Skip to content

Latest commit

 

History

History
1204 lines (1198 loc) · 439 KB

all.md

File metadata and controls

1204 lines (1198 loc) · 439 KB
layout title nav_order
default
all resource scans
1

all resource scans (auto generated)

Id Type Entity Policy IaC
0 CKV_AWS_1 data aws_iam_policy_document Ensure IAM policies that allow full "-" administrative privileges are not created Terraform
1 CKV_AWS_1 resource serverless_aws Ensure IAM policies that allow full "-" administrative privileges are not created serverless
2 CKV_AWS_2 resource aws_lb_listener Ensure ALB protocol is HTTPS Terraform
3 CKV_AWS_2 resource AWS::ElasticLoadBalancingV2::Listener Ensure ALB protocol is HTTPS Cloudformation
4 CKV_AWS_3 resource aws_ebs_volume Ensure all data stored in the EBS is securely encrypted Terraform
5 CKV_AWS_3 resource AWS::EC2::Volume Ensure all data stored in the EBS is securely encrypted Cloudformation
6 CKV_AWS_5 resource aws_elasticsearch_domain Ensure all data stored in the Elasticsearch is securely encrypted at rest Terraform
7 CKV_AWS_5 resource AWS::Elasticsearch::Domain Ensure all data stored in the Elasticsearch is securely encrypted at rest Cloudformation
8 CKV_AWS_6 resource aws_elasticsearch_domain Ensure all Elasticsearch has node-to-node encryption enabled Terraform
9 CKV_AWS_6 resource AWS::Elasticsearch::Domain Ensure all Elasticsearch has node-to-node encryption enabled Cloudformation
10 CKV_AWS_7 resource aws_kms_key Ensure rotation for customer created CMKs is enabled Terraform
11 CKV_AWS_7 resource AWS::KMS::Key Ensure rotation for customer created CMKs is enabled Cloudformation
12 CKV_AWS_8 resource aws_instance Ensure all data stored in the Launch configuration EBS is securely encrypted Terraform
13 CKV_AWS_8 resource aws_launch_configuration Ensure all data stored in the Launch configuration EBS is securely encrypted Terraform
14 CKV_AWS_8 resource AWS::AutoScaling::LaunchConfiguration Ensure all data stored in the Launch configuration EBS is securely encrypted Cloudformation
15 CKV_AWS_9 resource aws_iam_account_password_policy Ensure IAM password policy expires passwords within 90 days or less Terraform
16 CKV_AWS_10 resource aws_iam_account_password_policy Ensure IAM password policy requires minimum length of 14 or greater Terraform
17 CKV_AWS_11 resource aws_iam_account_password_policy Ensure IAM password policy requires at least one lowercase letter Terraform
18 CKV_AWS_12 resource aws_iam_account_password_policy Ensure IAM password policy requires at least one number Terraform
19 CKV_AWS_13 resource aws_iam_account_password_policy Ensure IAM password policy prevents password reuse Terraform
20 CKV_AWS_14 resource aws_iam_account_password_policy Ensure IAM password policy requires at least one symbol Terraform
21 CKV_AWS_15 resource aws_iam_account_password_policy Ensure IAM password policy requires at least one uppercase letter Terraform
22 CKV_AWS_16 resource aws_db_instance Ensure all data stored in the RDS is securely encrypted at rest Terraform
23 CKV_AWS_16 resource AWS::RDS::DBInstance Ensure all data stored in the RDS is securely encrypted at rest Cloudformation
24 CKV_AWS_17 resource aws_db_instance Ensure all data stored in RDS is not publicly accessible Terraform
25 CKV_AWS_17 resource aws_rds_cluster_instance Ensure all data stored in RDS is not publicly accessible Terraform
26 CKV_AWS_17 resource AWS::RDS::DBInstance Ensure all data stored in RDS is not publicly accessible Cloudformation
27 CKV_AWS_18 resource aws_s3_bucket Ensure the S3 bucket has access logging enabled Terraform
28 CKV_AWS_18 resource AWS::S3::Bucket Ensure the S3 bucket has access logging enabled Cloudformation
29 CKV_AWS_19 resource aws_s3_bucket Ensure all data stored in the S3 bucket is securely encrypted at rest Terraform
