@mavogel/awscdk-rootmail 0.0.278 → 0.0.280
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +8 -8
- package/lib/rootmail.js +1 -1
- package/lib/ses-receive.js +1 -1
- package/node_modules/@aws-sdk/client-cloudwatch-logs/package.json +36 -36
- package/node_modules/@aws-sdk/client-route-53/package.json +36 -36
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/DeleteObjectCommand.d.ts +10 -10
- package/node_modules/@aws-sdk/client-s3/dist-types/commands/PutObjectCommand.d.ts +47 -47
- package/node_modules/@aws-sdk/client-s3/package.json +50 -50
- package/node_modules/@aws-sdk/client-ses/package.json +34 -34
- package/node_modules/@aws-sdk/client-ssm/README.md +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/SSM.d.ts +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/SSMClient.d.ts +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/AssociateOpsItemRelatedItemCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/CreateActivationCommand.d.ts +2 -2
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/CreateAssociationCommand.d.ts +6 -6
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/DisassociateOpsItemRelatedItemCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/GetCalendarStateCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/GetDeployablePatchSnapshotForInstanceCommand.d.ts +3 -3
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/GetParametersByPathCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/ListAssociationsCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/commands/ListOpsItemRelatedItemsCommand.d.ts +1 -1
- package/node_modules/@aws-sdk/client-ssm/dist-types/index.d.ts +5 -4
- package/node_modules/@aws-sdk/client-ssm/dist-types/models/models_0.d.ts +7 -9
- package/node_modules/@aws-sdk/client-ssm/dist-types/models/models_1.d.ts +12 -13
- package/node_modules/@aws-sdk/client-ssm/dist-types/models/models_2.d.ts +20 -9
- package/node_modules/@aws-sdk/client-ssm/package.json +34 -34
- package/node_modules/@aws-sdk/client-sso/package.json +32 -32
- package/node_modules/@aws-sdk/core/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-env/package.json +5 -5
- package/node_modules/@aws-sdk/credential-provider-http/package.json +10 -10
- package/node_modules/@aws-sdk/credential-provider-ini/package.json +13 -13
- package/node_modules/@aws-sdk/credential-provider-node/package.json +12 -12
- package/node_modules/@aws-sdk/credential-provider-process/package.json +6 -6
- package/node_modules/@aws-sdk/credential-provider-sso/package.json +8 -8
- package/node_modules/@aws-sdk/credential-provider-web-identity/package.json +6 -6
- package/node_modules/@aws-sdk/middleware-bucket-endpoint/package.json +5 -5
- package/node_modules/@aws-sdk/middleware-expect-continue/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/index.js +1 -13
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-es/flexibleChecksumsResponseMiddleware.js +1 -12
- package/node_modules/@aws-sdk/middleware-flexible-checksums/package.json +15 -16
- package/node_modules/@aws-sdk/middleware-host-header/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-location-constraint/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-logger/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-recursion-detection/package.json +4 -4
- package/node_modules/@aws-sdk/middleware-sdk-route53/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-sdk-s3/package.json +11 -11
- package/node_modules/@aws-sdk/middleware-ssec/package.json +3 -3
- package/node_modules/@aws-sdk/middleware-user-agent/package.json +7 -7
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sso-oidc/endpoint/ruleset.js +2 -101
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/defaultStsRoleAssumers.js +6 -4
- package/node_modules/@aws-sdk/nested-clients/dist-es/submodules/sts/endpoint/ruleset.js +2 -140
- package/node_modules/@aws-sdk/nested-clients/dist-types/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/dist-types/ts3.4/submodules/sts/defaultStsRoleAssumers.d.ts +2 -2
- package/node_modules/@aws-sdk/nested-clients/package.json +32 -32
- package/node_modules/@aws-sdk/region-config-resolver/package.json +5 -5
- package/node_modules/@aws-sdk/signature-v4-multi-region/package.json +6 -6
- package/node_modules/@aws-sdk/token-providers/package.json +6 -6
- package/node_modules/@aws-sdk/types/dist-types/identity/AwsCredentialIdentity.d.ts +17 -4
- package/node_modules/@aws-sdk/types/dist-types/ts3.4/identity/AwsCredentialIdentity.d.ts +7 -2
- package/node_modules/@aws-sdk/types/package.json +2 -2
- package/node_modules/@aws-sdk/util-endpoints/package.json +4 -4
- package/node_modules/@aws-sdk/util-user-agent-browser/package.json +3 -3
- package/node_modules/@aws-sdk/util-user-agent-node/package.json +5 -5
- package/node_modules/@aws-sdk/xml-builder/package.json +2 -2
- package/node_modules/cdk-nag/.jsii +19 -16
- package/node_modules/cdk-nag/API.md +1 -1
- package/node_modules/cdk-nag/RULES.md +4 -0
- package/node_modules/cdk-nag/lib/ignore-suppression-conditions.js +6 -6
- package/node_modules/cdk-nag/lib/index.js +8 -3
- package/node_modules/cdk-nag/lib/models/nag-suppression.d.ts +1 -1
- package/node_modules/cdk-nag/lib/nag-logger.js +10 -10
- package/node_modules/cdk-nag/lib/nag-pack.js +2 -2
- package/node_modules/cdk-nag/lib/nag-rules.d.ts +4 -4
- package/node_modules/cdk-nag/lib/nag-rules.js +5 -5
- package/node_modules/cdk-nag/lib/nag-suppressions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/aws-solutions.js +2 -2
