Skip to content

Gomboc CLI Scan - AWS/Terraform - #2

Open
gomboc-ai-dev-gcp[bot] wants to merge 2 commits into
masterfrom
master-remediated-43ef10c2-c1ec-462a-9d58-c42693e01b60-2063
Open

gomboc-ai-dev-gcp[bot] wants to merge 2 commits into
masterfrom
master-remediated-43ef10c2-c1ec-462a-9d58-c42693e01b60-2063

Conversation

@gomboc-ai-dev-gcp

Copy link
Copy Markdown

This fix was produced in response to a scan request in the Gomboc Portal on the following target:

Repository Branch Directory
GC-Testing-Org/DetectionLab master AWS/Terraform
Rules with observations 3
Affected resources 4
Resource types 1
Code fixes 12
Files modified 1

A complete log of the request can be found here.

Recommendation Resources Observations
Deletion Protection 4 4
Dedicated Tenancy 4 4
Detailed Monitoring 4 4

These recommendations come from the following benchmarks

Benchmark
Gomboc Best Practices CIS Critical Security Controls v8.1 (AWS)
CIS Critical Security Controls v8.1
Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)
AWS Well Architected 2024-11-06
Gomboc Best Practices AWS Well Architected 2024-06-27 (AWS)
AWS Well Architected 2024-06-27
Gomboc Best Practices NIST 2.0.0 (AWS)
NIST 2.0.0

View the details on Gomboc's Portal

Comment thread AWS/Terraform/main.tf
delete_on_termination = true
volume_size = 64
}
tenancy = "dedicated"

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.206 Recommended applying Dedicated Tenancy:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)

Comment thread AWS/Terraform/main.tf
volume_size = 64
}
tenancy = "dedicated"
disable_api_termination = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.207 Recommended applying Deletion Protection:
    • Gomboc Best Practices CIS Critical Security Controls v8.1 (AWS)
    • CIS Critical Security Controls v8.1

Comment thread AWS/Terraform/main.tf
}
tenancy = "dedicated"
disable_api_termination = true
monitoring = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.208 Recommended applying Detailed Monitoring:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)
    • AWS Well Architected 2024-11-06

Comment thread AWS/Terraform/main.tf
root_block_device {
delete_on_termination = true
}
tenancy = "dedicated"

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.253 Recommended applying Dedicated Tenancy:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)

Comment thread AWS/Terraform/main.tf
delete_on_termination = true
}
tenancy = "dedicated"
disable_api_termination = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.254 Recommended applying Deletion Protection:
    • Gomboc Best Practices CIS Critical Security Controls v8.1 (AWS)
    • CIS Critical Security Controls v8.1

Comment thread AWS/Terraform/main.tf
}
tenancy = "dedicated"
disable_api_termination = true
monitoring = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.255 Recommended applying Detailed Monitoring:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)
    • AWS Well Architected 2024-11-06

Comment thread AWS/Terraform/main.tf
root_block_device {
delete_on_termination = true
}
tenancy = "dedicated"

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.300 Recommended applying Dedicated Tenancy:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)

Comment thread AWS/Terraform/main.tf
delete_on_termination = true
}
tenancy = "dedicated"
disable_api_termination = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.301 Recommended applying Deletion Protection:
    • Gomboc Best Practices CIS Critical Security Controls v8.1 (AWS)
    • CIS Critical Security Controls v8.1

Comment thread AWS/Terraform/main.tf
}
tenancy = "dedicated"
disable_api_termination = true
monitoring = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.302 Recommended applying Detailed Monitoring:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)
    • AWS Well Architected 2024-11-06

Comment thread AWS/Terraform/main.tf
delete_on_termination = true
}
}
tenancy = "dedicated"

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.347 Recommended applying Dedicated Tenancy:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)

Comment thread AWS/Terraform/main.tf
}
}
tenancy = "dedicated"
disable_api_termination = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.348 Recommended applying Deletion Protection:
    • Gomboc Best Practices CIS Critical Security Controls v8.1 (AWS)
    • CIS Critical Security Controls v8.1

Comment thread AWS/Terraform/main.tf
}
tenancy = "dedicated"
disable_api_termination = true
monitoring = true

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • l.349 Recommended applying Detailed Monitoring:
    • Gomboc Best Practices AWS Well Architected 2024-11-06 (AWS)
    • AWS Well Architected 2024-11-06

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants