github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/aws/s3/block_public_policy.tf.go (about)

     1  package s3
     2  
     3  var terraformBlockPublicPolicyGoodExamples = []string{
     4  	`
     5  resource "aws_s3_bucket" "example" {
     6    bucket = "mybucket"
     7  }
     8  
     9  resource "aws_s3_bucket_public_access_block" "good_example" {
    10    bucket = aws_s3_bucket.example.id 
    11    block_public_policy = true 
    12  }
    13   `,
    14  }
    15  
    16  var terraformBlockPublicPolicyBadExamples = []string{
    17  	`
    18  resource "aws_s3_bucket" "example" {
    19    bucket = "mybucket"
    20  }
    21  
    22  resource "aws_s3_bucket_public_access_block" "bad_example" {
    23    bucket = aws_s3_bucket.example.id
    24  }
    25   
    26  resource "aws_s3_bucket_public_access_block" "bad_example" {
    27    bucket = aws_s3_bucket.example.id 
    28    block_public_policy = false
    29  }
    30   `,
    31  }
    32  
    33  var terraformBlockPublicPolicyLinks = []string{
    34  	`https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/s3_bucket_public_access_block#block_public_policy`,
    35  }
    36  
    37  var terraformBlockPublicPolicyRemediationMarkdown = ``