- package/node_modules/cdk-nag/lib/packs/hipaa-security.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/hipaa-security.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r4.js +18 -2
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/nist-800-53-r5.js +18 -2
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.d.ts +6 -0
- package/node_modules/cdk-nag/lib/packs/pci-dss-321.js +18 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAssociatedWithWAF.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWAuthorization.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWCacheEnabledAndEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWExecutionLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWRequestValidation.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWSSLEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/apigw/APIGWXrayEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/apigw/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/appsync/AppSyncGraphQLRequestLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/appsync/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupCooldownPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupELBHealthCheckRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupHealthCheck.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingGroupScalingNotifications.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/autoscaling/AutoScalingLaunchConfigPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/autoscaling/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloud9/Cloud9InstanceNoIngressSystemsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloud9/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionGeoRestrictions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionHttpsViewerNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionNoOutdatedSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessControl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionS3OriginAccessIdentity.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudfront/CloudFrontDistributionWAFIntegration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudfront/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailCloudWatchLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailEncryptionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudtrail/CloudTrailLogFileValidationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudtrail/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchAlarmAction.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cloudwatch/CloudWatchLogGroupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cloudwatch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectEnvVarAwsCred.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectKMSEncryptedArtifacts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectManagedImages.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/codebuild/CodeBuildProjectSourceRepoUrl.js +2 -2
- package/node_modules/cdk-nag/lib/rules/codebuild/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAPIGWAuthorizer.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolAdvancedSecurityModeEnforced.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolMFA.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolNoUnauthenticatedLogins.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/cognito/CognitoUserPoolStrongPasswordPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/cognito/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dms/DMSReplicationNotPublic.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterLogExports.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/documentdb/DocumentDBCredentialsInSecretsManager.js +2 -2
- package/node_modules/cdk-nag/lib/rules/documentdb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DAXEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBAutoScalingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/dynamodb/DynamoDBPITREnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/dynamodb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSOptimizedInstance.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2EBSVolumeEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2IMDSv2Enabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceDetailedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceNoPublicIp.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceProfileAttached.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstanceTerminationProtection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2InstancesInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedCommonPorts.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2RestrictedSSH.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ec2/EC2SecurityGroupDescription.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ec2/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecr/ECROpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSClusterCloudWatchContainerInsights.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionContainerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionNoEnvironmentVariables.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/ecs/ECSTaskDefinitionUserForHostMode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/ecs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/efs/EFSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/efs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterControlPlaneLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eks/EKSClusterNoEndpointPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eks/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterAutomaticBackup.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticache/ElastiCacheRedisClusterRedisAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticache/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEC2InstanceLogsToS3.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkEnhancedHealthReportingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkManagedUpdatesEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/ElasticBeanstalkVPCSpecified.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elasticbeanstalk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpDropInvalidHeaderEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBHttpToHttpsRedirection.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ALBWAFEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBConnectionDraining.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/CLBNoInboundHttpHttps.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBCrossZoneLoadBalancingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBTlsHttpsListenersOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/elb/ELBv2ACMCertificateRequired.js +2 -2
- package/node_modules/cdk-nag/lib/rules/elb/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRAuthEC2KeyPairOrKerberos.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMREncryptionInTransit.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRKerberosEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRLocalDiskEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/emr/EMRS3AccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/emr/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/eventbridge/EventBusOpenAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/eventbridge/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueEncryptedCloudWatchLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/glue/GlueJobBookmarkEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/glue/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMGroupHasUsers.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoInlinePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoManagedPolicies.js +3 -3
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMNoWildcardPermissions.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithAdminAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMPolicyNoStatementsWithFullAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserGroupMembership.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/iam/IAMUserNoPolicies.js +2 -2
- package/node_modules/cdk-nag/lib/rules/iam/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataAnalyticsFlinkCheckpointing.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataFirehoseSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamDefaultKeyWhenSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kinesis/KinesisDataStreamSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kinesis/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/kms/KMSBackingKeyRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/kms/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaConcurrency.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaDLQ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaEventSourceSQSVisibilityTimeout.js +7 -7
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaFunctionUrlAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaInsideVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lambda/LambdaLatestVersion.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lambda/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/lex/LexBotAliasEncryptedConversationLogs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/lex/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreCloudWatchMetricPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerAccessLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerCORSPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerHasContainerPolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerLifecyclePolicy.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/mediastore/MediaStoreContainerSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/mediastore/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKBrokerToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/msk/MSKClientToBrokerTLS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/msk/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterAutomaticMinorVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterBackupRetentionPeriod.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/neptune/NeptuneClusterMultiAZ.js +2 -2
- package/node_modules/cdk-nag/lib/rules/neptune/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchAllowlistedIPs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchDedicatedMasterNode.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchEncryptedAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchErrorLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchInVPCOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNoUnsignedOrAnonymousAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchNodeToNodeEncryption.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchSlowLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/opensearch/OpenSearchZoneAwareness.js +2 -2
- package/node_modules/cdk-nag/lib/rules/opensearch/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/quicksight/QuicksightSSLConnections.js +2 -2
