Skip to content

Commit 99ca314

Browse files
committed
fix checkov finding
1 parent 0b466b7 commit 99ca314

File tree

1 file changed

+2
-1
lines changed
  • aws_sra_examples/terraform/solutions/guard_duty/gd_configuration

1 file changed

+2
-1
lines changed

aws_sra_examples/terraform/solutions/guard_duty/gd_configuration/main.tf

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,7 @@ data "aws_iam_policy_document" "sra_guardduty_org_policy_cloudformation" {
5959
}
6060

6161
data "aws_iam_policy_document" "sra_guardduty_org_policy_acct" {
62+
#checkov:skip=CKV_AWS_356: Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions
6263
statement {
6364
sid = "AcctListRegions"
6465
effect = "Allow"
@@ -485,4 +486,4 @@ resource "aws_sns_topic_subscription" "guardduty_dlq_alarm_subscription" {
485486
topic_arn = aws_sns_topic.guardduty_dlq_alarm_topic[0].arn
486487
protocol = "email"
487488
endpoint = var.sra_alarm_email
488-
}
489+
}

0 commit comments

Comments
 (0)