github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/aws/documentdb/enable_storage_encryption.tf.go (about)

     1  package documentdb
     2  
     3  var terraformEnableStorageEncryptionGoodExamples = []string{
     4  	`
     5   resource "aws_docdb_cluster" "good_example" {
     6     cluster_identifier      = "my-docdb-cluster"
     7     engine                  = "docdb"
     8     master_username         = "foo"
     9     master_password         = "mustbeeightchars"
    10     backup_retention_period = 5
    11     preferred_backup_window = "07:00-09:00"
    12     skip_final_snapshot     = true
    13     storage_encrypted = true
    14   }
    15   `,
    16  }
    17  
    18  var terraformEnableStorageEncryptionBadExamples = []string{
    19  	`
    20   resource "aws_docdb_cluster" "bad_example" {
    21     cluster_identifier      = "my-docdb-cluster"
    22     engine                  = "docdb"
    23     master_username         = "foo"
    24     master_password         = "mustbeeightchars"
    25     backup_retention_period = 5
    26     preferred_backup_window = "07:00-09:00"
    27     skip_final_snapshot     = true
    28     storage_encrypted = false
    29   }
    30   `,
    31  }
    32  
    33  var terraformEnableStorageEncryptionLinks = []string{
    34  	`https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/docdb_cluster#storage_encrypted`,
    35  }
    36  
    37  var terraformEnableStorageEncryptionRemediationMarkdown = ``