-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
test: infracost integration #32
Conversation
resource "aws_lambda_function" "my_hello_world" { | ||
runtime = "nodejs12.x" | ||
handler = "exports.test" | ||
image_uri = "test" | ||
function_name = "test" | ||
role = "arn:aws:ec2:us-east-1:123123123123:instance/i-1231231231" | ||
|
||
memory_size = 512 | ||
tags = { | ||
Environment = "Prod" | ||
} | ||
} |
Check notice
Code scanning / Trivy
Lambda functions should have X-Ray tracing enabled Low
Type: terraform
Vulnerability AVD-AWS-0066
Severity: LOW
Message: Function does not have tracing enabled.
Link: AVD-AWS-0066
Infracost report💰 Monthly cost will not changeGovernance checks🟢 50 passed
View report in Infracost Cloud. This comment will be updated when code changes. |
resource "aws_instance" "my_web_app" { | ||
ami = "ami-005e54dee72cc1d00" | ||
|
||
instance_type = "m3.xlarge" | ||
|
||
tags = { | ||
Environment = "production" | ||
Service = "web-app" | ||
} | ||
|
||
root_block_device { | ||
volume_size = 1000 | ||
} | ||
} |
Check failure
Code scanning / Trivy
aws_instance should activate session tokens for Instance Metadata Service. High
Type: terraform
Vulnerability AVD-AWS-0028
Severity: HIGH
Message: Instance does not require IMDS access to require a token
Link: AVD-AWS-0028
resource "aws_instance" "my_web_app" { | ||
ami = "ami-005e54dee72cc1d00" | ||
|
||
instance_type = "m3.xlarge" | ||
|
||
tags = { | ||
Environment = "production" | ||
Service = "web-app" | ||
} | ||
|
||
root_block_device { | ||
volume_size = 1000 | ||
} | ||
} |
Check failure
Code scanning / Trivy
Instance with unencrypted block device. High
Type: terraform
Vulnerability AVD-AWS-0131
Severity: HIGH
Message: Root block device is not encrypted.
Link: AVD-AWS-0131
No description provided.