- package/node_modules/cdk-nag/lib/rules/quicksight/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLBacktrack.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/AuroraMySQLPostgresIAMAuth.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSAutomaticMinorVersionUpgradeEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSEnhancedMonitoringEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInBackupPlan.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstanceDeletionProtectionEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSInstancePublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSLoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSMultiAZSupport.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSRestrictedInbound.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/rds/RDSStorageEncrypted.js +2 -2
- package/node_modules/cdk-nag/lib/rules/rds/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftBackupEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterAuditLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterConfiguration.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterEncryptionAtRest.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterMaintenanceSettings.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultPort.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterNonDefaultUsername.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterPublicAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterUserActivityLogging.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftClusterVersionUpgrade.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftEnhancedVPCRoutingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/redshift/RedshiftRequireTlsSSL.js +2 -2
- package/node_modules/cdk-nag/lib/rules/redshift/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketDefaultLockEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLevelPublicAccessProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketLoggingEnabled.js +3 -3
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicReadProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketPublicWriteProhibited.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketReplicationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3BucketVersioningEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3DefaultEncryptionKMS.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/s3/S3WebBucketOAIAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/s3/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInVPC.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sagemaker/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerRotationEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/secretsmanager/SecretsManagerUsingKMSKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/secretsmanager/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.d.ts +8 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSEncryptedKMS.js +27 -0
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sns/SNSTopicSSLPublishOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sns/index.d.ts +1 -0
- package/node_modules/cdk-nag/lib/rules/sns/index.js +4 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueDLQ.js +4 -4
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSE.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/sqs/SQSQueueSSLRequestsOnly.js +2 -2
- package/node_modules/cdk-nag/lib/rules/sqs/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineAllLogsToCloudWatch.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/stepfunctions/StepFunctionStateMachineXray.js +2 -2
- package/node_modules/cdk-nag/lib/rules/stepfunctions/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/timestream/TimestreamDatabaseCustomerManagedKey.js +2 -2
- package/node_modules/cdk-nag/lib/rules/timestream/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCDefaultSecurityGroupClosed.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCFlowLogsEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoNACLs.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCNoUnrestrictedRouteToIGW.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/vpc/VPCSubnetAutoAssignPublicIpDisabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/vpc/index.js +2 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.d.ts +3 -1
- package/node_modules/cdk-nag/lib/rules/waf/WAFv2LoggingEnabled.js +2 -2
- package/node_modules/cdk-nag/lib/rules/waf/index.js +2 -1
- package/node_modules/cdk-nag/lib/utils/flatten-cfn-reference.js +3 -2
- package/node_modules/cdk-nag/lib/utils/nag-suppression-helper.js +1 -1
- package/node_modules/cdk-nag/package.json +7 -13
- package/package.json +8 -8
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/streams/create-read-stream-on-buffer.browser.js +0 -7
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-cjs/streams/create-read-stream-on-buffer.js +0 -11
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-es/streams/create-read-stream-on-buffer.browser.js +0 -3
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-es/streams/create-read-stream-on-buffer.js +0 -7
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/streams/create-read-stream-on-buffer.browser.d.ts +0 -4
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/streams/create-read-stream-on-buffer.d.ts +0 -6
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/ts3.4/streams/create-read-stream-on-buffer.browser.d.ts +0 -3
