github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/rules/cloud/policies/google/compute/no_ip_forwarding.tf.go (about)

     1  package compute
     2  
     3  var terraformNoIpForwardingGoodExamples = []string{
     4  	`
     5   resource "google_compute_instance" "good_example" {
     6     name         = "test"
     7     machine_type = "e2-medium"
     8     zone         = "us-central1-a"
     9   
    10     boot_disk {
    11       initialize_params {
    12         image = "debian-cloud/debian-9"
    13       }
    14     }
    15   
    16     // Local SSD disk
    17     scratch_disk {
    18       interface = "SCSI"
    19     }
    20     
    21     can_ip_forward = false
    22   }
    23   `,
    24  }
    25  
    26  var terraformNoIpForwardingBadExamples = []string{
    27  	`
    28   resource "google_compute_instance" "bad_example" {
    29     name         = "test"
    30     machine_type = "e2-medium"
    31     zone         = "us-central1-a"
    32   
    33     boot_disk {
    34       initialize_params {
    35         image = "debian-cloud/debian-9"
    36       }
    37     }
    38   
    39     // Local SSD disk
    40     scratch_disk {
    41       interface = "SCSI"
    42     }
    43   
    44     can_ip_forward = true
    45   }
    46   `,
    47  }
    48  
    49  var terraformNoIpForwardingLinks = []string{
    50  	`https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/compute_instance#can_ip_forward`,
    51  }
    52  
    53  var terraformNoIpForwardingRemediationMarkdown = ``