxDQUFDLDZCQUE2QixDQUFDLElBQUksRUFBRSxLQUFLLENBQUMsQ0FBQztRQUMxRSxJQUNFLGFBQWEsS0FBSyxjQUFjO1lBQ2hDLENBQUMsU0FBUyxLQUFLLFNBQVMsSUFBYSxhQUFjLENBQUMsUUFBUSxDQUFDLFNBQVMsQ0FBQyxDQUFDLEVBQ3hFLENBQUM7WUFDRCxLQUFLLEdBQUcsSUFBSSxDQUFDO1lBQ2IsTUFBTTtRQUNSLENBQUM7SUFDSCxDQUFDO0lBQ0QsSUFBSSxDQUFDLEtBQUssRUFBRSxDQUFDO1FBQ1gsT0FBTyxLQUFLLENBQUM7SUFDZixDQUFDO0lBQ0QsTUFBTSxzQkFBc0IsR0FBRyxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLGNBQWMsQ0FBQyxDQUFDO0lBQzNFLEtBQUssTUFBTSxTQUFTLElBQUksc0JBQXNCLENBQUMsU0FBUyxFQUFFLENBQUM7UUFDekQsTUFBTSxpQkFBaUIsR0FBRyxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDNUQsTUFBTSxlQUFlLEdBQ25CLGlCQUFpQixFQUFFLFNBQVMsRUFBRSxJQUFJLEVBQUUsQ0FBQyxxQkFBcUIsQ0FBQyxDQUFDO1FBQzlELElBQ0UsaUJBQWlCLENBQUMsTUFBTSxLQUFLLE1BQU07WUFDbkMsbUJBQW1CLENBQUMsaUJBQWlCLENBQUMsTUFBTSxDQUFDLEtBQUssSUFBSTtZQUN0RCxzQkFBc0IsQ0FBQyxpQkFBaUIsQ0FBQyxTQUFTLENBQUMsS0FBSyxJQUFJO1lBQzVELENBQUMsZUFBZSxLQUFLLE9BQU8sSUFBSSxlQUFlLEtBQUssS0FBSyxDQUFDLEVBQzFELENBQUM7WUFDRCxPQUFPLElBQUksQ0FBQztRQUNkLENBQUM7SUFDSCxDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUM7QUFDZixDQUFDO0FBRUQ7Ozs7O0dBS0c7QUFDSCxTQUFTLG1CQUFtQixDQUFDLE9BQVk7SUFDdkMsSUFBSSxLQUFLLENBQUMsT0FBTyxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7UUFDM0IsS0FBSyxNQUFNLE1BQU0sSUFBSSxPQUFPLEVBQUUsQ0FBQztZQUM3QixJQUFJLE1BQU0sQ0FBQyxXQUFXLEVBQUUsS0FBSyxhQUFhLEVBQUUsQ0FBQztnQkFDM0MsT0FBTyxJQUFJLENBQUM7WUFDZCxDQUFDO1FBQ0gsQ0FBQztJQUNILENBQUM7U0FBTSxJQUFJLE9BQU8sQ0FBQyxXQUFXLEVBQUUsS0FBSyxhQUFhLEVBQUUsQ0FBQztRQUNuRCxPQUFPLElBQUksQ0FBQztJQUNkLENBQUM7SUFDRCxPQUFPLEtBQUssQ0FBQztBQUNmLENBQUM7QUFFRDs7Ozs7R0FLRztBQUNILFNBQVMsc0JBQXNCLENBQUMsVUFBZTtJQUM3QyxJQUFJLFVBQVUsS0FBSyxHQUFHLEVBQUUsQ0FBQztRQUN2QixPQUFPLElBQUksQ0FBQztJQUNkLENBQUM7SUFDRCxNQUFNLFlBQVksR0FBRyxVQUFVLENBQUMsR0FBRyxDQUFDO0lBQ3BDLElBQUksS0FBSyxDQUFDLE9BQU8sQ0FBQyxZQUFZLENBQUMsRUFBRSxDQUFDO1FBQ2hDLEtBQUssTUFBTSxPQUFPLElBQUksWUFBWSxFQUFFLENBQUM7WUFDbkMsSUFBSSxPQUFPLEtBQUssR0FBRyxFQUFFLENBQUM7Z0JBQ3BCLE9BQU8sSUFBSSxDQUFDO1lBQ2QsQ0FBQztRQUNILENBQUM7SUFDSCxDQUFDO1NBQU0sSUFBSSxZQUFZLEtBQUssR0FBRyxFQUFFLENBQUM7UUFDaEMsT0FBTyxJQUFJLENBQUM7SUFDZCxDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUM7QUFDZixDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiLypcbkNvcHlyaWdodCBBbWF6b24uY29tLCBJbmMuIG9yIGl0cyBhZmZpbGlhdGVzLiBBbGwgUmlnaHRzIFJlc2VydmVkLlxuU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjBcbiovXG5pbXBvcnQgeyBwYXJzZSB9IGZyb20gJ3BhdGgnO1xuaW1wb3J0IHsgQ2ZuUmVzb3VyY2UsIFN0YWNrIH0gZnJvbSAnYXdzLWNkay1saWInO1xuaW1wb3J0IHsgQ2ZuVG9waWMsIENmblRvcGljUG9saWN5IH0gZnJvbSAnYXdzLWNkay1saWIvYXdzLXNucyc7XG5pbXBvcnQgeyBOYWdSdWxlQ29tcGxpYW5jZSwgTmFnUnVsZXMgfSBmcm9tICcuLi8uLi9uYWctcnVsZXMnO1xuXG4vKipcbiAqIFNOUyB0b3BpY3MgcmVxdWlyZSBTU0wgcmVxdWVzdHMgZm9yIHB1Ymxpc2hpbmdcbiAqIEBwYXJhbSBub2RlIHRoZSBDZm5SZXNvdXJjZSB0byBjaGVja1xuICovXG5leHBvcnQgZGVmYXVsdCBPYmplY3QuZGVmaW5lUHJvcGVydHkoXG4gIChub2RlOiBDZm5SZXNvdXJjZSk6IE5hZ1J1bGVDb21wbGlhbmNlID0+IHtcbiAgICBpZiAobm9kZSBpbnN0YW5jZW9mIENmblRvcGljKSB7XG4gICAgICBjb25zdCB0b3BpY0tleSA9IFN0YWNrLm9mKG5vZGUpLnJlc29sdmUobm9kZS5rbXNNYXN0ZXJLZXlJZCk7XG4gICAgICBpZiAodG9waWNLZXkgPT09IHVuZGVmaW5lZCkge1xuICAgICAgICBjb25zdCB0b3BpY0xvZ2ljYWxJZCA9IE5hZ1J1bGVzLnJlc29sdmVSZXNvdXJjZUZyb21JbnN0cmluc2ljKFxuICAgICAgICAgIG5vZGUsXG4gICAgICAgICAgbm9kZS5yZWZcbiAgICAgICAgKTtcbiAgICAgICAgY29uc3QgdG