- package/node_modules/@aws-sdk/middleware-flexible-checksums/dist-types/ts3.4/streams/create-read-stream-on-buffer.d.ts +0 -2
|
@@ -40,7 +40,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
40
40
|
else {
|
|
41
41
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
42
42
|
}
|
|
43
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
43
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
44
44
|
/**
|
|
45
45
|
* Helper function to check whether the Bucket Policy belongs to the given bucket
|
|
46
46
|
* @param node The CfnBucketPolicy to check.
|
|
@@ -159,4 +159,4 @@ function checkMatchingResources(node, bucketLogicalId, bucketName, resources) {
|
|
|
159
159
|
}
|
|
160
160
|
return false;
|
|
161
161
|
}
|
|
162
|
-
//# sourceMappingURL=data:application/json;base64,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
|
|
162
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets have versioningConfiguration enabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -25,5 +25,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
25
25
|
else {
|
|
26
26
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
27
27
|
}
|
|
28
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
29
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
28
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
29
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 Buckets are encrypted with a KMS Key by default
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -37,5 +37,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
37
37
|
else {
|
|
38
38
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
39
39
|
}
|
|
40
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
41
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
40
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
41
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* S3 static website buckets do not have an open world bucket policy and use CloudFront Origin Access Identities in the bucket policy for limited getObject and/or putObject permissions
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -34,7 +34,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
34
34
|
else {
|
|
35
35
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
36
36
|
}
|
|
37
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
37
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
38
38
|
/**
|
|
39
39
|
* Helper function to check whether the Bucket Policy does not allow for open access and uses a restricted OAI Policy for access on the given bucket.
|
|
40
40
|
* @param node The CfnBucketPolicy to check.
|
|
@@ -105,4 +105,4 @@ function checkMatchingActions(actions) {
|
|
|
105
105
|
function normalizeArray(arrOrStr) {
|
|
106
106
|
return Array.isArray(arrOrStr) ? arrOrStr : [arrOrStr];
|
|
107
107
|
}
|
|
108
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
108
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiUzNXZWJCdWNrZXRPQUlBY2Nlc3MuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcnVsZXMvczMvUzNXZWJCdWNrZXRPQUlBY2Nlc3MudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7QUFBQTs7O0VBR0U7QUFDRiwrQkFBNkI7QUFDN0IsNkNBQWlEO0FBQ2pELCtDQUFnRTtBQUNoRSwrQ0FBOEQ7QUFFOUQ7OztHQUdHO0FBQ0gsa0JBQWUsTUFBTSxDQUFDLGNBQWMsQ0FDbEMsQ0FBQyxJQUFpQixFQUFxQixFQUFFO0lBQ3ZDLElBQUksSUFBSSxZQUFZLGtCQUFTLEVBQUUsQ0FBQztRQUM5QixJQUFJLElBQUksQ0FBQyxvQkFBb0IsS0FBSyxTQUFTLEVBQUUsQ0FBQztZQUM1QyxNQUFNLGVBQWUsR0FBRyxvQkFBUSxDQUFDLDZCQUE2QixDQUM1RCxJQUFJLEVBQ0osSUFBSSxDQUFDLEdBQUcsQ0FDVCxDQUFDO1lBQ0YsTUFBTSxVQUFVLEdBQUcsbUJBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxVQUFVLENBQUMsQ0FBQztZQUMzRCxJQUFJLEtBQUssR0FBRyxLQUFLLENBQUM7WUFDbEIsS0FBSyxNQUFNLEtBQUssSUFBSSxtQkFBSyxDQUFDLEVBQUUsQ0FBQyxJQUFJLENBQUMsQ0FBQyxJQUFJLENBQUMsT0FBTyxFQUFFLEVBQUUsQ0FBQztnQkFDbEQsSUFBSSxLQUFLLFlBQVksd0JBQWUsRUFBRSxDQUFDO29CQUNyQyxJQUFJLHlCQUF5QixDQUFDLEtBQUssRUFBRSxlQUFlLEVBQUUsVUFBVSxDQUFDLEVBQUUsQ0FBQzt3QkFDbEUsS0FBSyxHQUFHLElBQUksQ0FBQztvQkFDZixDQUFDO2dCQUNILENBQUM7WUFDSCxDQUFDO1lBQ0QsSUFBSSxDQUFDLEtBQUssRUFBRSxDQUFDO2dCQUNYLE9BQU8sNkJBQWlCLENBQUMsYUFBYSxDQUFDO1lBQ3pDLENBQUM7UUFDSCxDQUFDO1FBQ0QsT0FBTyw2QkFBaUIsQ0FBQyxTQUFTLENBQUM7SUFDckMsQ0FBQztTQUFNLENBQUM7UUFDTixPQUFPLDZCQUFpQixDQUFDLGNBQWMsQ0FBQztJQUMxQyxDQUFDO0FBQ0gsQ0FBQyxFQUNELE1BQU0sRUFDTixFQUFFLEtBQUssRUFBRSxJQUFBLFlBQUssRUFBQyxVQUFVLENBQUMsQ0FBQyxJQUFJLEVBQUUsQ0FDbEMsQ0FBQztBQUVGOzs7Ozs7R0FNRztBQUNILFNBQVMseUJBQXlCLENBQ2hDLElBQXFCLEVBQ3JCLGVBQXVCLEVBQ3ZCLFVBQThCO0lBRTlCLE1BQU0sTUFBTSxHQUFHLG9CQUFRLENBQUMsNkJBQTZCLENBQUMsSUFBSSxFQUFFLElBQUksQ0FBQyxNQUFNLENBQUMsQ0FBQztJQUN6RSxJQUFJLE1BQU0sS0FBSyxlQUFlLElBQUksTUFBTSxLQUFLLFVBQVUsRUFBRSxDQUFDO1FBQ3hELE9BQU8sS0FBSyxDQUFDO0lBQ2YsQ0FBQztJQUNELE1BQU0sc0JBQXNCLEdBQUcsbUJBQUssQ0FBQyxFQUFFLENBQUMsSUFBSSxDQUFDLENBQUMsT0FBTyxDQUFDLElBQUksQ0FBQyxjQUFjLENBQUMsQ0FBQztJQUMzRSxJQUFJLEtBQUssR0FBRyxLQUFLLENBQUM7SUFDbEIsS0FBSyxNQUFNLFNBQVMsSUFBSSxzQkFBc0IsQ0FBQyxTQUFTLEVBQUUsQ0FBQztRQUN6RCxNQUFNLGlCQUFpQixHQUFHLG1CQUFLLENBQUMsRUFBRSxDQUFDLElBQUksQ0FBQyxDQUFDLE9BQU8sQ0FBQyxTQUFTLENBQUMsQ0FBQztRQUM1RCxJQUFJLGlCQUFpQixDQUFDLE1BQU0sS0FBSyxPQUFPLEVBQUUsQ0FBQztZQUN6QyxJQUFJLG1CQUFtQixDQUFDLGlCQUFpQixDQUFDLFNBQVMsQ0FBQyxFQUFFLENBQUM7Z0JBQ3JELE9BQU8sS0FBSyxDQUFDO1lBQ2YsQ0FBQztZQUNELElBQUksaUJBQWlCLENBQUMsaUJBQWlCLENBQUMsU0FBUyxDQUFDLEVBQUUsQ0FBQztnQkFDbkQsSUFBSSxvQkFBb0IsQ0FBQyxjQUFjLENBQUMsaUJBQWlCLENBQUMsTUFBTSxDQUFDLENBQUMsRUFBRSxDQUFDO29CQUNuRSxLQUFLLEdBQUcsSUFBSSxDQUFDO2dCQUNmLENBQUM7cUJBQU0sQ0FBQztvQkFDTixPQUFPLEtBQUssQ0FBQztnQkFDZixDQUFDO1lBQ0gsQ0FBQztRQUNILENBQUM7SUFDSCxDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUM7QUFDZixDQUFDO0FBRUQ7Ozs7O0dBS0c7QUFDSCxTQUFTLG1CQUFtQixDQUFDLFVBQWU7SUFDMUMsT0FBTyxJQUFJLENBQUMsU0FBUyxDQUFDLFVBQVUsSUFBSSxFQUFFLENBQUMsQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFDLENBQUM7QUFDeEQsQ0FBQztBQUVEOzs7OztHQUtHO0FBQ0gsU0FBUyxpQkFBaUIsQ0FBQyxVQUFlO0lBQ3hDLE1BQU0sbUJBQW1CLEdBQUcsSUFBSSxDQUFDLFNBQVMsQ0FBQyxVQUFVLENBQUMsR0FBRyxJQUFJLEVBQUUsQ0FBQyxDQUFDLFFBQVEsQ0FDdkUsbUNBQW1DLENBQ3BDLENBQUM7SUFDRixNQUFNLDBCQUEwQixHQUFHLENBQUMsQ0FBQyxVQUFVLEVBQUUsYUFBYSxDQUFDO0lBQy9ELE9BQU8sbUJBQW1CLElBQUksMEJBQTBCLENBQUM7QUFDM0QsQ0FBQztBQUVEOzs7OztHQUtHO0FBQ0gsU0FBUyxvQkFBb0IsQ0FBQyxPQUFpQjtJQUM3QyxLQUFLLE1BQU0sTUFBTSxJQUFJLE9BQU8sRUFBRSxDQUFDO1FBQzdCLElBQ0UsTUFBTSxDQUFDLFdBQVcsRUFBRSxLQUFLLGNBQWM7WUFDdkMsTUFBTSxDQUFDLFdBQVcsRUFBRSxLQUFLLGNBQWMsRUFDdkMsQ0FBQztZQUNELE9BQU8sS0FBSyxDQUFDO1FBQ2YsQ0FBQztJQUNILENBQUM7SUFDRCxPQUFPLElBQUksQ0FBQztBQUNkLENBQUM7QUFFRCxTQUFTLGNBQWMsQ0FBSSxRQUFpQjtJQUMxQyxPQUFPLEtBQUssQ0FBQyxPQUFPLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQyxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUMsQ0FBQztBQUN6RCxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiLypcbkNvcHlyaWdodCBBbWF6b24uY29tLCBJbmMuIG9yIGl0cyBhZmZpbGlhdGVzLiBBbGwgUmlnaHRzIFJlc2VydmVkLlxuU1BEWC1MaWNlbnNlLUlkZW50aWZpZXI6IEFwYWNoZS0yLjBcbiovXG5pbXBvcnQgeyBwYXJzZSB9IGZyb20gJ3BhdGgnO1xuaW1wb3J0IHsgQ2ZuUmVzb3VyY2UsIFN0YWNrIH0gZnJvbSAnYXdzLWNkay1saWInO1xuaW1wb3J0IHsgQ2ZuQnVja2V0LCBDZm5CdWNrZXRQb2xpY3kgfSBmcm9tICdhd3MtY2RrLWxpYi9hd3MtczMnO1xuaW1wb3J0IHsgTmFnUnVsZUNvbXBsaWFuY2UsIE5hZ1J1bGVzIH0gZnJvbSAnLi4vLi4vbmFnLXJ1bGVzJztcblxuLyoqXG4gKiBTMyBzdGF0aWMgd2Vic2l0ZSBidWNrZXRzIGRvIG5vdCBoYXZlIGFuIG9wZW4gd29ybGQgYnVja2V0IHBvbGljeSBhbmQgdXNlIENsb3VkRnJvbnQgT3JpZ2luIEFjY2VzcyBJZGVudGl0aWVzIGluIHRoZSBidWNrZXQgcG9saWN5IGZvciBsaW1pdGVkIGdldE9iamVjdCBhbmQvb3IgcHV0T2JqZWN0IHBlcm1pc3Npb25zXG4gKiBAcGFyYW0gbm9kZSB0aGUgQ2ZuUmVzb3VyY2UgdG8gY2hlY2tcbiAqL1xuZXhwb3J0IGRlZmF1bHQgT2JqZWN0LmRlZmluZVByb3BlcnR5KFxuICAobm9kZTogQ2ZuUmVzb3VyY2UpOiBOYWdSdWxlQ29tcGxpYW5jZSA9PiB7XG4gICAgaWYgKG5vZGUgaW5zdGFuY2VvZiBDZm5CdWNrZXQpIHtcbiAgICAgIGlmIChub2RlLndlYnNpdGVDb25maWd1cmF0aW9uICE9PSB1bmRlZmluZWQpIHtcbiAgICAgICAgY29uc3QgYnVja2V0TG9naWNhbElkID0gTmFnUnVsZXMucmVzb2x2ZVJlc291cmNlRnJvbUluc3RyaW5zaWMoXG4gICAgICAgICAgbm9kZSxcbiAgICAgICAgICBub2RlLnJlZlxuICAgICAgICApO1xuICAgICAgICBjb25zdCBidWNrZXROYW1lID0gU3RhY2sub2Yobm9kZSkucmVzb2x2ZShub2RlLmJ1Y2tldE5hbWUpO1xuICAgICAgICBsZXQgZm91bmQgPSBmYWxzZTtcbiAgICAgICAgZm9yIChjb25zdCBjaGlsZCBvZiBTdGFjay5vZihub2RlKS5ub2RlLmZpbmRBbGwoKSkge1xuICAgICAgICAgIGlmIChjaGlsZCBpbnN0YW5jZW9mIENmbkJ1Y2tldFBvbGljeSkge1xuICAgICAgICAgICAgaWYgKGlzTWF0Y2hpbmdDb21wbGlhbnRQb2xpY3koY2hpbGQsIGJ1Y2tldExvZ2ljYWxJZCwgYnVja2V0TmFtZSkpIHtcbiAgICAgICAgICAgICAgZm91bmQgPSB0cnVlO1xuICAgICAgICAgICAgfVxuICAgICAgICAgIH1cbiAgICAgICAgfVxuICAgICAgICBpZiAoIWZvdW5kKSB7XG4gICAgICAgICAgcmV0dXJuIE5hZ1J1bGVDb21wbGlhbmNlLk5PTl9DT01QTElBTlQ7XG4gICAgICAgIH1cbiAgICAgIH1cbiAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5DT01QTElBTlQ7XG4gICAgfSBlbHNlIHtcbiAgICAgIHJldHVybiBOYWdSdWxlQ29tcGxpYW5jZS5OT1RfQVBQTElDQUJMRTtcbiAgICB9XG4gIH0sXG4gICduYW1lJyxcbiAgeyB2YWx1ZTogcGFyc2UoX19maWxlbmFtZSkubmFtZSB9XG4pO1xuXG4vKipcbiAqIEhlbHBlciBmdW5jdGlvbiB0byBjaGVjayB3aGV0aGVyIHRoZSBCdWNrZXQgUG9saWN5IGRvZXMgbm90IGFsbG93IGZvciBvcGVuIGFjY2VzcyAgYW5kIHVzZXMgYSByZXN0cmljdGVkIE9BSSBQb2xpY3kgZm9yIGFjY2VzcyBvbiB0aGUgZ2l2ZW4gYnVja2V0LlxuICogQHBhcmFtIG5vZGUgVGhlIENmbkJ1Y2tldFBvbGljeSB0byBjaGVjay5cbiAqIEBwYXJhbSBidWNrZXRMb2dpY2FsSWQgVGhlIENmbiBMb2dpY2FsIElEIG9mIHRoZSBidWNrZXQuXG4gKiBAcGFyYW0gYnVja2V0TmFtZSBUaGUgbmFtZSBvZiB0aGUgYnVja2V0LlxuICogQHJldHVybnMgV2hldGhlciB0aGUgQ2ZuQnVja2V0UG9saWN5IGFsbG93cyBmb3Igb3BlbiBhY2Nlc3Mgb24gdGhlIGdpdmVuIGJ1Y2tldC5cbiAqL1xuZnVuY3Rpb24gaXNNYXRjaGluZ0NvbXBsaWFudFBvbGljeShcbiAgbm9kZTogQ2ZuQnVja2V0UG9saWN5LFxuICBidWNrZXRMb2dpY2FsSWQ6IHN0cmluZyxcbiAgYnVja2V0TmFtZTogc3RyaW5nIHwgdW5kZWZpbmVkXG4pOiBib29sZWFuIHtcbiAgY29uc3QgYnVja2V0ID0gTmFnUnVsZXMucmVzb2x2ZVJlc291cmNlRnJvbUluc3RyaW5zaWMobm9kZSwgbm9kZS5idWNrZXQpO1xuICBpZiAoYnVja2V0ICE9PSBidWNrZXRMb2dpY2FsSWQgJiYgYnVja2V0ICE9PSBidWNrZXROYW1lKSB7XG4gICAgcmV0dXJuIGZhbHNlO1xuICB9XG4gIGNvbnN0IHJlc29sdmVkUG9saWN5RG9jdW1lbnQgPSBTdGFjay5vZihub2RlKS5yZXNvbHZlKG5vZGUucG9saWN5RG9jdW1lbnQpO1xuICBsZXQgZm91bmQgPSBmYWxzZTtcbiAgZm9yIChjb25zdCBzdGF0ZW1lbnQgb2YgcmVzb2x2ZWRQb2xpY3lEb2N1bWVudC5TdGF0ZW1lbnQpIHtcbiAgICBjb25zdCByZXNvbHZlZFN0YXRlbWVudCA9IFN0YWNrLm9mKG5vZGUpLnJlc29sdmUoc3RhdGVtZW50KTtcbiAgICBpZiAocmVzb2x2ZWRTdGF0ZW1lbnQuRWZmZWN0ID09PSAnQWxsb3cnKSB7XG4gICAgICBpZiAoY2hlY2tTdGFyUHJpbmNpcGFscyhyZXNvbHZlZFN0YXRlbWVudC5QcmluY2lwYWwpKSB7XG4gICAgICAgIHJldHVybiBmYWxzZTtcbiAgICAgIH1cbiAgICAgIGlmIChjaGVja09BSVByaW5jaXBhbChyZXNvbHZlZFN0YXRlbWVudC5QcmluY2lwYWwpKSB7XG4gICAgICAgIGlmIChjaGVja01hdGNoaW5nQWN0aW9ucyhub3JtYWxpemVBcnJheShyZXNvbHZlZFN0YXRlbWVudC5BY3Rpb24pKSkge1xuICAgICAgICAgIGZvdW5kID0gdHJ1ZTtcbiAgICAgICAgfSBlbHNlIHtcbiAgICAgICAgICByZXR1cm4gZmFsc2U7XG4gICAgICAgIH1cbiAgICAgIH1cbiAgICB9XG4gIH1cbiAgcmV0dXJuIGZvdW5kO1xufVxuXG4vKipcbiAqIEhlbHBlciBmdW5jdGlvbiB0byBjaGVjayB3aGV0aGVyIHRoZSBCdWNrZXQgUG9saWN5IGFwcGxpZXMgdG8gYWxsIHByaW5jaXBhbHNcbiAqIEBwYXJhbSBub2RlIFRoZSBDZm5CdWNrZXRQb2xpY3kgdG8gY2hlY2tcbiAqIEBwYXJhbSBwcmluY2lwYWwgVGhlIHByaW5jaXBhbHMgaW4gdGhlIGJ1Y2tldCBwb2xpY3lcbiAqIEByZXR1cm5zIFdoZXRoZXIgdGhlIENmbkJ1Y2tldFBvbGljeSBhcHBsaWVzIHRvIGFsbCBwcmluY2lwYWxzXG4gKi9cbmZ1bmN0aW9uIGNoZWNrU3RhclByaW5jaXBhbHMocHJpbmNpcGFsczogYW55KTogYm9vbGVhbiB7XG4gIHJldHVybiBKU09OLnN0cmluZ2lmeShwcmluY2lwYWxzID8/ICcnKS5pbmNsdWRlcygnKicpO1xufVxuXG4vKipcbiAqIEhlbHBlciBmdW5jdGlvbiB0byBjaGVjayB3aGV0aGVyIHRoZSBCdWNrZXQgUG9saWN5IGFwcGxpZXMgdG8gYSBDbG91ZEZyb250