@mavogel/awscdk-rootmail 0.0.278 → 0.0.280
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +8 -8
- package/lib/rootmail.js +1 -1
- package/lib/ses-receive.js +1 -1
- package/node_modules/@aws-sdk/client-cloudwatch-logs/package.json +36 -36
- package/node_modules/@aws-sdk/client-route-53/package.json +36 -36
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteObjectCommand.d.ts +10 -10
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/PutObjectCommand.d.ts +47 -47
- package/node_modules/@aws-sdk/client-s3/package.json +50 -50
- package/node_modules/@aws-sdk/client-ses/package.json +34 -34
- package/node_modules/@aws-sdk/client-ssm/README.md +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/SSM.d.ts +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/SSMClient.d.ts +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/AssociateOpsItemRelatedItemCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/CreateActivationCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/CreateAssociationCommand.d.ts +6 -6
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/DisassociateOpsItemRelatedItemCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/GetCalendarStateCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/GetDeployablePatchSnapshotForInstanceCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/GetParametersByPathCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/ListAssociationsCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/ListOpsItemRelatedItemsCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/index.d.ts +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/models/models_0.d.ts +7 -9
- package/node_modules/@aws-sdk/client-ssm/dist-types/models/models_1.d.ts +12 -13
- package/node_modules/@aws-sdk/client-ssm/dist-types/models/models_2.d.ts +20 -9
- package/node_modules/@aws-sdk/client-ssm/package.json +34 -34
- package/node_modules/@aws-sdk/client-sso/package.json +32 -32
- package/node_modules/@aws-sdk/core/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-env/package.json +5 -5
- package/node_modules/@aws-sdk/credential-provider-http/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-ini/package.json +13 -13
- package/node_modules/@aws-sdk/credential-provider-node/package.json +12 -12
- package/node_modules/@aws-sdk/credential-provider-process/package.json +6 -6
- package/node_modules/@aws-sdk/credential-provider-sso/package.json +8 -8
- package/node_modules/@aws-sdk/credential-provider-web-identity/package.json +6 -6
- package/node_modules/@aws-sdk/middleware-bucket-endpoint/package.json +5 -5
- package/node_modules/@aws-sdk/middleware-expect-continue/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/index.js +1 -13
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-es/flexibleChecksumsResponseMiddleware.js +1 -12
- package/node_modules/@aws-sdk/middleware-flexible-checksums/package.json +15 -16
- package/node_modules/@aws-sdk/middleware-host-header/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-location-constraint/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-logger/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-recursion-detection/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-sdk-route53/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-sdk-s3/package.json +11 -11
- package/node_modules/@aws-sdk/middleware-ssec/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-user-agent/package.json +7 -7
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/package.json +32 -32
- package/node_modules/@aws-sdk/region-config-resolver/package.json +5 -5
