github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/aws/s3/block_public_acls.tf.go (about)

     1  package s3
     2  
     3  var terraformBlockPublicAclsGoodExamples = []string{
     4  	`
     5  resource "aws_s3_bucket" "good_example" {
     6    bucket = "mybucket"
     7  }
     8  
     9  resource "aws_s3_bucket_public_access_block" "good_example" {
    10    bucket = aws_s3_bucket.good_example.id
    11    block_public_acls = true
    12  }
    13   `,
    14  }
    15  
    16  var terraformBlockPublicAclsBadExamples = []string{
    17  	`
    18  resource "aws_s3_bucket" "bad_example" {
    19    bucket = "mybucket"
    20  }
    21  
    22  resource "aws_s3_bucket_public_access_block" "bad_example" {
    23    bucket = aws_s3_bucket.bad_example.id
    24  }
    25   `, `
    26  resource "aws_s3_bucket" "bad_example" {
    27    bucket = "mybucket"
    28  }
    29  
    30  resource "aws_s3_bucket_public_access_block" "bad_example" {
    31    bucket = aws_s3_bucket.bad_example.id
    32    block_public_acls = false
    33  }
    34   `,
    35  }
    36  
    37  var terraformBlockPublicAclsLinks = []string{
    38  	`https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_acls`,
    39  }
    40  
    41  var terraformBlockPublicAclsRemediationMarkdown = ``