feat(queries): add 20 new Terraform AWS queries with auto-remediation support

[cx-antero-silva]

Summary

20 new Terraform AWS security queries (Beta)

New queries covering security misconfigurations across IAM, networking, encryption, logging, and access control.

Auto-remediation support added to 5 queries

The following queries include remediation and remediationType fields, enabling the kics remediate command to automatically fix detected issues:

Query	Issue type	Remediation
amazon_dms_replication_instance_is_publicly_accessible	IncorrectValue	publicly_accessible true → false
cloudformation_stack_termination_protection_disabled	MissingAttribute	add termination_protection = true
cloudformation_stack_termination_protection_disabled	IncorrectValue	termination_protection false → true
ecs_services_assigned_with_public_ip_address	IncorrectValue	assign_public_ip true → false (resource + module)
mq_broker_logging_disabled	IncorrectValue	log flag false → true
mq_broker_logging_disabled	MissingAttribute	add missing general/audit key
mq_broker_logging_disabled	MissingAttribute	add missing logs { general = true / audit = true } block
rds_cluster_with_backup_disabled	MissingAttribute	add backup_retention_period = 7

Remediation patterns used

• replacement → json.marshal({"before": "<current>", "after": "<desired>"}) for IncorrectValue
• addition → plain string "key = value" or multiline block for MissingAttribute

Test plan

• Verify all 20 new queries produce findings on their positive test fixtures
• Verify no findings on negative test fixtures
• For the 5 auto-remediation queries: run kics scan and confirm remediation and remediation_type appear in JSON output
• Run kics remediate and verify Terraform files are patched correctly

[kicsbot]

Your pull request can't be merged due to missing the Apache license statement.

Please add the following statement at the end of the pr description:

I submit this contribution under the Apache-2.0 license.

In case the statement has already been added, make sure it is the last sentence in the description and the only one in its line.

Thank you!
KICS Team