9waWNOYW1lID0gU3RhY2sub2Yobm9kZSkucmVzb2x2ZShub2RlLnRvcGljTmFtZSk7XG4gICAgICAgIGxldCBmb3VuZCA9IGZhbHNlO1xuICAgICAgICBmb3IgKGNvbnN0IGNoaWxkIG9mIFN0YWNrLm9mKG5vZGUpLm5vZGUuZmluZEFsbCgpKSB7XG4gICAgICAgICAgaWYgKGNoaWxkIGluc3RhbmNlb2YgQ2ZuVG9waWNQb2xpY3kpIHtcbiAgICAgICAgICAgIGlmIChpc01hdGNoaW5nQ29tcGxpYW50UG9saWN5KGNoaWxkLCB0b3BpY0xvZ2ljYWxJZCwgdG9waWNOYW1lKSkge1xuICAgICAgICAgICAgICBmb3VuZCA9IHRydWU7XG4gICAgICAgICAgICAgIGJyZWFrO1xuICAgICAgICAgICAgfVxuICAgICAgICAgIH1cbiAgICAgICAgfVxuICAgICAgICBpZiAoIWZvdW5kKSB7XG4gICAgICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PTl9DT01QTElBTlQ7XG4gICAgICAgIH1cbiAgICAgIH1cbiAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5DT01QTElBTlQ7XG4gICAgfSBlbHNlIHtcbiAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT1RfQVBQTElDQUJMRTtcbiAgICB9XG4gIH0sXG4gICduYW1lJyxcbiAgeyB2YWx1ZTogcGFyc2UoX19maWxlbmFtZSkubmFtZSB9XG4pO1xuXG4vKipcbiAqIEhlbHBlciBmdW5jdGlvbiB0byBjaGVjayB3aGV0aGVyIHRoZSB0b3BpYyBQb2xpY3kgcmVxdWlyZXMgU1NMIG9uIHRoZSBnaXZlbiB0b3BpYy5cbiAqIEBwYXJhbSBub2RlIFRoZSBDZm5Ub3BpY1BvbGljeSB0byBjaGVjay5cbiAqIEBwYXJhbSB0b3BpY0xvZ2ljYWxJZCBUaGUgQ2ZuIExvZ2ljYWwgSUQgb2YgdGhlIHRvcGljLlxuICogQHBhcmFtIHRvcGljTmFtZSBUaGUgbmFtZSBvZiB0aGUgdG9waWMuXG4gKiBAcmV0dXJucyBXaGV0aGVyIHRoZSBDZm5Ub3BpY1BvbGljeSByZXF1aXJlcyBTU0wgb24gdGhlIGdpdmVuIHRvcGljLlxuICovXG5mdW5jdGlvbiBpc01hdGNoaW5nQ29tcGxpYW50UG9saWN5KFxuICBub2RlOiBDZm5Ub3BpY1BvbGljeSxcbiAgdG9waWNMb2dpY2FsSWQ6IHN0cmluZyxcbiAgdG9waWNOYW1lOiBzdHJpbmcgfCB1bmRlZmluZWRcbik6IGJvb2xlYW4ge1xuICBsZXQgZm91bmQgPSBmYWxzZTtcbiAgZm9yIChjb25zdCB0b3BpYyBvZiBub2RlLnRvcGljcykge1xuICAgIGNvbnN0IHJlc29sdmVkVG9waWMgPSBOYWdSdWxlcy5yZXNvbHZlUmVzb3VyY2VGcm9tSW5zdHJpbnNpYyhub2RlLCB0b3BpYyk7XG4gICAgaWYgKFxuICAgICAgcmVzb2x2ZWRUb3BpYyA9PT0gdG9waWNMb2dpY2FsSWQgfHxcbiAgICAgICh0b3BpY05hbWUgIT09IHVuZGVmaW5lZCAmJiAoPHN0cmluZz5yZXNvbHZlZFRvcGljKS5lbmRzV2l0aCh0b3BpY05hbWUpKVxuICAgICkge1xuICAgICAgZm91bmQgPSB0cnVlO1xuICAgICAgYnJlYWs7XG4gICAgfVxuICB9XG4gIGlmICghZm91bmQpIHtcbiAgICByZXR1cm4gZmFsc2U7XG4gIH1cbiAgY29uc3QgcmVzb2x2ZWRQb2xpY3lEb2N1bWVudCA9IFN0YWNrLm9mKG5vZGUpLnJlc29sdmUobm9kZS5wb2xpY3lEb2N1bWVudCk7XG4gIGZvciAoY29uc3Qgc3RhdGVtZW50IG9mIHJlc29sdmVkUG9saWN5RG9jdW1lbnQuU3RhdGVtZW50KSB7XG4gICAgY29uc3QgcmVzb2x2ZWRTdGF0ZW1lbnQgPSBTdGFjay5vZihub2RlKS5yZXNvbHZlKHN0YXRlbWVudCk7XG4gICAgY29uc3Qgc2VjdXJlVHJhbnNwb3J0ID1cbiAgICAgIHJlc29sdmVkU3RhdGVtZW50Py5Db25kaXRpb24/LkJvb2w/LlsnYXdzOlNlY3VyZVRyYW5zcG9ydCddO1xuICAgIGlmIChcbiAgICAgIHJlc29sdmVkU3RhdGVtZW50LkVmZmVjdCA9PT0gJ0RlbnknICYmXG4gICAgICBjaGVja01hdGNoaW5nQWN0aW9uKHJlc29sdmVkU3RhdGVtZW50LkFjdGlvbikgPT09IHRydWUgJiZcbiAgICAgIGNoZWNrTWF0Y2hpbmdQcmluY2lwYWwocmVzb2x2ZWRTdGF0ZW1lbnQuUHJpbmNpcGFsKSA9PT0gdHJ1ZSAmJlxuICAgICAgKHNlY3VyZVRyYW5zcG9ydCA9PT0gJ2ZhbHNlJyB8fCBzZWN1cmVUcmFuc3BvcnQgPT09IGZhbHNlKVxuICAgICkge1xuICAgICAgcmV0dXJuIHRydWU7XG4gICAgfVxuICB9XG4gIHJldHVybiBmYWxzZTtcbn1cblxuLyoqXG4gKiBIZWxwZXIgZnVuY3Rpb24gdG8gY2hlY2sgd2hldGhlciB0aGUgdG9waWMgUG9saWN5IGFwcGxpZXMgdG8gdG9waWMgYWN0aW9uc1xuICogQHBhcmFtIG5vZGUgVGhlIENmblRvcGljUG9saWN5IHRvIGNoZWNrXG4gKiBAcGFyYW0gYWN0aW9ucyBUaGUgYWN0aW9uIGluIHRoZSB0b3BpYyBwb2xpY3lcbiAqIEByZXR1cm5zIFdoZXRoZXIgdGhlIENmblRvcGljUG9saWN5IGFwcGxpZXMgdG8gdG9waWMgYWN0aW9uc1xuICovXG5mdW5jdGlvbiBjaGVja01hdGNoaW5nQWN0aW9uKGFjdGlvbnM6IGFueSk6IGJvb2xlYW4ge1xuICBpZiAoQXJyYXkuaXNBcnJheShhY3Rpb25zKSkge1xuICAgIGZvciAoY29uc3QgYWN0aW9uIG9mIGFjdGlvbnMpIHtcbiAgICAgIGlmIChhY3Rpb24udG9Mb3dlckNhc2UoKSA9PT0gJ3NuczpwdWJsaXNoJykge1xuICAgICAgICByZXR1cm4gdHJ1ZTtcbiAgICAgIH1cbiAgICB9XG4gIH0gZWxzZSBpZiAoYWN0aW9ucy50b0xvd2VyQ2FzZSgpID09PSAnc25zOnB1Ymxpc2gnKSB7XG4gICAgcmV0dXJuIHRydWU7XG4gIH1cbiAgcmV0dXJuIGZhbHNlO1xufVxuXG4vKipcbiAqIEhlbHBlciBmdW5jdGlvbiB0byBjaGVjayB3aGV0aGVyIHRoZSB0b3BpYyBQb2xpY3kgYXBwbGllcyB0byBhbGwgcHJpbmNpcGFsc1xuICogQHBhcmFtIG5vZGUgVGhlIENmblRvcGljUG9saWN5IHRvIGNoZWNrXG4gKiBAcGFyYW0gcHJpbmNpcGFsIFRoZSBwcmluY2lwYWxzIGluIHRoZSB0b3BpYyBwb2xpY3lcbiAqIEByZXR1cm5zIFdoZXRoZXIgdGhlIENmblRvcGljUG9saWN5IGFwcGxpZXMgdG8gYWxsIHByaW5jaXBhbHNcbiAqL1xuZnVuY3Rpb24gY2hlY2tNYXRjaGluZ1ByaW5jaXBhbChwcmluY2lwYWxzOiBhbnkpOiBib29sZWFuIHtcbiAgaWYgKHByaW5jaXBhbHMgPT09ICcqJykge1xuICAgIHJldHVybiB0cnVlO1xuICB9XG4gIGNvbnN0IGF3c1ByaW5jaXBhbCA9IHByaW5jaXBhbHMuQVdTO1xuICBpZiAoQXJyYXkuaXNBcnJheShhd3NQcmluY2lwYWwpKSB7XG4gICAgZm9yIChjb25zdCBhY2NvdW50IG9mIGF3c1ByaW5jaXBhbCkge1xuICAgICAgaWYgKGFjY291bnQgPT09ICcqJykge1xuICAgICAgICByZXR1cm4gdHJ1ZTtcbiAgICAgIH1cbiAgICB9XG4gIH0gZWxzZSBpZiAoYXdzUHJpbmNpcGFsID09PSAnKicpIHtcbiAgICByZXR1cm4gdHJ1ZTtcbiAgfVxuICByZXR1cm4gZmFsc2U7XG59XG4iXX0=
|
|
@@ -1,9 +1,12 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SNSTopicSSLPublishOnly = exports.SNSEncryptedKMS = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
6
7
|
*/
|
|
8
|
+
var SNSEncryptedKMS_1 = require("./SNSEncryptedKMS");
|
|
9
|
+
Object.defineProperty(exports, "SNSEncryptedKMS", { enumerable: true, get: function () { return SNSEncryptedKMS_1.default; } });
|
|
7
10
|
var SNSTopicSSLPublishOnly_1 = require("./SNSTopicSSLPublishOnly");
|
|
8
11
|
Object.defineProperty(exports, "SNSTopicSSLPublishOnly", { enumerable: true, get: function () { return SNSTopicSSLPublishOnly_1.default; } });
|
|
9
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
12
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SQS queues have a dead-letter queue enabled if they are not used as a dead-letter queue
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -44,7 +44,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
44
44
|
else {
|
|
45
45
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
46
46
|
}
|
|
47
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
47
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
48
48
|
/**
|
|
49
49
|
* Helper function to check whether a given SQS Queue uses the target SQS queue as a DLQ
|
|
50
50
|
* @param node the CfnQueue to check
|
|
@@ -54,7 +54,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
54
54
|
*/
|
|
55
55
|
function isMatchingQueue(node, queueLogicalId, queueName) {
|
|
56
56
|
const redrivePolicy = aws_cdk_lib_1.Stack.of(node).resolve(node.redrivePolicy);
|
|
57
|
-
const deadLetterTargetArn = flatten_cfn_reference_1.flattenCfnReference(redrivePolicy?.deadLetterTargetArn ?? '');
|
|
57
|
+
const deadLetterTargetArn = (0, flatten_cfn_reference_1.flattenCfnReference)(redrivePolicy?.deadLetterTargetArn ?? '');
|
|
58
58
|
if (new RegExp(`${queueLogicalId}(?![\\w])`).test(deadLetterTargetArn) ||
|
|
59
59
|
(queueName !== undefined &&
|
|
60
60
|
new RegExp(`:${queueName}(?![\\w\\-_\\.])`).test(deadLetterTargetArn))) {
|
|
@@ -71,7 +71,7 @@ function isMatchingQueue(node, queueLogicalId, queueName) {
|
|
|
71
71
|
*/
|
|
72
72