- package/node_modules/@aws-sdk/signature-v4-multi-region/package.json +6 -6
- package/node_modules/@aws-sdk/token-providers/package.json +6 -6
- package/node_modules/@aws-sdk/types/dist-types/identity/AwsCredentialIdentity.d.ts +17 -4
- package/node_modules/@aws-sdk/types/dist-types/ts3.4/identity/AwsCredentialIdentity.d.ts +7 -2
- package/node_modules/@aws-sdk/types/package.json +2 -2
- package/node_modules/@aws-sdk/util-endpoints/package.json +4 -4
- package/node_modules/@aws-sdk/util-user-agent-browser/package.json +3 -3
- package/node_modules/@aws-sdk/util-user-agent-node/package.json +5 -5
- package/node_modules/@aws-sdk/xml-builder/package.json +2 -2
- package/node_modules/cdk-nag/.jsii +19 -16
- package/node_modules/cdk-nag/API.md +1 -1
- package/node_modules/cdk-nag/RULES.md +4 -0
- package/node_modules/cdk-nag/lib/ignore-suppression-conditions.js +6 -6
- package/node_modules/cdk-nag/lib/index.js +8 -3
- package/node_modules/cdk-nag/lib/models/nag-suppression.d.ts +1 -1
- package/node_modules/cdk-nag/lib/nag-logger.js +10 -10
- package/node_modules/cdk-nag/lib/nag-pack.js +2 -2
- package/node_modules/cdk-nag/lib/nag-rules.d.ts +4 -4
- package/node_modules/cdk-nag/lib/nag-rules.js +5 -5
- package/node_modules/cdk-nag/lib/nag-suppressions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/aws-solutions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/hipaa-security.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/hipaa-security.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.js +18 -2
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.js +18 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/appsync/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloud9/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eventbridge/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.js +3 -3
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.js +7 -7
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lex/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.js +2 -2
- package/node_modules/cdk-nag/lib/rules/quicksight/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.js +3 -3
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.d.ts +8 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.js +27 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sns/index.d.ts +1 -0
- package/node_modules/cdk-nag/lib/rules/sns/index.js +4 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.js +4 -4
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/timestream/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/waf/index.js +2 -1
- package/node_modules/cdk-nag/lib/utils/flatten-cfn-reference.js +3 -2
- package/node_modules/cdk-nag/lib/utils/nag-suppression-helper.js +1 -1
- package/node_modules/cdk-nag/package.json +7 -13
- package/package.json +8 -8
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/streams/create-read-stream-on-buffer.browser.js +0 -7
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/streams/create-read-stream-on-buffer.js +0 -11
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-es/streams/create-read-stream-on-buffer.browser.js +0 -3
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-es/streams/create-read-stream-on-buffer.js +0 -7
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/streams/create-read-stream-on-buffer.browser.d.ts +0 -4
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/streams/create-read-stream-on-buffer.d.ts +0 -6
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/ts3.4/streams/create-read-stream-on-buffer.browser.d.ts +0 -3
