Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

test: infracost integration #32

Closed
wants to merge 4 commits into from
Closed

test: infracost integration #32

wants to merge 4 commits into from

Conversation

stefanfreitag
Copy link
Owner

No description provided.

infracost_test.tf Fixed Show fixed Hide fixed
Comment on lines +16 to +27
resource "aws_lambda_function" "my_hello_world" {
runtime = "nodejs12.x"
handler = "exports.test"
image_uri = "test"
function_name = "test"
role = "arn:aws:ec2:us-east-1:123123123123:instance/i-1231231231"

memory_size = 512
tags = {
Environment = "Prod"
}
}

Check notice

Code scanning / Trivy

Lambda functions should have X-Ray tracing enabled Low

Artifact: infracost_test.tf
Type: terraform
Vulnerability AVD-AWS-0066
Severity: LOW
Message: Function does not have tracing enabled.
Link: AVD-AWS-0066
infracost_test.tf Fixed Show fixed Hide fixed
Copy link

infracost bot commented Mar 21, 2024

Infracost report

💰 Monthly cost will not change

Governance checks

🟢 50 passed
50 FinOps policies passed.

View report in Infracost Cloud. This comment will be updated when code changes.

Comment on lines +1 to +14
resource "aws_instance" "my_web_app" {
ami = "ami-005e54dee72cc1d00"

instance_type = "m3.xlarge"

tags = {
Environment = "production"
Service = "web-app"
}

root_block_device {
volume_size = 1000
}
}

Check failure

Code scanning / Trivy

aws_instance should activate session tokens for Instance Metadata Service. High

Artifact: infracost_test.tf
Type: terraform
Vulnerability AVD-AWS-0028
Severity: HIGH
Message: Instance does not require IMDS access to require a token
Link: AVD-AWS-0028
Comment on lines +1 to +14
resource "aws_instance" "my_web_app" {
ami = "ami-005e54dee72cc1d00"

instance_type = "m3.xlarge"

tags = {
Environment = "production"
Service = "web-app"
}

root_block_device {
volume_size = 1000
}
}

Check failure

Code scanning / Trivy

Instance with unencrypted block device. High

Artifact: infracost_test.tf
Type: terraform
Vulnerability AVD-AWS-0131
Severity: HIGH
Message: Root block device is not encrypted.
Link: AVD-AWS-0131
@stefanfreitag stefanfreitag deleted the infracost_test branch March 21, 2024 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants