Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CKV2_AWS_49: False positive when endpoint_type not hardcoded #6955

Open
DzeryCZ opened this issue Jan 17, 2025 · 0 comments
Open

CKV2_AWS_49: False positive when endpoint_type not hardcoded #6955

DzeryCZ opened this issue Jan 17, 2025 · 0 comments
Labels
checks Check additions or changes

Comments

@DzeryCZ
Copy link

DzeryCZ commented Jan 17, 2025

Describe the issue
CKV2_AWS_49 has false positives when endpoint_type not hardcoded
This check fails, when using a variable and endpoint_type is not set strictly to source or target.

Examples

resource "aws_dms_endpoint" "endpoint" {
  endpoint_type          = var.type    #<- not set strictly to `source` or `target` string
  engine_name            = "postgres"
  ssl_mode                   = "require"
  ...
}

Version (please complete the following information):

  • Checkov Version 3.2.353

Additional context
N/A

@DzeryCZ DzeryCZ added the checks Check additions or changes label Jan 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
checks Check additions or changes
Projects
None yet
Development

No branches or pull requests

1 participant