File tree Expand file tree Collapse file tree 2 files changed +4
-0
lines changed Expand file tree Collapse file tree 2 files changed +4
-0
lines changed Original file line number Diff line number Diff line change 1
1
resource "aws_security_group" "ecs_sg" {
2
2
# checkov:skip=CKV2_AWS_5:Security group is attached to another resource
3
+ # checkov:skip=CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
3
4
name = " ecs-sg-${ var . name } "
4
5
description = " Allow inbound traffic"
5
6
vpc_id = data. aws_vpc . default . id
@@ -38,6 +39,7 @@ resource "aws_security_group" "lb_public_sg" {
38
39
}
39
40
40
41
resource "aws_security_group_rule" "lb_sg_allow_all" {
42
+ # checkov:skip=CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
41
43
description = " Allow all outbound traffic"
42
44
type = " egress"
43
45
from_port = 0
Original file line number Diff line number Diff line change 1
1
resource "aws_security_group" "ecs_sg" {
2
2
# checkov:skip=CKV2_AWS_5:Security group is attached to another resource
3
+ # checkov:skip=CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
3
4
name = " ecs-sg-${ var . name } "
4
5
description = " Allow inbound traffic"
5
6
vpc_id = data. aws_vpc . default . id
@@ -38,6 +39,7 @@ resource "aws_security_group" "lb_public_sg" {
38
39
}
39
40
40
41
resource "aws_security_group_rule" "lb_sg_allow_all" {
42
+ # checkov:skip=CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
41
43
description = " Allow all outbound traffic"
42
44
type = " egress"
43
45
from_port = 0
You can’t perform that action at this time.
0 commit comments