github.com/wata727/tflint@v0.12.2-0.20191013070026-96dd0d36f385/rules/awsrules/models/aws_kms_key_invalid_key_usage.go (about)

     1  // This file generated by `tools/model-rule-gen/main.go`. DO NOT EDIT
     2  
     3  package models
     4  
     5  import (
     6  	"log"
     7  
     8  	hcl "github.com/hashicorp/hcl/v2"
     9  	"github.com/wata727/tflint/tflint"
    10  )
    11  
    12  // AwsKmsKeyInvalidKeyUsageRule checks the pattern is valid
    13  type AwsKmsKeyInvalidKeyUsageRule struct {
    14  	resourceType  string
    15  	attributeName string
    16  	enum          []string
    17  }
    18  
    19  // NewAwsKmsKeyInvalidKeyUsageRule returns new rule with default attributes
    20  func NewAwsKmsKeyInvalidKeyUsageRule() *AwsKmsKeyInvalidKeyUsageRule {
    21  	return &AwsKmsKeyInvalidKeyUsageRule{
    22  		resourceType:  "aws_kms_key",
    23  		attributeName: "key_usage",
    24  		enum: []string{
    25  			"ENCRYPT_DECRYPT",
    26  		},
    27  	}
    28  }
    29  
    30  // Name returns the rule name
    31  func (r *AwsKmsKeyInvalidKeyUsageRule) Name() string {
    32  	return "aws_kms_key_invalid_key_usage"
    33  }
    34  
    35  // Enabled returns whether the rule is enabled by default
    36  func (r *AwsKmsKeyInvalidKeyUsageRule) Enabled() bool {
    37  	return true
    38  }
    39  
    40  // Severity returns the rule severity
    41  func (r *AwsKmsKeyInvalidKeyUsageRule) Severity() string {
    42  	return tflint.ERROR
    43  }
    44  
    45  // Link returns the rule reference link
    46  func (r *AwsKmsKeyInvalidKeyUsageRule) Link() string {
    47  	return ""
    48  }
    49  
    50  // Check checks the pattern is valid
    51  func (r *AwsKmsKeyInvalidKeyUsageRule) Check(runner *tflint.Runner) error {
    52  	log.Printf("[TRACE] Check `%s` rule for `%s` runner", r.Name(), runner.TFConfigPath())
    53  
    54  	return runner.WalkResourceAttributes(r.resourceType, r.attributeName, func(attribute *hcl.Attribute) error {
    55  		var val string
    56  		err := runner.EvaluateExpr(attribute.Expr, &val)
    57  
    58  		return runner.EnsureNoError(err, func() error {
    59  			found := false
    60  			for _, item := range r.enum {
    61  				if item == val {
    62  					found = true
    63  				}
    64  			}
    65  			if !found {
    66  				runner.EmitIssue(
    67  					r,
    68  					`key_usage is not a valid value`,
    69  					attribute.Expr.Range(),
    70  				)
    71  			}
    72  			return nil
    73  		})
    74  	})
    75  }