Code

Feat/use security hub severity levels#41

Code

Merged

bensonce merged 17 commits intomainniaid/terraform-aws-managed-config-rules:mainfrom

feat/use-security-hub-severity-levelsniaid/terraform-aws-managed-config-rules:feat/use-security-hub-severity-levelsCopy head branch name to clipboard

May 30, 2024

Commits

Commits on May 23, 2024

• Add functionality for using Config Rule severity levels set by Security Hub controls

  bensonce

  committed
  21f8cf9

  Copy full SHA for 21f8cf9

• Update rule severity levels suggested by Security Hub

  bensonce

  committed
  4e7a231

  Copy full SHA for 4e7a231

Commits on May 24, 2024

• Get changes, run tflint and terraform fmt, and only commit if changes are detected

  bensonce

  committed
  db0fcdc

  Copy full SHA for db0fcdc

• Changes to update-rules workflow

  bensonce

  committed
  28ec90b

  Copy full SHA for 28ec90b

• Changes to the updates-rules workflow

  bensonce

  committed
  4d2ff5e

  Copy full SHA for 4d2ff5e

• Changes to update-rules workflow

  bensonce

  committed
  44ed66d

  Copy full SHA for 44ed66d

• More workflow changes

  bensonce

  committed
  ef337c0

  Copy full SHA for ef337c0

• Revert changes for testing

  bensonce

  committed
  682e599

  Copy full SHA for 682e599

• Fixed an issue where the incorrect rule identifier was returned when the config rule name and its identifier didn't match. This is necessary because the Security Hub controls use the rule name, not…

  Show description for 5575958
  bensonce

  committed
  5575958

  Copy full SHA for 5575958

Commits on May 25, 2024

• Fixed an issue where the severity levels were being set incorrectly for some rules

  bensonce

  committed
  5390b4c

  Copy full SHA for 5390b4c

Commits on May 29, 2024

• Pass output file path as argument when generating config rule data

  bensonce

  committed
  79d279e

  Copy full SHA for 79d279e

• Add functionality for loading both YAML and JSON source files

  bensonce

  committed
  d6a0653

  Copy full SHA for d6a0653

• Pass path as argument when running 'terraform fmt', add logging

  bensonce

  committed
  56e6c70

  Copy full SHA for 56e6c70

• Add functionality for setting severity level overrides per rule. These overrides replace severities set by Security Hub and are maintained manually.

  bensonce

  committed
  f40ef4b

  Copy full SHA for f40ef4b

• Set custom severity levels for rules based on research and suggestiongs from internal teams

  bensonce

  committed
  51258c1

  Copy full SHA for 51258c1

Commits on May 30, 2024

• Merge branch 'main' into feat/use-security-hub-severity-levels

  bensonce

  committed
  b028f38

  Copy full SHA for b028f38

• Apply severity overrides to the latest list of Config Rules

  bensonce

  committed
  d8ba8ea

  Copy full SHA for d8ba8ea