|
function isMatchingLambdaFunction(node, queueLogicalId, queueName) {
|
|
73
73
|
const deadLetterConfig = aws_cdk_lib_1.Stack.of(node).resolve(node.deadLetterConfig);
|
|
74
|
-
const targetArn = flatten_cfn_reference_1.flattenCfnReference(aws_cdk_lib_1.Stack.of(node).resolve(deadLetterConfig?.targetArn) ?? '');
|
|
74
|
+
const targetArn = (0, flatten_cfn_reference_1.flattenCfnReference)(aws_cdk_lib_1.Stack.of(node).resolve(deadLetterConfig?.targetArn) ?? '');
|
|
75
75
|
if (new RegExp(`${queueLogicalId}(?![\\w])`).test(targetArn) ||
|
|
76
76
|
(queueName !== undefined &&
|
|
77
77
|
new RegExp(`:${queueName}(?![\\w\\-_\\.])`).test(targetArn))) {
|
|
@@ -79,4 +79,4 @@ function isMatchingLambdaFunction(node, queueLogicalId, queueName) {
|
|
|
79
79
|
}
|
|
80
80
|
return false;
|
|
81
81
|
}
|
|
82
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
82
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiU1FTUXVldWVETFEuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcnVsZXMvc3FzL1NRU1F1ZXVlRExRLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7O0FBQUE7OztFQUdFO0FBQ0YsK0JBQTZCO0FBQzdCLDZDQUFpRDtBQUNqRCx1REFBcUQ7QUFDckQsaURBQStDO0FBQy9DLCtDQUE4RDtBQUM5RCw2RUFBd0U7QUFFeEU7OztHQUdHO0FBQ0gsa0JBQWUsTUFBTSxDQUFDLGNBQWMsQ0FDbEMsQ0FBQyxJQUFpQixFQUFxQixFQUFFO0lBQ3ZDLElBQUksSUFBSSxZQUFZLGtCQUFRLEVBQUUsQ0FBQztRQUM3QixNQUFNLGFBQWEsR0FBRyxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQ2pFLElBQUksYUFBYSxLQUFLLFNBQVMsRUFBRSxDQUFDO1lBQ2hDLE1BQU0sY0FBYyxHQUFHLG9CQUFRLENBQUMsNkJBQTZCLENBQzNELElBQUksRUFDSixJQUFJLENBQUMsR0FBRyxDQUNULENBQUM7WUFDRixNQUFNLFNBQVMsR0FBRyxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxPQUFPLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFDO1lBQ3pELElBQUksS0FBSyxHQUFHLEtBQUssQ0FBQztZQUNsQixLQUFLLE1BQU0sS0FBSyxJQUFJLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLElBQUksQ0FBQyxPQUFPLEVBQUUsRUFBRSxDQUFDO2dCQUNsRCxJQUFJLEtBQUssWUFBWSxrQkFBUSxFQUFFLENBQUM7b0JBQzlCLElBQUksZUFBZSxDQUFDLEtBQUssRUFBRSxjQUFjLEVBQUUsU0FBUyxDQUFDLEVBQUUsQ0FBQzt3QkFDdEQsS0FBSyxHQUFHLElBQUksQ0FBQzt3QkFDYixNQUFNO29CQUNSLENBQUM7Z0JBQ0gsQ0FBQztxQkFBTSxJQUFJLEtBQUssWUFBWSx3QkFBVyxFQUFFLENBQUM7b0JBQ3hDLElBQUksd0JBQXdCLENBQUMsS0FBSyxFQUFFLGNBQWMsRUFBRSxTQUFTLENBQUMsRUFBRSxDQUFDO3dCQUMvRCxLQUFLLEdBQUcsSUFBSSxDQUFDO3dCQUNiLE1BQU07b0JBQ1IsQ0FBQztnQkFDSCxDQUFDO1lBQ0gsQ0FBQztZQUNELElBQUksQ0FBQyxLQUFLLEVBQUUsQ0FBQztnQkFDWCxPQUFPLDZCQUFpQixDQUFDLGFBQWEsQ0FBQztZQUN6QyxDQUFDO1FBQ0gsQ0FBQztRQUNELE9BQU8sNkJBQWlCLENBQUMsU0FBUyxDQUFDO0lBQ3JDLENBQUM7U0FBTSxDQUFDO1FBQ04sT0FBTyw2QkFBaUIsQ0FBQyxjQUFjLENBQUM7SUFDMUMsQ0FBQztBQUNILENBQUMsRUFDRCxNQUFNLEVBQ04sRUFBRSxLQUFLLEVBQUUsSUFBQSxZQUFLLEVBQUMsVUFBVSxDQUFDLENBQUMsSUFBSSxFQUFFLENBQ2xDLENBQUM7QUFFRjs7Ozs7O0dBTUc7QUFDSCxTQUFTLGVBQWUsQ0FDdEIsSUFBYyxFQUNkLGNBQXNCLEVBQ3RCLFNBQTZCO0lBRTdCLE1BQU0sYUFBYSxHQUFHLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsYUFBYSxDQUFDLENBQUM7SUFDakUsTUFBTSxtQkFBbUIsR0FBRyxJQUFBLDJDQUFtQixFQUM3QyxhQUFhLEVBQUUsbUJBQW1CLElBQUksRUFBRSxDQUN6QyxDQUFDO0lBQ0YsSUFDRSxJQUFJLE1BQU0sQ0FBQyxHQUFHLGNBQWMsV0FBVyxDQUFDLENBQUMsSUFBSSxDQUFDLG1CQUFtQixDQUFDO1FBQ2xFLENBQUMsU0FBUyxLQUFLLFNBQVM7WUFDdEIsSUFBSSxNQUFNLENBQUMsSUFBSSxTQUFTLGtCQUFrQixDQUFDLENBQUMsSUFBSSxDQUFDLG1CQUFtQixDQUFDLENBQUMsRUFDeEUsQ0FBQztRQUNELE9BQU8sSUFBSSxDQUFDO0lBQ2QsQ0FBQztJQUNELE9BQU8sS0