Skip to content
This repository has been archived by the owner on Sep 27, 2024. It is now read-only.

BATIAI-1750 - Update TF provider version #10

Merged
merged 4 commits into from
Jul 25, 2023

Conversation

CollectiveUnicorn
Copy link
Contributor

@CollectiveUnicorn CollectiveUnicorn commented Jul 20, 2023

Fixes Issue: BATIAI-1750

Description:

Updates the fargate version to 10.0.0 which uses a AWS provider version greater than 5.0

Security Impact Analysis Questionnaire

Submitter Checklist

  • Is there an impact on Auditing and Logging procedures or capabilities?
  • Is there an impact on Authentication procedures or capabilities?
  • Is there an impact on Authorization procedures or capabilities?
  • Is there an impact on Communication Security procedures or capabilities?
  • Is there an impact on Cryptography procedures or capabilities?
  • Is there an impact on Sensitive Data procedures or capabilities?
  • Is there an impact on any other security-related procedures or capabilities?
  • No security impacts identified.

Security Risks Identified - For any applicable items on the "Submitter Checklist," describe the impact of the change and any implemented mitigations.

@robo-gotham
Copy link

robo-gotham commented Jul 20, 2023

Snyk Scanning for Commit: 36e2f6b

Snyk Infrastructure as Code

  • Snyk testing Infrastructure as Code configuration issues.
    ✔ Test completed.

Issues

Low Severity Issues: 1

[Low] AWS Security Group allows open egress
Info: The inline security group rule allows open egress. Open egress can be
used to exfiltrate data to unauthorized destinations, and enable
access to potentially malicious resources
Rule: https://security.snyk.io/rules/cloud/SNYK-CC-TF-73
Path: resource > aws_security_group[alb_sg] > egress
File: main.tf
Resolve: Set egress.cidr_blocks attribute to specific ranges e.g.
192.168.1.0/24


Test Summary

Organization: batcave-ispg
Project name: CMS-Enterprise/batcave-tf-gatus

✔ Files without issues: 2
✗ Files with issues: 1
Ignored issues: 0
Total issues: 1 [ 0 critical, 0 high, 0 medium, 1 low ]


Report Complete

Your test results are available at: https://snyk.io/org/batcave-ispg/projects
under the name: CMS-Enterprise/batcave-tf-gatus

@CollectiveUnicorn CollectiveUnicorn requested a review from a team July 24, 2023 22:11
@CollectiveUnicorn CollectiveUnicorn merged commit cb0375e into main Jul 25, 2023
@CollectiveUnicorn CollectiveUnicorn deleted the BATIAI-1750-update-tf-providers-to-5-0 branch July 25, 2023 16:21
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants