configure precommit ci

[bushong1]

Fixes Issue: configure-precommit-ci

Description:

Security Impact Analysis Questionnaire

Submitter Checklist

• Is there an impact on Auditing and Logging procedures or capabilities?
• Is there an impact on Authentication procedures or capabilities?
• Is there an impact on Authorization procedures or capabilities?
• Is there an impact on Communication Security procedures or capabilities?
• Is there an impact on Cryptography procedures or capabilities?
• Is there an impact on Sensitive Data procedures or capabilities?
• Is there an impact on any other security-related procedures or capabilities?
• No security impacts identified.

Security Risks Identified - For any applicable items on the "Submitter Checklist," describe the impact of the change and any implemented mitigations.

[robo-gotham]

Snyk Scanning for Commit: 695d5b6

Snyk Infrastructure as Code

• Snyk testing Infrastructure as Code configuration issues.
  ✔ Test completed.

Issues

Medium Severity Issues: 1

[Medium] Kinesis data stream is not encrypted at rest
Info: Data stream is not encrypted at rest. Sensitive data processed by the
stream may be readable in the kinesis storage layer
Rule: https://security.snyk.io/rules/cloud/SNYK-CC-AWS-450
Path: resource > aws_kinesis_firehose_delivery_stream[panther_firehose] >
server_side_encryption
File: cwl_subscriptions/firehose.tf
Resolve: Set server_side_encryption.enabled attribute to true

---

Test Summary

Organization: batcave-ispg
Project name: CMS-Enterprise/batcave-tf-misc-modules

✔ Files without issues: 36
✗ Files with issues: 1
Ignored issues: 0
Total issues: 1 [ 0 critical, 0 high, 1 medium, 0 low ]

---

Report Complete

Your test results are available at: https://snyk.io/org/batcave-ispg/projects
under the name: CMS-Enterprise/batcave-tf-misc-modules