github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/aws/ec2/no_excessive_port_access.cf.go (about)

     1  package ec2
     2  
     3  var cloudFormationNoExcessivePortAccessGoodExamples = []string{
     4  	`---
     5  AWSTemplateFormatVersion: 2010-09-09
     6  Description: Good example of excessive ports
     7  Resources: 
     8    NetworkACL:
     9      Type: AWS::EC2::NetworkAcl
    10      Properties:
    11        VpcId: "something"
    12  	  RuleAction: "allow"
    13    Rule:
    14      Type: AWS::EC2::NetworkAclEntry
    15      Properties:
    16        RuleAction: "allow"
    17        NetworkAclId:
    18          Ref: NetworkACL
    19        Protocol: 6
    20  `,
    21  }
    22  
    23  var cloudFormationNoExcessivePortAccessBadExamples = []string{
    24  	`---
    25  AWSTemplateFormatVersion: 2010-09-09
    26  Description: Bad example of excessive ports
    27  Resources:
    28    NetworkACL:
    29      Type: AWS::EC2::NetworkAcl
    30      Properties:
    31        VpcId: "something"
    32        RuleAction: "allow"
    33    Rule:
    34      Type: AWS::EC2::NetworkAclEntry
    35      Properties:
    36        NetworkAclId:
    37          Ref: NetworkACL
    38        Protocol: -1
    39        RuleAction: "allow"
    40  `,
    41  }
    42  
    43  var cloudFormationNoExcessivePortAccessLinks = []string{}
    44  
    45  var cloudFormationNoExcessivePortAccessRemediationMarkdown = ``