30 CKV_AWS_19 resource AWS::S3::Bucket Ensure the S3 bucket has server-side-encryption enabled Cloudformation
31 CKV_AWS_20 resource aws_s3_bucket S3 Bucket has an ACL defined which allows public READ access. Terraform
32 CKV_AWS_20 resource AWS::S3::Bucket Ensure the S3 bucket does not allow READ permissions to everyone Cloudformation
33 CKV_AWS_21 resource aws_s3_bucket Ensure all data stored in the S3 bucket have versioning enabled Terraform
34 CKV_AWS_21 resource AWS::S3::Bucket Ensure the S3 bucket has versioning enabled Cloudformation
35 CKV_AWS_22 resource aws_sagemaker_notebook_instance Ensure SageMaker Notebook is encrypted at rest using KMS CMK Terraform
36 CKV_AWS_23 resource aws_security_group Ensure every security groups rule has a description Terraform
37 CKV_AWS_23 resource aws_security_group_rule Ensure every security groups rule has a description Terraform
38 CKV_AWS_23 resource aws_db_security_group Ensure every security groups rule has a description Terraform
39 CKV_AWS_23 resource aws_elasticache_security_group Ensure every security groups rule has a description Terraform
40 CKV_AWS_23 resource aws_redshift_security_group Ensure every security groups rule has a description Terraform
41 CKV_AWS_23 resource AWS::EC2::SecurityGroup Ensure every security groups rule has a description Cloudformation
42 CKV_AWS_23 resource AWS::EC2::SecurityGroupIngress Ensure every security groups rule has a description Cloudformation
43 CKV_AWS_23 resource AWS::EC2::SecurityGroupEgress Ensure every security groups rule has a description Cloudformation
44 CKV_AWS_24 resource aws_security_group Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 Terraform
45 CKV_AWS_24 resource aws_security_group_rule Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 Terraform
46 CKV_AWS_24 resource AWS::EC2::SecurityGroup Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 Cloudformation
47 CKV_AWS_24 resource AWS::EC2::SecurityGroupIngress Ensure no security groups allow ingress from 0.0.0.0:0 to port 22 Cloudformation
48 CKV_AWS_25 resource aws_security_group Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 Terraform
49 CKV_AWS_25 resource aws_security_group_rule Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 Terraform
50 CKV_AWS_25 resource AWS::EC2::SecurityGroup Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 Cloudformation
51 CKV_AWS_25 resource AWS::EC2::SecurityGroupIngress Ensure no security groups allow ingress from 0.0.0.0:0 to port 3389 Cloudformation
52 CKV_AWS_26 resource aws_sns_topic Ensure all data stored in the SNS topic is encrypted Terraform
53 CKV_AWS_26 resource AWS::SNS::Topic Ensure all data stored in the SNS topic is encrypted Cloudformation
54 CKV_AWS_27 resource aws_sqs_queue Ensure all data stored in the SQS queue is encrypted Terraform
55 CKV_AWS_27 resource AWS::SQS::Queue Ensure all data stored in the SQS queue is encrypted Cloudformation
56 CKV_AWS_28 resource aws_dynamodb_table Ensure Dynamodb point in time recovery (backup) is enabled Terraform
57 CKV_AWS_28 resource AWS::DynamoDB::Table Ensure Dynamodb point in time recovery (backup) is enabled Cloudformation
58 CKV_AWS_29 resource aws_elasticache_replication_group Ensure all data stored in the Elasticache Replication Group is securely encrypted at rest Terraform
59 CKV_AWS_29 resource AWS::ElastiCache::ReplicationGroup Ensure all data stored in the Elasticache Replication Group is securely encrypted at rest Cloudformation
60 CKV_AWS_30 resource aws_elasticache_replication_group Ensure all data stored in the Elasticache Replication Group is securely encrypted at transit Terraform
61 CKV_AWS_30 resource AWS::ElastiCache::ReplicationGroup Ensure all data stored in the Elasticache Replication Group is securely encrypted at transit Cloudformation
62 CKV_AWS_31 resource aws_elasticache_replication_group Ensure all data stored in the Elasticache Replication Group is securely encrypted at transit and has auth token Terraform
