github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/aws/ecs/no_plaintext_secrets.tf.go (about) 1 package ecs 2 3 var terraformNoPlaintextSecretsGoodExamples = []string{ 4 ` 5 resource "aws_ecs_task_definition" "good_example" { 6 container_definitions = <<EOF 7 [ 8 { 9 "name": "my_service", 10 "essential": true, 11 "memory": 256, 12 "environment": [ 13 { "name": "ENVIRONMENT", "value": "development" } 14 ] 15 } 16 ] 17 EOF 18 19 } 20 `, 21 } 22 23 var terraformNoPlaintextSecretsBadExamples = []string{ 24 ` 25 resource "aws_ecs_task_definition" "bad_example" { 26 container_definitions = <<EOF 27 [ 28 { 29 "name": "my_service", 30 "essential": true, 31 "memory": 256, 32 "environment": [ 33 { "name": "ENVIRONMENT", "value": "development" }, 34 { "name": "DATABASE_PASSWORD", "value": "oh no D:"} 35 ] 36 } 37 ] 38 EOF 39 40 } 41 `, 42 } 43 44 var terraformNoPlaintextSecretsLinks = []string{ 45 `https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/ecs_task_definition`, 46 } 47 48 var terraformNoPlaintextSecretsRemediationMarkdown = ``