github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/aws/rds/specify_backup_retention.tf.go (about) 1 package rds 2 3 var terraformSpecifyBackupRetentionGoodExamples = []string{ 4 ` 5 resource "aws_rds_cluster" "good_example" { 6 cluster_identifier = "aurora-cluster-demo" 7 engine = "aurora-mysql" 8 engine_version = "5.7.mysql_aurora.2.03.2" 9 availability_zones = ["us-west-2a", "us-west-2b", "us-west-2c"] 10 database_name = "mydb" 11 master_username = "foo" 12 master_password = "bar" 13 backup_retention_period = 5 14 preferred_backup_window = "07:00-09:00" 15 } 16 17 `, ` 18 resource "aws_db_instance" "good_example" { 19 allocated_storage = 10 20 engine = "mysql" 21 engine_version = "5.7" 22 instance_class = "db.t3.micro" 23 name = "mydb" 24 username = "foo" 25 password = "foobarbaz" 26 parameter_group_name = "default.mysql5.7" 27 backup_retention_period = 5 28 skip_final_snapshot = true 29 } 30 `, 31 } 32 33 var terraformSpecifyBackupRetentionBadExamples = []string{ 34 ` 35 resource "aws_db_instance" "bad_example" { 36 allocated_storage = 10 37 engine = "mysql" 38 engine_version = "5.7" 39 instance_class = "db.t3.micro" 40 name = "mydb" 41 username = "foo" 42 password = "foobarbaz" 43 parameter_group_name = "default.mysql5.7" 44 skip_final_snapshot = true 45 } 46 `, ` 47 resource "aws_rds_cluster" "bad_example" { 48 cluster_identifier = "aurora-cluster-demo" 49 engine = "aurora-mysql" 50 engine_version = "5.7.mysql_aurora.2.03.2" 51 availability_zones = ["us-west-2a", "us-west-2b", "us-west-2c"] 52 database_name = "mydb" 53 master_username = "foo" 54 master_password = "bar" 55 preferred_backup_window = "07:00-09:00" 56 } 57 `, 58 } 59 60 var terraformSpecifyBackupRetentionLinks = []string{ 61 `https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/rds_cluster#backup_retention_period`, `https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/db_instance#backup_retention_period`, 62 } 63 64 var terraformSpecifyBackupRetentionRemediationMarkdown = ``