FBSyxDQUFDO0FBQ2YsQ0FBQztBQUVEOzs7Ozs7R0FNRztBQUNILFNBQVMsd0JBQXdCLENBQy9CLElBQWlCLEVBQ2pCLGNBQXNCLEVBQ3RCLFNBQTZCO0lBRTdCLE1BQU0sZ0JBQWdCLEdBQUcsbUJBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxDQUFDO0lBQ3ZFLE1BQU0sU0FBUyxHQUFHLElBQUEsMkNBQW1CLEVBQ25DLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxnQkFBZ0IsRUFBRSxTQUFTLENBQUMsSUFBSSxFQUFFLENBQzFELENBQUM7SUFDRixJQUNFLElBQUksTUFBTSxDQUFDLEdBQUcsY0FBYyxXQUFXLENBQUMsQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDO1FBQ3hELENBQUMsU0FBUyxLQUFLLFNBQVM7WUFDdEIsSUFBSSxNQUFNLENBQUMsSUFBSSxTQUFTLGtCQUFrQixDQUFDLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFDLEVBQzlELENBQUM7UUFDRCxPQUFPLElBQUksQ0FBQztJQUNkLENBQUM7SUFDRCxPQUFPLEtBQUssQ0FBQztBQUNmLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKlxuQ29weXJpZ2h0IEFtYXpvbi5jb20sIEluYy4gb3IgaXRzIGFmZmlsaWF0ZXMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuXG5TUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuKi9cbmltcG9ydCB7IHBhcnNlIH0gZnJvbSAncGF0aCc7XG5pbXBvcnQgeyBDZm5SZXNvdXJjZSwgU3RhY2sgfSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBDZm5GdW5jdGlvbiB9IGZyb20gJ2F3cy1jZGstbGliL2F3cy1sYW1iZGEnO1xuaW1wb3J0IHsgQ2ZuUXVldWUgfSBmcm9tICdhd3MtY2RrLWxpYi9hd3Mtc3FzJztcbmltcG9ydCB7IE5hZ1J1bGVDb21wbGlhbmNlLCBOYWdSdWxlcyB9IGZyb20gJy4uLy4uL25hZy1ydWxlcyc7XG5pbXBvcnQgeyBmbGF0dGVuQ2ZuUmVmZXJlbmNlIH0gZnJvbSAnLi4vLi4vdXRpbHMvZmxhdHRlbi1jZm4tcmVmZXJlbmNlJztcblxuLyoqXG4gKiBTUVMgcXVldWVzIGhhdmUgYSBkZWFkLWxldHRlciBxdWV1ZSBlbmFibGVkIGlmIHRoZXkgYXJlIG5vdCB1c2VkIGFzIGEgZGVhZC1sZXR0ZXIgcXVldWVcbiAqIEBwYXJhbSBub2RlIHRoZSBDZm5SZXNvdXJjZSB0byBjaGVja1xuICovXG5leHBvcnQgZGVmYXVsdCBPYmplY3QuZGVmaW5lUHJvcGVydHkoXG4gIChub2RlOiBDZm5SZXNvdXJjZSk6IE5hZ1J1bGVDb21wbGlhbmNlID0+IHtcbiAgICBpZiAobm9kZSBpbnN0YW5jZW9mIENmblF1ZXVlKSB7XG4gICAgICBjb25zdCByZWRyaXZlUG9saWN5ID0gU3RhY2sub2Yobm9kZSkucmVzb2x2ZShub2RlLnJlZHJpdmVQb2xpY3kpO1xuICAgICAgaWYgKHJlZHJpdmVQb2xpY3kgPT09IHVuZGVmaW5lZCkge1xuICAgICAgICBjb25zdCBxdWV1ZUxvZ2ljYWxJZCA9IE5hZ1J1bGVzLnJlc29sdmVSZXNvdXJjZUZyb21JbnN0cmluc2ljKFxuICAgICAgICAgIG5vZGUsXG4gICAgICAgICAgbm9kZS5yZWZcbiAgICAgICAgKTtcbiAgICAgICAgY29uc3QgcXVldWVOYW1lID0gU3RhY2sub2Yobm9kZSkucmVzb2x2ZShub2RlLnF1ZXVlTmFtZSk7XG4gICAgICAgIGxldCBmb3VuZCA9IGZhbHNlO1xuICAgICAgICBmb3IgKGNvbnN0IGNoaWxkIG9mIFN0YWNrLm9mKG5vZGUpLm5vZGUuZmluZEFsbCgpKSB7XG4gICAgICAgICAgaWYgKGNoaWxkIGluc3RhbmNlb2YgQ2ZuUXVldWUpIHtcbiAgICAgICAgICAgIGlmIChpc01hdGNoaW5nUXVldWUoY2hpbGQsIHF1ZXVlTG9naWNhbElkLCBxdWV1ZU5hbWUpKSB7XG4gICAgICAgICAgICAgIGZvdW5kID0gdHJ1ZTtcbiAgICAgICAgICAgICAgYnJlYWs7XG4gICAgICAgICAgICB9XG4gICAgICAgICAgfSBlbHNlIGlmIChjaGlsZCBpbnN0YW5jZW9mIENmbkZ1bmN0aW9uKSB7XG4gICAgICAgICAgICBpZiAoaXNNYXRjaGluZ0xhbWJkYUZ1bmN0aW9uKGNoaWxkLCBxdWV1ZUxvZ2ljYWxJZCwgcXVldWVOYW1lKSkge1xuICAgICAgICAgICAgICBmb3VuZCA9IHRydWU7XG4gICAgICAgICAgICAgIGJyZWFrO1xuICAgICAgICAgICAgfVxuICAgICAgICAgIH1cbiAgICAgICAgfVxuICAgICAgICBpZiAoIWZvdW5kKSB7XG4gICAgICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PTl9DT01QTElBTlQ7XG4gICAgICAgIH1cbiAgICAgIH1cbiAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5DT01QTElBTlQ7XG4gICAgfSBlbHNlIHtcbiAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT1RfQVBQTElDQUJMRTtcbiAgICB9XG4gIH0sXG4gICduYW1lJyxcbiAgeyB2YWx1ZTogcGFyc2UoX19maWxlbmFtZSkubmFtZSB9XG4pO1xuXG4vKipcbiAqIEhlbHBlciBmdW5jdGlvbiB0byBjaGVjayB3aGV0aGVyIGEgZ2l2ZW4gU1FTIFF1ZXVlIHVzZXMgdGhlIHRhcmdldCBTUVMgcXVldWUgYXMgYSBETFFcbiAqIEBwYXJhbSBub2RlIHRoZSBDZm5RdWV1ZSB0byBjaGVja1xuICogQHBhcmFtIHF1ZXVlTG9naWNhbElkIHRoZSBDZm4gTG9naWNhbCBJRCBvZiB0aGUgdGFyZ2V0IHF1ZXVlXG4gKiBAcGFyYW0gcXVldWVOYW1lIHRoZSBuYW1lIG9mIHRoZSB0YXJnZXQgcXVldWVcbiAqIHJldHVybnMgd2hldGhlciB0aGUgQ2ZuUXVldWUgdXNlcyB0aGUgdGFyZ2V0IFNRUyBxdWV1ZSBhcyBhIERMUVxuICovXG5mdW5jdGlvbiBpc01hdGNoaW5nUXVldWUoXG4gIG5vZGU6IENmblF1ZXVlLFxuICBxdWV1ZUxvZ2ljYWxJZDogc3RyaW5nLFxuICBxdWV1ZU5hbWU6IHN0cmluZyB8IHVuZGVmaW5lZFxuKTogYm9vbGVhbiB7XG4gIGNvbnN0IHJlZHJpdmVQb2xpY3kgPSBTdGFjay5vZihub2RlKS5yZXNvbHZlKG5vZGUucmVkcml2ZVBvbGljeSk7XG4gIGNvbnN0IGRlYWRMZXR0ZXJUYXJnZXRBcm4gPSBmbGF0dGVuQ2ZuUmVmZXJlbmNlKFxuICAgIHJlZHJpdmVQb2xpY3k/LmRlYWRMZXR0ZXJUYXJnZXRBcm4gPz8gJydcbiAgKTtcbiAgaWYgKFxuICAgIG5ldyBSZWdFeHAoYCR7cXVldWVMb2dpY2FsSWR9KD8hW1xcXFx3XSlgKS50ZXN0KGRlYWRMZXR0ZXJUYXJnZXRBcm4pIHx8XG4gICAgKHF1ZXVlTmFtZSAhPT0gdW5kZWZpbmVkICYmXG4gICAgICBuZXcgUmVnRXhwKGA6JHtxdWV1ZU5hbWV9KD8hW1xcXFx3XFxcXC1fXFxcXC5dKWApLnRlc3QoZGVhZExldHRlclRhcmdldEFybikpXG4gICkge1xuICAgIHJldHVybiB0cnVlO1xuICB9XG4gIHJldHVybiBmYWxzZTtcbn1cblxuLyoqXG4gKiBIZWxwZXIgZnVuY3Rpb24gdG8gY2hlY2sgd2hldGhlciBhIGdpdmVuIExhbWJkYSBGdW5jdGlvbiB1c2VzIHRoZSB0YXJnZXQgU1FTIHF1ZXVlIGFzIGEgRExRXG4gKiBAcGFyYW0gbm9kZSB0aGUgQ2ZuRnVuY3Rpb24gdG8gY2hlY2tcbiAqIEBwYXJhbSBxdWV1ZUxvZ2ljYWxJZCB0aGUgQ2ZuIExvZ2ljYWwgSUQgb2YgdGhlIHRhcmdldCBxdWV1ZVxuICogQHBhcmFtIHF1ZXVlTmFtZSB0aGUgbmFtZSBvZiB0aGUgdGFyZ2V0IHF1ZXVlXG4gKiByZXR1cm5zIHdoZXRoZXIgdGhlIENmbkZ1bmN0aW9uIHVzZXMgdGhlIHRhcmdldCBTUVMgcXVldWUgYXMgYSBETFFcbiAqL1xuZnVuY3Rpb24gaXNNYXRjaGluZ0xhbWJkYUZ1bmN0aW9uKFxuICBub2RlOiBDZm5GdW5jdGlvbixcbiAgcXVldWVMb2dpY2FsSWQ6IHN0cmluZyxcbiAgcXVldWVOYW1lOiBzdHJpbmcgfCB1bmRlZmluZWRcbik6IGJvb2xlYW4ge1xuICBjb25zdCBkZWFkTGV0dGVyQ29uZmlnID0gU3RhY2sub2Yobm9kZSkucmVzb2x2ZShub2RlLmRlYWRMZXR0ZXJDb25maWcpO1xuICBjb25zdCB0YXJnZXRBcm4gPSBmbGF0dGVuQ2ZuUmVmZXJlbmNlKFxuICAgIFN0YWNrLm9mKG5vZGUpLnJlc29sdmUoZGVhZExldHRlckNvbmZpZz8udGFyZ2V0QXJuKSA/PyAnJ1xuICApO1xuICBpZiAoXG4gICAgbmV3IFJlZ0V4cChgJHtxdWV1ZUxvZ2ljYWxJZH0oPyFbXFxcXHddKWApLnRlc3QodGFyZ2V0QXJuKSB8fFxuICAgIChxdWV1ZU5hbWUgIT09IHVuZGVmaW5lZCAmJlxuICAgICAgbmV3IFJlZ0V4cChgOiR7cXVldWVOYW1lfSg/IVtcXFxcd1xcXFwtX1xcXFwuXSlgKS50ZXN0KHRhcmdldEFybikpXG4gICkge1xuICAgIHJldHVybiB0cnVlO1xuICB9XG4gIHJldHVybiBmYWxzZTtcbn1cbiJdfQ==
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SQS queues have server-side encryption enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -24,5 +24,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
24
24
|
else {
|
|
25
25
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
26
26
|
}
|
|
27
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
28
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
27
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
28
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SQS queues require SSL requests
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -33,7 +33,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
33
33
|
else {
|
|
34
34
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
35
35
|
}
|
|
36
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
36
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
37
37
|
/**
|
|
38
38
|
* Helper function to check whether the queue Policy requires SSL on the given queue.