IE9BSVxuICogQHBhcmFtIG5vZGUgVGhlIENmbkJ1Y2tldFBvbGljeSB0byBjaGVja1xuICogQHBhcmFtIHByaW5jaXBhbCBUaGUgcHJpbmNpcGFscyBpbiB0aGUgYnVja2V0IHBvbGljeVxuICogQHJldHVybnMgV2hldGhlciB0aGUgQ2ZuQnVja2V0UG9saWN5IGFwcGxpZXMgdG8gYSBDbG91ZEZyb250IE9BSVxuICovXG5mdW5jdGlvbiBjaGVja09BSVByaW5jaXBhbChwcmluY2lwYWxzOiBhbnkpOiBib29sZWFuIHtcbiAgY29uc3QgdXNlc0FXU1ByaW5jaXBhbE9BSSA9IEpTT04uc3RyaW5naWZ5KHByaW5jaXBhbHMuQVdTID8/ICcnKS5pbmNsdWRlcyhcbiAgICAnQ2xvdWRGcm9udCBPcmlnaW4gQWNjZXNzIElkZW50aXR5J1xuICApO1xuICBjb25zdCB1c2VzQ2Fub25pY2FsVXNlclByaW5jaXBhbCA9ICEhcHJpbmNpcGFscz8uQ2Fub25pY2FsVXNlcjtcbiAgcmV0dXJuIHVzZXNBV1NQcmluY2lwYWxPQUkgfHwgdXNlc0Nhbm9uaWNhbFVzZXJQcmluY2lwYWw7XG59XG5cbi8qKlxuICogSGVscGVyIGZ1bmN0aW9uIHRvIGNoZWNrIHdoZXRoZXIgdGhlIHN0YXRlbWVudCBhcHBsaWVzIHRvIG9ubHkgR2V0T2JqZWN0IGFuZC9vciBQdXRPYmplY3QgYWN0aW9uc1xuICogQHBhcmFtIG5vZGUgVGhlIHN0YXRlbWVudCB0byBjaGVja1xuICogQHBhcmFtIGFjdGlvbnMgVGhlIGFjdGlvbiBpbiB0aGUgYnVja2V0IHN0YXRlbWVudFxuICogQHJldHVybnMgV2hldGhlciB0aGUgc3RhdGVtZW50IGFwcGxpZXMgdG8gb25seSBHZXRPYmplY3QgYW5kL29yIFB1dE9iamVjdCBhY3Rpb25zXG4gKi9cbmZ1bmN0aW9uIGNoZWNrTWF0Y2hpbmdBY3Rpb25zKGFjdGlvbnM6IHN0cmluZ1tdKTogYm9vbGVhbiB7XG4gIGZvciAoY29uc3QgYWN0aW9uIG9mIGFjdGlvbnMpIHtcbiAgICBpZiAoXG4gICAgICBhY3Rpb24udG9Mb3dlckNhc2UoKSAhPT0gJ3MzOmdldG9iamVjdCcgJiZcbiAgICAgIGFjdGlvbi50b0xvd2VyQ2FzZSgpICE9PSAnczM6cHV0b2JqZWN0J1xuICAgICkge1xuICAgICAgcmV0dXJuIGZhbHNlO1xuICAgIH1cbiAgfVxuICByZXR1cm4gdHJ1ZTtcbn1cblxuZnVuY3Rpb24gbm9ybWFsaXplQXJyYXk8VD4oYXJyT3JTdHI6IFRbXSB8IFQpOiBUW10ge1xuICByZXR1cm4gQXJyYXkuaXNBcnJheShhcnJPclN0cikgPyBhcnJPclN0ciA6IFthcnJPclN0cl07XG59XG4iXX0=
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.S3WebBucketOAIAccess = exports.S3DefaultEncryptionKMS = exports.S3BucketVersioningEnabled = exports.S3BucketSSLRequestsOnly = exports.S3BucketReplicationEnabled = exports.S3BucketPublicWriteProhibited = exports.S3BucketPublicReadProhibited = exports.S3BucketLoggingEnabled = exports.S3BucketLevelPublicAccessProhibited = exports.S3BucketDefaultLockEnabled = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -24,4 +25,4 @@ var S3DefaultEncryptionKMS_1 = require("./S3DefaultEncryptionKMS");
|
|
|
24
25
|
Object.defineProperty(exports, "S3DefaultEncryptionKMS", { enumerable: true, get: function () { return S3DefaultEncryptionKMS_1.default; } });
|
|
25
26
|
var S3WebBucketOAIAccess_1 = require("./S3WebBucketOAIAccess");
|
|
26
27
|
Object.defineProperty(exports, "S3WebBucketOAIAccess", { enumerable: true, get: function () { return S3WebBucketOAIAccess_1.default; } });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
28
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.d.ts
CHANGED
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SageMaker endpoints utilize a KMS key
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerEndpointConfigurationKMSKeyConfigured.js
CHANGED
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SageMaker notebook instances are provisioned inside a VPC
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.d.ts
CHANGED
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SageMaker notebook instances utilize KMS keys for encryption at rest
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookInstanceKMSKeyConfigured.js
CHANGED
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/node_modules/cdk-nag/lib/rules/sagemaker/SageMakerNotebookNoDirectInternetAccess.d.ts
CHANGED
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SageMaker notebook instances have direct internet access disabled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -4,6 +4,7 @@ Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
|
4
4
|
SPDX-License-Identifier: Apache-2.0
|
|
5
5
|
*/
|
|
6
6
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
+
exports.SageMakerNotebookInstanceKMSKeyConfigured = exports.SageMakerNotebookInVPC = exports.SageMakerNotebookNoDirectInternetAccess = exports.SageMakerEndpointConfigurationKMSKeyConfigured = void 0;
|
|
7
8
|
var SageMakerEndpointConfigurationKMSKeyConfigured_1 = require("./SageMakerEndpointConfigurationKMSKeyConfigured");
|
|
8
9
|
Object.defineProperty(exports, "SageMakerEndpointConfigurationKMSKeyConfigured", { enumerable: true, get: function () { return SageMakerEndpointConfigurationKMSKeyConfigured_1.default; } });
|
|
9
10
|
var SageMakerNotebookNoDirectInternetAccess_1 = require("./SageMakerNotebookNoDirectInternetAccess");
|
|
@@ -12,4 +13,4 @@ var SageMakerNotebookInVPC_1 = require("./SageMakerNotebookInVPC");
|
|
|
12
13
|
Object.defineProperty(exports, "SageMakerNotebookInVPC", { enumerable: true, get: function () { return SageMakerNotebookInVPC_1.default; } });
|
|
13
14
|
var SageMakerNotebookInstanceKMSKeyConfigured_1 = require("./SageMakerNotebookInstanceKMSKeyConfigured");
|
|
14
15
|
Object.defineProperty(exports, "SageMakerNotebookInstanceKMSKeyConfigured", { enumerable: true, get: function () { return SageMakerNotebookInstanceKMSKeyConfigured_1.default; } });
|
|
15
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
16
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Secrets have automatic rotation scheduled
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -50,7 +50,7 @@ exports.default = Object.defineProperty((node) => {
|
|
|
50
50
|
else {
|
|
51
51
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
52
52
|
}
|
|
53
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
53
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
54
54
|
/**
|
|
55
55
|
* Helper function to check whether a given Secret Target Attachment is associated with the given secret.