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/ts3.4/streams/create-read-stream-on-buffer.d.ts +0 -2
|
@@ -28,7 +28,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
28
28
|
else {
|
|
29
29
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
30
30
|
}
|
|
31
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
31
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
32
32
|
/**
|
|
33
33
|
* Helper function for parsing through the policy document
|
|
34
34
|
* @param node the CfnResource to Check
|
|
@@ -43,4 +43,4 @@ function checkDocument(node, policyDoc) {
|
|
|
43
43
|
}
|
|
44
44
|
return false;
|
|
45
45
|
}
|
|
46
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
46
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* IAM policies do not grant full access, meaning the policy allows a principal to perform all actions on individual resources
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -28,7 +28,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
28
28
|
else {
|
|
29
29
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
30
30
|
}
|
|
31
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
31
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
32
32
|
/**
|
|
33
33
|
* Helper function for parsing through the policy document
|
|
34
34
|
* @param node the CfnResource to Check
|
|
@@ -43,4 +43,4 @@ function checkDocument(node, policyDoc) {
|
|
|
43
43
|
}
|
|
44
44
|
return false;
|
|
45
45
|
}
|
|
46
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
46
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* IAM users are assigned to at least one group
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiSUFNVXNlckdyb3VwTWVtYmVyc2hpcC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uL3NyYy9ydWxlcy9pYW0vSUFNVXNlckdyb3VwTWVtYmVyc2hpcC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQUFBOzs7RUFHRTtBQUNGLCtCQUE2QjtBQUM3Qiw2Q0FBaUQ7QUFDakQsaURBQThDO0FBQzlDLCtDQUFvRDtBQUVwRDs7O0dBR0c7QUFDSCxrQkFBZSxNQUFNLENBQUMsY0FBYyxDQUNsQyxDQUFDLElBQWlCLEVBQXFCLEVBQUU7SUFDdkMsSUFBSSxJQUFJLFlBQVksaUJBQU8sRUFBRSxDQUFDO1FBQzVCLE1BQU0sU0FBUyxHQUFHLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxJQUFJLENBQUMsTUFBTSxDQUFDLENBQUM7UUFDdEQsSUFBSSxTQUFTLElBQUksU0FBUyxFQUFFLENBQUM7WUFDM0IsT0FBTyw2QkFBaUIsQ0FBQyxhQUFhLENBQUM7UUFDekMsQ0FBQztRQUNELE9BQU8sNkJBQWlCLENBQUMsU0FBUyxDQUFDO0lBQ3JDLENBQUM7U0FBTSxDQUFDO1FBQ04sT0FBTyw2QkFBaUIsQ0FBQyxjQUFjLENBQUM7SUFDMUMsQ0FBQztBQUNILENBQUMsRUFDRCxNQUFNLEVBQ04sRUFBRSxLQUFLLEVBQUUsSUFBQSxZQUFLLEVBQUMsVUFBVSxDQUFDLENBQUMsSUFBSSxFQUFFLENBQ2xDLENBQUMiLCJzb3VyY2VzQ29udGVudCI6WyIvKlxuQ29weXJpZ2h0IEFtYXpvbi5jb20sIEluYy4gb3IgaXRzIGFmZmlsaWF0ZXMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuXG5TUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuKi9cbmltcG9ydCB7IHBhcnNlIH0gZnJvbSAncGF0aCc7XG5pbXBvcnQgeyBDZm5SZXNvdXJjZSwgU3RhY2sgfSBmcm9tICdhd3MtY2RrLWxpYic7XG5pbXBvcnQgeyBDZm5Vc2VyIH0gZnJvbSAnYXdzLWNkay1saWIvYXdzLWlhbSc7XG5pbXBvcnQgeyBOYWdSdWxlQ29tcGxpYW5jZSB9IGZyb20gJy4uLy4uL25hZy1ydWxlcyc7XG5cbi8qKlxuICogSUFNIHVzZXJzIGFyZSBhc3NpZ25lZCB0byBhdCBsZWFzdCBvbmUgZ3JvdXBcbiAqIEBwYXJhbSBub2RlIHRoZSBDZm5SZXNvdXJjZSB0byBjaGVja1xuICovXG5leHBvcnQgZGVmYXVsdCBPYmplY3QuZGVmaW5lUHJvcGVydHkoXG4gIChub2RlOiBDZm5SZXNvdXJjZSk6IE5hZ1J1bGVDb21wbGlhbmNlID0+IHtcbiAgICBpZiAobm9kZSBpbnN0YW5jZW9mIENmblVzZXIpIHtcbiAgICAgIGNvbnN0IHVzZXJHcm91cCA9IFN0YWNrLm9mKG5vZGUpLnJlc29sdmUobm9kZS5ncm91cHMpO1xuICAgICAgaWYgKHVzZXJHcm91cCA9PSB1bmRlZmluZWQpIHtcbiAgICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PTl9DT01QTElBTlQ7XG4gICAgICB9XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuQ09NUExJQU5UO1xuICAgIH0gZWxzZSB7XG4gICAgICByZXR1cm4gTmFnUnVsZUNvbXBsaWFuY2UuTk9UX0FQUExJQ0FCTEU7XG4gICAgfVxuICB9LFxuICAnbmFtZScsXG4gIHsgdmFsdWU6IHBhcnNlKF9fZmlsZW5hbWUpLm5hbWUgfVxuKTtcbiJdfQ==