|
|
39
39
|
* @param node The CfnQueuePolicy to check.
|
|
@@ -109,4 +109,4 @@ function checkMatchingPrincipal(principals) {
|
|
|
109
109
|
}
|
|
110
110
|
return false;
|
|
111
111
|
}
|
|
112
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
112
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SQSQueueSSLRequestsOnly = exports.SQSQueueSSE = exports.SQSQueueDLQ = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -10,4 +11,4 @@ var SQSQueueSSE_1 = require("./SQSQueueSSE");
|
|
|
10
11
|
Object.defineProperty(exports, "SQSQueueSSE", { enumerable: true, get: function () { return SQSQueueSSE_1.default; } });
|
|
11
12
|
var SQSQueueSSLRequestsOnly_1 = require("./SQSQueueSSLRequestsOnly");
|
|
12
13
|
Object.defineProperty(exports, "SQSQueueSSLRequestsOnly", { enumerable: true, get: function () { return SQSQueueSSLRequestsOnly_1.default; } });
|
|
13
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
14
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Step Function log "ALL" events to CloudWatch Logs
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.js
CHANGED
|
@@ -27,5 +27,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
27
27
|
else {
|
|
28
28
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
29
29
|
}
|
|
30
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
31
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
30
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
31
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Step Function have X-Ray tracing enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -27,5 +27,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
27
27
|
else {
|
|
28
28
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
29
29
|
}
|
|
30
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
31
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
30
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
31
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.StepFunctionStateMachineXray = exports.StepFunctionStateMachineAllLogsToCloudWatch = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -8,4 +9,4 @@ var StepFunctionStateMachineAllLogsToCloudWatch_1 = require("./StepFunctionState
|
|
|
8
9
|
Object.defineProperty(exports, "StepFunctionStateMachineAllLogsToCloudWatch", { enumerable: true, get: function () { return StepFunctionStateMachineAllLogsToCloudWatch_1.default; } });
|
|
9
10
|
var StepFunctionStateMachineXray_1 = require("./StepFunctionStateMachineXray");
|
|
10
11
|
Object.defineProperty(exports, "StepFunctionStateMachineXray", { enumerable: true, get: function () { return StepFunctionStateMachineXray_1.default; } });
|
|
11
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
12
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcnVsZXMvc3RlcGZ1bmN0aW9ucy9pbmRleC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7QUFBQTs7O0VBR0U7QUFDRiw2R0FBdUg7QUFBOUcsMEtBQUEsT0FBTyxPQUErQztBQUMvRCwrRUFBeUY7QUFBaEYsNElBQUEsT0FBTyxPQUFnQyIsInNvdXJjZXNDb250ZW50IjpbIi8qXG5Db3B5cmlnaHQgQW1hem9uLmNvbSwgSW5jLiBvciBpdHMgYWZmaWxpYXRlcy4gQWxsIFJpZ2h0cyBSZXNlcnZlZC5cblNQRFgtTGljZW5zZS1JZGVudGlmaWVyOiBBcGFjaGUtMi4wXG4qL1xuZXhwb3J0IHsgZGVmYXVsdCBhcyBTdGVwRnVuY3Rpb25TdGF0ZU1hY2hpbmVBbGxMb2dzVG9DbG91ZFdhdGNoIH0gZnJvbSAnLi9TdGVwRnVuY3Rpb25TdGF0ZU1hY2hpbmVBbGxMb2dzVG9DbG91ZFdhdGNoJztcbmV4cG9ydCB7IGRlZmF1bHQgYXMgU3RlcEZ1bmN0aW9uU3RhdGVNYWNoaW5lWHJheSB9IGZyb20gJy4vU3RlcEZ1bmN0aW9uU3RhdGVNYWNoaW5lWHJheSc7XG4iXX0=
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Timestream databases use Customer Managed KMS Keys
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -21,5 +21,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
21
21
|
else {
|
|
22
22
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
23
23
|
}
|
|
24
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
25
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
24
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
25
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,9 +1,10 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.TimestreamDatabaseCustomerManagedKey = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
6
7
|
*/
|
|
7
8
|
var TimestreamDatabaseCustomerManagedKey_1 = require("./TimestreamDatabaseCustomerManagedKey");
|
|
8
9
|
Object.defineProperty(exports, "TimestreamDatabaseCustomerManagedKey", { enumerable: true, get: function () { return TimestreamDatabaseCustomerManagedKey_1.default; } });
|
|
9
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
10
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* VPCs have their default security group closed
|
|
4
5
|
* VPCs created via CloudFormation will not have their default security group closed.
