github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/google/compute/enable_vpc_flow_logs.tf.go (about)

     1  package compute
     2  
     3  var terraformEnableVpcFlowLogsGoodExamples = []string{
     4  	`
     5  resource "google_compute_subnetwork" "good_example" {
     6    name          = "test-subnetwork"
     7    ip_cidr_range = "10.2.0.0/16"
     8    region        = "us-central1"
     9    network       = google_compute_network.custom-test.id
    10    secondary_ip_range {
    11      range_name    = "tf-test-secondary-range-update1"
    12      ip_cidr_range = "192.168.10.0/24"
    13    }
    14    log_config {
    15      aggregation_interval = "INTERVAL_10_MIN"
    16      flow_sampling        = 0.5
    17      metadata             = "INCLUDE_ALL_METADATA"
    18    }
    19  }
    20  resource "google_compute_network" "custom-test" {
    21    name                    = "test-network"
    22    auto_create_subnetworks = false
    23  }
    24  `,
    25  }
    26  
    27  var terraformEnableVpcFlowLogsBadExamples = []string{
    28  	`
    29  resource "google_compute_subnetwork" "bad_example" {
    30    name          = "test-subnetwork"
    31    ip_cidr_range = "10.2.0.0/16"
    32    region        = "us-central1"
    33    network       = google_compute_network.custom-test.id
    34    secondary_ip_range {
    35      range_name    = "tf-test-secondary-range-update1"
    36      ip_cidr_range = "192.168.10.0/24"
    37    }
    38  }
    39  resource "google_compute_network" "custom-test" {
    40    name                    = "test-network"
    41    auto_create_subnetworks = false
    42  }
    43  `,
    44  }
    45  
    46  var terraformEnableVpcFlowLogsLinks = []string{
    47  	`https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_subnetwork#enable_flow_logs`,
    48  }
    49  
    50  var terraformEnableVpcFlowLogsRemediationMarkdown = ``