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* IAM policies are not attached at the user level
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -31,5 +31,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
31
31
|
else {
|
|
32
32
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
33
33
|
}
|
|
34
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
35
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
34
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
35
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.IAMUserNoPolicies = exports.IAMUserGroupMembership = exports.IAMPolicyNoStatementsWithFullAccess = exports.IAMPolicyNoStatementsWithAdminAccess = exports.IAMNoWildcardPermissions = exports.IAMNoManagedPolicies = exports.IAMNoInlinePolicy = exports.IAMGroupHasUsers = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -20,4 +21,4 @@ var IAMUserGroupMembership_1 = require("./IAMUserGroupMembership");
|
|
|
20
21
|
Object.defineProperty(exports, "IAMUserGroupMembership", { enumerable: true, get: function () { return IAMUserGroupMembership_1.default; } });
|
|
21
22
|
var IAMUserNoPolicies_1 = require("./IAMUserNoPolicies");
|
|
22
23
|
Object.defineProperty(exports, "IAMUserNoPolicies", { enumerable: true, get: function () { return IAMUserNoPolicies_1.default; } });
|
|
23
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
24
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.waf = exports.vpc = exports.timestream = exports.stepfunctions = exports.sqs = exports.sns = exports.secretsmanager = exports.sagemaker = exports.s3 = exports.redshift = exports.rds = exports.quicksight = exports.opensearch = exports.neptune = exports.msk = exports.mediastore = exports.lex = exports.lambda = exports.kms = exports.kinesis = exports.iam = exports.glue = exports.eventbridge = exports.emr = exports.elb = exports.elasticbeanstalk = exports.elasticache = exports.efs = exports.eks = exports.ecs = exports.ecr = exports.ec2 = exports.dynamodb = exports.documentdb = exports.dms = exports.cognito = exports.codebuild = exports.cloudwatch = exports.cloudtrail = exports.cloudfront = exports.cloud9 = exports.autoscaling = exports.appsync = exports.apigw = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -48,4 +49,4 @@ exports.stepfunctions = require("./stepfunctions");
|
|
|
48
49
|
exports.timestream = require("./timestream");
|
|
49
50
|
exports.vpc = require("./vpc");
|
|
50
51
|
exports.waf = require("./waf");
|
|
51
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
52
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvcnVsZXMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUE7OztFQUdFO0FBQ0YsbUNBQWlDO0FBQ2pDLHVDQUFxQztBQUNyQywrQ0FBNkM7QUFDN0MscUNBQW1DO0FBQ25DLDZDQUEyQztBQUMzQyw2Q0FBMkM7QUFDM0MsNkNBQTJDO0FBQzNDLDJDQUF5QztBQUN6Qyx1Q0FBcUM7QUFDckMsK0JBQTZCO0FBQzdCLDZDQUEyQztBQUMzQyx5Q0FBdUM7QUFDdkMsK0JBQTZCO0FBQzdCLCtCQUE2QjtBQUM3QiwrQkFBNkI7QUFDN0IsK0JBQTZCO0FBQzdCLCtCQUE2QjtBQUM3QiwrQ0FBNkM7QUFDN0MseURBQXVEO0FBQ3ZELCtCQUE2QjtBQUM3QiwrQkFBNkI7QUFDN0IsK0NBQTZDO0FBQzdDLGlDQUErQjtBQUMvQiwrQkFBNkI7QUFDN0IsdUNBQXFDO0FBQ3JDLCtCQUE2QjtBQUM3QixxQ0FBbUM7QUFDbkMsK0JBQTZCO0FBQzdCLDZDQUEyQztBQUMzQywrQkFBNkI7QUFDN0IsdUNBQXFDO0FBQ3JDLDZDQUEyQztBQUMzQyw2Q0FBMkM7QUFDM0MsK0JBQTZCO0FBQzdCLHlDQUF1QztBQUN2Qyw2QkFBMkI7QUFDM0IsMkNBQXlDO0FBQ3pDLHFEQUFtRDtBQUNuRCwrQkFBNkI7QUFDN0IsK0JBQTZCO0FBQzdCLG1EQUFpRDtBQUNqRCw2Q0FBMkM7QUFDM0MsK0JBQTZCO0FBQzdCLCtCQUE2QiIsInNvdXJjZXNDb250ZW50IjpbIi8qXG5Db3B5cmlnaHQgQW1hem9uLmNvbSwgSW5jLiBvciBpdHMgYWZmaWxpYXRlcy4gQWxsIFJpZ2h0cyBSZXNlcnZlZC5cblNQRFgtTGljZW5zZS1JZGVudGlmaWVyOiBBcGFjaGUtMi4wXG4qL1xuZXhwb3J0ICogYXMgYXBpZ3cgZnJvbSAnLi9hcGlndyc7XG5leHBvcnQgKiBhcyBhcHBzeW5jIGZyb20gJy4vYXBwc3luYyc7XG5leHBvcnQgKiBhcyBhdXRvc2NhbGluZyBmcm9tICcuL2F1dG9zY2FsaW5nJztcbmV4cG9ydCAqIGFzIGNsb3VkOSBmcm9tICcuL2Nsb3VkOSc7XG5leHBvcnQgKiBhcyBjbG91ZGZyb250IGZyb20gJy4vY2xvdWRmcm9udCc7XG5leHBvcnQgKiBhcyBjbG91ZHRyYWlsIGZyb20gJy4vY2xvdWR0cmFpbCc7XG5leHBvcnQgKiBhcyBjbG91ZHdhdGNoIGZyb20gJy4vY2xvdWR3YXRjaCc7XG5leHBvcnQgKiBhcyBjb2RlYnVpbGQgZnJvbSAnLi9jb2RlYnVpbGQnO1xuZXhwb3J0ICogYXMgY29nbml0byBmcm9tICcuL2NvZ25pdG8nO1xuZXhwb3J0ICogYXMgZG1zIGZyb20gJy4vZG1zJztcbmV4cG9ydCAqIGFzIGRvY3VtZW50ZGIgZnJvbSAnLi9kb2N1bWVudGRiJztcbmV4cG9ydCAqIGFzIGR5bmFtb2RiIGZyb20gJy4vZHluYW1vZGInO1xuZXhwb3J0ICogYXMgZWMyIGZyb20gJy4vZWMyJztcbmV4cG9ydCAqIGFzIGVjciBmcm9tICcuL2Vjcic7XG5leHBvcnQgKiBhcyBlY3MgZnJvbSAnLi9lY3MnO1xuZXhwb3J0ICogYXMgZWtzIGZyb20gJy4vZWtzJztcbmV4cG9ydCAqIGFzIGVmcyBmcm9tICcuL2Vmcyc7XG5leHBvcnQgKiBhcyBlbGFzdGljYWNoZSBmcm9tICcuL2VsYXN0aWNhY2hlJztcbmV4cG9ydCAqIGFzIGVsYXN0aWNiZWFuc3RhbGsgZnJvbSAnLi9lbGFzdGljYmVhbnN0YWxrJztcbmV4cG9ydCAqIGFzIGVsYiBmcm9tICcuL2VsYic7XG5leHBvcnQgKiBhcyBlbXIgZnJvbSAnLi9lbXInO1xuZXhwb3J0ICogYXMgZXZlbnRicmlkZ2UgZnJvbSAnLi9ldmVudGJyaWRnZSc7XG5leHBvcnQgKiBhcyBnbHVlIGZyb20gJy4vZ2x1ZSc7XG5leHBvcnQgKiBhcyBpYW0gZnJvbSAnLi9pYW0nO1xuZXhwb3J0ICogYXMga2luZXNpcyBmcm9tICcuL2tpbmVzaXMnO1xuZXhwb3J0ICogYXMga21zIGZyb20gJy4va21zJztcbmV4cG9ydCAqIGFzIGxhbWJkYSBmcm9tICcuL2xhbWJkYSc7XG5leHBvcnQgKiBhcyBsZXggZnJvbSAnLi9sZXgnO1xuZXhwb3J0ICogYXMgbWVkaWFzdG9yZSBmcm9tICcuL21lZGlhc3RvcmUnO1xuZXhwb3J0ICogYXMgbXNrIGZyb20gJy4vbXNrJztcbmV4cG9ydCAqIGFzIG5lcHR1bmUgZnJvbSAnLi9uZXB0dW5lJztcbmV4cG9ydCAqIGFzIG9wZW5zZWFyY2ggZnJvbSAnLi9vcGVuc2VhcmNoJztcbmV4cG9ydCAqIGFzIHF1aWNrc2lnaHQgZnJvbSAnLi9xdWlja3NpZ2h0JztcbmV4cG9ydCAqIGFzIHJkcyBmcm9tICcuL3Jkcyc7XG5leHBvcnQgKiBhcyByZWRzaGlmdCBmcm9tICcuL3JlZHNoaWZ0JztcbmV4cG9ydCAqIGFzIHMzIGZyb20gJy4vczMnO1xuZXhwb3J0ICogYXMgc2FnZW1ha2VyIGZyb20gJy4vc2FnZW1ha2VyJztcbmV4cG9ydCAqIGFzIHNlY3JldHNtYW5hZ2VyIGZyb20gJy4vc2VjcmV0c21hbmFnZXInO1xuZXhwb3J0ICogYXMgc25zIGZyb20gJy4vc25zJztcbmV4cG9ydCAqIGFzIHNxcyBmcm9tICcuL3Nxcyc7XG5leHBvcnQgKiBhcyBzdGVwZnVuY3Rpb25zIGZyb20gJy4vc3RlcGZ1bmN0aW9ucyc7XG5leHBvcnQgKiBhcyB0aW1lc3RyZWFtIGZyb20gJy4vdGltZXN0cmVhbSc7XG5leHBvcnQgKiBhcyB2cGMgZnJvbSAnLi92cGMnO1xuZXhwb3J0ICogYXMgd2FmIGZyb20gJy4vd2FmJztcbiJdfQ==
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Kinesis Data Analytics Flink Applications have checkpointing enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -39,5 +39,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
39
39
|
else {
|
|
40
40
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
41
41
|
}
|
|
42
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
43
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
42
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
43
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Kinesis Data Firehose delivery stream have server-side encryption enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Kinesis Data Streams use the "aws/kinesis" key when server-sided encryption is enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -25,5 +25,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
25
25
|
else {
|
|
26
26
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
27
27
|
}
|
|
28
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
29
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
28
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
29