|
|
@@ -7,4 +8,5 @@ declare const _default: any;
|
|
|
7
8
|
* @see https://github.com/aws/aws-cdk/pull/25297
|
|
8
9
|
* @param node the CfnResource to check
|
|
9
10
|
*/
|
|
11
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
10
12
|
export default _default;
|
|
@@ -36,5 +36,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
36
36
|
else {
|
|
37
37
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
38
38
|
}
|
|
39
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
40
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
39
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
40
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* VPCs have Flow Logs enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -32,7 +32,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
32
32
|
else {
|
|
33
33
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
34
34
|
}
|
|
35
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
35
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
36
36
|
/**
|
|
37
37
|
* Helper function to check whether a given Flow Log is compliant and associated with the given VPC
|
|
38
38
|
* @param node the CfnFlowLog to check
|
|
@@ -45,4 +45,4 @@ function isMatchingCompliantFlowLog(node, vpcLogicalId) {
|
|
|
45
45
|
}
|
|
46
46
|
return false;
|
|
47
47
|
}
|
|
48
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
48
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* VPCs do not implement network ACLs
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -18,5 +18,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
18
18
|
else {
|
|
19
19
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
20
20
|
}
|
|
21
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
22
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
21
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
22
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiVlBDTm9OQUNMcy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9ydWxlcy92cGMvVlBDTm9OQUNMcy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBOzs7RUFHRTtBQUNGLCtCQUE2QjtBQUU3QixpREFBd0U7QUFDeEUsK0NBQW9EO0FBRXBEOzs7R0FHRztBQUNILGtCQUFlLE1BQU0sQ0FBQyxjQUFjLENBQ2xDLENBQUMsSUFBaUIsRUFBcUIsRUFBRTtJQUN2QyxJQUFJLElBQUksWUFBWSx1QkFBYSxJQUFJLElBQUksWUFBWSw0QkFBa0IsRUFBRSxDQUFDO1FBQ3hFLE9BQU8sNkJBQWlCLENBQUMsYUFBYSxDQUFDO0lBQ3pDLENBQUM7U0FBTSxDQUFDO1FBQ04sT0FBTyw2QkFBaUIsQ0FBQyxjQUFjLENBQUM7SUFDMUMsQ0FBQztBQUNILENBQUMsRUFDRCxNQUFNLEVBQ04sRUFBRSxLQUFLLEVBQUUsSUFBQSxZQUFLLEVBQUMsVUFBVSxDQUFDLENBQUMsSUFBSSxFQUFFLENBQ2xDLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKlxuQ29weXJpZ2h0IEFtYXpvbi5jb20sIEluYy4gb3IgaXRzIGFmZmlsaWF0ZXMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuXG5TUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuKi9cbmltcG9ydCB7IHBhcnNlIH0gZnJvbSAncGF0aCc7XG5pbXBvcnQgeyBDZm5SZXNvdXJjZSB9IGZyb20gJ2F3cy1jZGstbGliJztcbmltcG9ydCB7IENmbk5ldHdvcmtBY2wsIENmbk5ldHdvcmtBY2xFbnRyeSB9IGZyb20gJ2F3cy1jZGstbGliL2F3cy1lYzInO1xuaW1wb3J0IHsgTmFnUnVsZUNvbXBsaWFuY2UgfSBmcm9tICcuLi8uLi9uYWctcnVsZXMnO1xuXG4vKipcbiAqIFZQQ3MgZG8gbm90IGltcGxlbWVudCBuZXR3b3JrIEFDTHNcbiAqIEBwYXJhbSBub2RlIHRoZSBDZm5SZXNvdXJjZSB0byBjaGVja1xuICovXG5leHBvcnQgZGVmYXVsdCBPYmplY3QuZGVmaW5lUHJvcGVydHkoXG4gIChub2RlOiBDZm5SZXNvdXJjZSk6IE5hZ1J1bGVDb21wbGlhbmNlID0+IHtcbiAgICBpZiAobm9kZSBpbnN0YW5jZW9mIENmbk5ldHdvcmtBY2wgfHwgbm9kZSBpbnN0YW5jZW9mIENmbk5ldHdvcmtBY2xFbnRyeSkge1xuICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PTl9DT01QTElBTlQ7XG4gICAgfSBlbHNlIHtcbiAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT1RfQVBQTElDQUJMRTtcbiAgICB9XG4gIH0sXG4gICduYW1lJyxcbiAgeyB2YWx1ZTogcGFyc2UoX19maWxlbmFtZSkubmFtZSB9XG4pO1xuIl19
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Route tables do not have unrestricted routes ('0.0.0.0/0' or '::/0') to IGWs
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -30,5 +30,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
30
30
|
else {
|
|
31
31
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
32
32
|
}
|
|
33
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
34
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
33
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
34
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Subnets do not auto-assign public IP addresses
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -24,5 +24,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
24
24
|
else {
|
|
25
25
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
26
26
|
}
|
|
27
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
28
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
27
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
28
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.VPCSubnetAutoAssignPublicIpDisabled = exports.VPCNoUnrestrictedRouteToIGW = exports.VPCNoNACLs = exports.VPCFlowLogsEnabled = exports.VPCDefaultSecurityGroupClosed = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -14,4 +15,4 @@ var VPCNoUnrestrictedRouteToIGW_1 = require("./VPCNoUnrestrictedRouteToIGW");
|
|
|
14
15
|
Object.defineProperty(exports, "VPCNoUnrestrictedRouteToIGW", { enumerable: true, get: function () { return VPCNoUnrestrictedRouteToIGW_1.default; } });
|
|
15
16
|
var VPCSubnetAutoAssignPublicIpDisabled_1 = require("./VPCSubnetAutoAssignPublicIpDisabled");
|
|
16
17
|
Object.defineProperty(exports, "VPCSubnetAutoAssignPublicIpDisabled", { enumerable: true, get: function () { return VPCSubnetAutoAssignPublicIpDisabled_1.default; } });
|
|
17
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
18
|
+
//# sourceMappingURL=data:application/json;base64,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
|