|
|
56
56
|
* @param node The CfnTargetAttachment to check.
|
|
@@ -91,4 +91,4 @@ function isMatchingRotationSchedule(node, secretLogicalId, secretTargetAttachmen
|
|
|
91
91
|
}
|
|
92
92
|
return false;
|
|
93
93
|
}
|
|
94
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
94
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* Secrets are encrypted with KMS Customer managed keys
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|
|
@@ -23,5 +23,5 @@ exports.default = Object.defineProperty((node) => {
|
|
|
23
23
|
else {
|
|
24
24
|
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
25
|
}
|
|
26
|
-
}, 'name', { value: path_1.parse(__filename).name });
|
|
27
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SecretsManagerUsingKMSKey = exports.SecretsManagerRotationEnabled = void 0;
|
|
3
4
|
/*
|
|
4
5
|
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
6
|
SPDX-License-Identifier: Apache-2.0
|
|
@@ -8,4 +9,4 @@ var SecretsManagerRotationEnabled_1 = require("./SecretsManagerRotationEnabled")
|
|
|
8
9
|
Object.defineProperty(exports, "SecretsManagerRotationEnabled", { enumerable: true, get: function () { return SecretsManagerRotationEnabled_1.default; } });
|
|
9
10
|
var SecretsManagerUsingKMSKey_1 = require("./SecretsManagerUsingKMSKey");
|
|
10
11
|
Object.defineProperty(exports, "SecretsManagerUsingKMSKey", { enumerable: true, get: function () { return SecretsManagerUsingKMSKey_1.default; } });
|
|
11
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
12
|
+
//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi8uLi9zcmMvcnVsZXMvc2VjcmV0c21hbmFnZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUE7OztFQUdFO0FBQ0YsaUZBQTJGO0FBQWxGLDhJQUFBLE9BQU8sT0FBaUM7QUFDakQseUVBQW1GO0FBQTFFLHNJQUFBLE9BQU8sT0FBNkIiLCJzb3VyY2VzQ29udGVudCI6WyIvKlxuQ29weXJpZ2h0IEFtYXpvbi5jb20sIEluYy4gb3IgaXRzIGFmZmlsaWF0ZXMuIEFsbCBSaWdodHMgUmVzZXJ2ZWQuXG5TUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuKi9cbmV4cG9ydCB7IGRlZmF1bHQgYXMgU2VjcmV0c01hbmFnZXJSb3RhdGlvbkVuYWJsZWQgfSBmcm9tICcuL1NlY3JldHNNYW5hZ2VyUm90YXRpb25FbmFibGVkJztcbmV4cG9ydCB7IGRlZmF1bHQgYXMgU2VjcmV0c01hbmFnZXJVc2luZ0tNU0tleSB9IGZyb20gJy4vU2VjcmV0c01hbmFnZXJVc2luZ0tNU0tleSc7XG4iXX0=
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
3
|
+
/**
|
|
4
|
+
* SNS topics are encrypted via KMS
|
|
5
|
+
* @param node the CfnResource to check
|
|
6
|
+
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
8
|
+
export default _default;
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
/*
|
|
4
|
+
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
|
|
5
|
+
SPDX-License-Identifier: Apache-2.0
|
|
6
|
+
*/
|
|
7
|
+
const path_1 = require("path");
|
|
8
|
+
const aws_cdk_lib_1 = require("aws-cdk-lib");
|
|
9
|
+
const aws_sns_1 = require("aws-cdk-lib/aws-sns");
|
|
10
|
+
const nag_rules_1 = require("../../nag-rules");
|
|
11
|
+
/**
|
|
12
|
+
* SNS topics are encrypted via KMS
|
|
13
|
+
* @param node the CfnResource to check
|
|
14
|
+
*/
|
|
15
|
+
exports.default = Object.defineProperty((node) => {
|
|
16
|
+
if (node instanceof aws_sns_1.CfnTopic) {
|
|
17
|
+
const topicKey = aws_cdk_lib_1.Stack.of(node).resolve(node.kmsMasterKeyId);
|
|
18
|
+
if (topicKey == undefined) {
|
|
19
|
+
return nag_rules_1.NagRuleCompliance.NON_COMPLIANT;
|
|
20
|
+
}
|
|
21
|
+
return nag_rules_1.NagRuleCompliance.COMPLIANT;
|
|
22
|
+
}
|
|
23
|
+
else {
|
|
24
|
+
return nag_rules_1.NagRuleCompliance.NOT_APPLICABLE;
|
|
25
|
+
}
|
|
26
|
+
}, 'name', { value: (0, path_1.parse)(__filename).name });
|
|
27
|
+
//# sourceMappingURL=data:application/json;base64,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
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
-
|
|
1
|
+
import { CfnResource } from 'aws-cdk-lib';
|
|
2
|
+
import { NagRuleCompliance } from '../../nag-rules';
|
|
2
3
|
/**
|
|
3
4
|
* SNS topics require SSL requests for publishing
|
|
4
5
|
* @param node the CfnResource to check
|
|
5
6
|
*/
|
|
7
|
+
declare const _default: (node: CfnResource) => NagRuleCompliance;
|
|
6
8
|
export default _default;
|