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Kinesis Data Streams have server-side encryption enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.KinesisDataStreamSSE = exports.KinesisDataStreamDefaultKeyWhenSSE = exports.KinesisDataFirehoseSSE = exports.KinesisDataAnalyticsFlinkCheckpointing = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -12,4 +13,4 @@ var KinesisDataStreamDefaultKeyWhenSSE_1 = require("./KinesisDataStreamDefaultKe
|
|
|
12
13
|
Object.defineProperty(exports, "KinesisDataStreamDefaultKeyWhenSSE", { enumerable: true, get: function () { return KinesisDataStreamDefaultKeyWhenSSE_1.default; } });
|
|
13
14
|
var KinesisDataStreamSSE_1 = require("./KinesisDataStreamSSE");
|
|
14
15
|
Object.defineProperty(exports, "KinesisDataStreamSSE", { enumerable: true, get: function () { return KinesisDataStreamSSE_1.default; } });
|
|
15
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
16
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* KMS Symmetric keys have automatic key rotation enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -26,5 +26,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
26
26
|
else {
|
|
27
27
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
28
28
|
}
|
|
29
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
30
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
29
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
30
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,9 +1,10 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.KMSBackingKeyRotationEnabled = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
6
7
|
*/
|
|
7
8
|
var KMSBackingKeyRotationEnabled_1 = require("./KMSBackingKeyRotationEnabled");
|
|
8
9
|
Object.defineProperty(exports, "KMSBackingKeyRotationEnabled", { enumerable: true, get: function () { return KMSBackingKeyRotationEnabled_1.default; } });
|
|
9
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
10
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcnVsZXMva21zL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBOzs7RUFHRTtBQUNGLCtFQUF5RjtBQUFoRiw0SUFBQSxPQUFPLE9BQWdDIiwic291cmNlc0NvbnRlbnQiOlsiLypcbkNvcHlyaWdodCBBbWF6b24uY29tLCBJbmMuIG9yIGl0cyBhZmZpbGlhdGVzLiBBbGwgUmlnaHRzIFJlc2VydmVkLlxuU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjBcbiovXG5leHBvcnQgeyBkZWZhdWx0IGFzIEtNU0JhY2tpbmdLZXlSb3RhdGlvbkVuYWJsZWQgfSBmcm9tICcuL0tNU0JhY2tpbmdLZXlSb3RhdGlvbkVuYWJsZWQnO1xuIl19
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Lambda functions are configured with function-level concurrent execution limits
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Lambda functions are configured with a dead-letter configuration
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -24,5 +24,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
24
24
|
else {
|
|
25
25
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
26
26
|
}
|
|
27
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
28
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
27
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
28
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SQS queue visibility timeout of Lambda Event Source Mapping is at least 6 times timeout of Lambda function
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -16,7 +16,7 @@ const flatten_cfn_reference_1 = require("../../utils/flatten-cfn-reference");
|
|
|
16
16
|
*/
|
|
17
17
|
exports.default = Object.defineProperty((node) => {
|
|
18
18
|
if (node instanceof aws_lambda_1.CfnEventSourceMapping) {
|
|
19
|
-
const sourceArn = flatten_cfn_reference_1.flattenCfnReference(aws_cdk_lib_1.Stack.of(node).resolve(node.eventSourceArn) ?? '');
|
|
19
|
+
const sourceArn = (0, flatten_cfn_reference_1.flattenCfnReference)(aws_cdk_lib_1.Stack.of(node).resolve(node.eventSourceArn) ?? '');
|
|
20
20
|
if (!sourceArn) {
|
|
21
21
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
22
22
|
}
|
|
@@ -40,7 +40,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
40
40
|
else {
|
|
41
41
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
42
42
|
}
|
|
43
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
43
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
44
44
|
/**
|
|
45
45
|
* Helper function to get the SQS queue of the Event Source Mapping
|
|
46
46
|
* @param node the CfnEventSourceMapping
|
|
@@ -50,7 +50,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
50
50
|
function getSourceSqsQueue(node, sourceArn) {
|
|
51
51
|
for (const child of aws_cdk_lib_1.Stack.of(node).node.findAll()) {
|
|
52
52
|
if (child instanceof aws_sqs_1.CfnQueue &&
|
|
53
|
-
flatten_cfn_reference_1.flattenCfnReference(aws_cdk_lib_1.Stack.of(node).resolve(child.attrArn)) === sourceArn) {
|
|
53
|
+
(0, flatten_cfn_reference_1.flattenCfnReference)(aws_cdk_lib_1.Stack.of(node).resolve(child.attrArn)) === sourceArn) {
|
|
54
54
|
return child;
|
|
55
55
|
}
|
|
56
56
|
}
|
|
@@ -62,11 +62,11 @@ function getSourceSqsQueue(node, sourceArn) {
|
|
|
62
62
|
* returns the timeout value of the Lambda function or undefined if not found
|
|
63
63
|
*/
|
|
64
64
|
function getLambdaFunctionTimeout(node) {
|
|
65
|
-
const functionRef = flatten_cfn_reference_1.flattenCfnReference(aws_cdk_lib_1.Stack.of(node).resolve(node.functionName));
|
|
65
|
+
const functionRef = (0, flatten_cfn_reference_1.flattenCfnReference)(aws_cdk_lib_1.Stack.of(node).resolve(node.functionName));
|
|
66
66
|
for (const child of aws_cdk_lib_1.Stack.of(node).node.findAll()) {
|
|
67
67
|
if (child instanceof aws_lambda_1.CfnFunction &&
|
|
68
|
-
flatten_cfn_reference_1.flattenCfnReference(functionRef) ===
|
|
69
|
-
flatten_cfn_reference_1.flattenCfnReference(aws_cdk_lib_1.Stack.of(node).resolve(child.ref))) {
|
|
68
|
+
(0, flatten_cfn_reference_1.flattenCfnReference)(functionRef) ===
|
|
69
|
+
(0, flatten_cfn_reference_1.flattenCfnReference)(aws_cdk_lib_1.Stack.of(node).resolve(child.ref))) {
|
|
70
70
|
const timeoutSetting = aws_cdk_lib_1.Stack.of(node).resolve(child.timeout);
|
|
71
71
|
if (typeof timeoutSetting === 'number') {
|
|
72
72
|
return timeoutSetting;
|
|
@@ -78,4 +78,4 @@ function getLambdaFunctionTimeout(node) {
|
|
|
78
78
|
}
|
|
79
79
|
return undefined;
|
|
80
80
|
}
|
|
81
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
81
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Lambda function permissions do not grant public access
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -25,5 +25,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
25
25
|
else {
|
|
26
26
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
27
27
|
}
|
|
28
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
29
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
28
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
29
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Lambda function URLs require Auth
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -21,5 +21,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
21
21
|
else {
|
|
22
22
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
23
23
|
}
|
|
24
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
25
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
24
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
25
|
+
//# sourceMappingURL=data:application/json;base64,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
|