63 CKV_AWS_31 resource AWS::ElastiCache::ReplicationGroup Ensure all data stored in the Elasticache Replication Group is securely encrypted at transit and has auth token Cloudformation
64 CKV_AWS_32 resource aws_ecr_repository_policy Ensure ECR policy is not set to public Terraform
65 CKV_AWS_32 resource AWS::ECR::Repository Ensure ECR policy is not set to public Cloudformation
66 CKV_AWS_33 resource aws_kms_key Ensure KMS key policy does not contain wildcard (*) principal Terraform
67 CKV_AWS_33 resource AWS::KMS::Key Ensure KMS key policy does not contain wildcard (*) principal Cloudformation
68 CKV_AWS_34 resource aws_cloudfront_distribution Ensure cloudfront distribution ViewerProtocolPolicy is set to HTTPS Terraform
69 CKV_AWS_34 resource AWS::CloudFront::Distribution Ensure cloudfront distribution ViewerProtocolPolicy is set to HTTPS Cloudformation
70 CKV_AWS_35 resource aws_cloudtrail Ensure CloudTrail logs are encrypted at rest using KMS CMKs Terraform
71 CKV_AWS_35 resource AWS::CloudTrail::Trail Ensure CloudTrail logs are encrypted at rest using KMS CMKs Cloudformation
72 CKV_AWS_36 resource aws_cloudtrail Ensure CloudTrail log file validation is enabled Terraform
73 CKV_AWS_36 resource AWS::CloudTrail::Trail Ensure CloudTrail log file validation is enabled Cloudformation
74 CKV_AWS_37 resource aws_eks_cluster Ensure Amazon EKS control plane logging enabled for all log types Terraform
75 CKV_AWS_38 resource aws_eks_cluster Ensure Amazon EKS public endpoint not accessible to 0.0.0.0/0 Terraform
76 CKV_AWS_39 resource aws_eks_cluster Ensure Amazon EKS public endpoint disabled Terraform
77 CKV_AWS_40 resource aws_iam_user_policy Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.) Terraform
78 CKV_AWS_40 resource aws_iam_user_policy_attachment Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.) Terraform
79 CKV_AWS_40 resource aws_iam_policy_attachment Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.) Terraform
80 CKV_AWS_40 resource AWS::IAM::Policy Ensure IAM policies are attached only to groups or roles (Reducing access management complexity may in-turn reduce opportunity for a principal to inadvertently receive or retain excessive privileges.) Cloudformation
81 CKV_AWS_41 provider aws Ensure no hard coded AWS access key and secret key exists in provider Terraform
82 CKV_AWS_41 resource serverless_aws Ensure no hard coded AWS access key and secret key exists in provider serverless
83 CKV_AWS_42 resource aws_efs_file_system Ensure EFS is securely encrypted Terraform
84 CKV_AWS_42 resource AWS::EFS::FileSystem Ensure EFS is securely encrypted Cloudformation
85 CKV_AWS_43 resource aws_kinesis_stream Ensure Kinesis Stream is securely encrypted Terraform
86 CKV_AWS_43 resource AWS::Kinesis::Stream Ensure Kinesis Stream is securely encrypted Cloudformation
87 CKV_AWS_44 resource aws_neptune_cluster Ensure Neptune storage is securely encrypted Terraform
88 CKV_AWS_44 resource AWS::Neptune::DBCluster Ensure Neptune storage is securely encrypted Cloudformation
89 CKV_AWS_45 resource aws_lambda_function Ensure no hard-coded secrets exist in lambda environment Terraform
90 CKV_AWS_45 resource AWS::Lambda::Function Ensure no hard-coded secrets exist in lambda environment Cloudformation
91 CKV_AWS_46 resource aws_instance Ensure no hard-coded secrets exist in EC2 user data Terraform
92 CKV_AWS_46 resource AWS::EC2::Instance Ensure no hard-coded secrets exist in EC2 user data Cloudformation
93 CKV_AWS_47 resource aws_dax_cluster Ensure DAX is encrypted at rest (default is unencrypted) Terraform
94 CKV_AWS_47 resource AWS::DAX::Cluster Ensure DAX is encrypted at rest (default is unencrypted) Cloudformation
95 CKV_AWS_48 resource aws_mq_broker Ensure MQ Broker logging is enabled Terraform
96 CKV_AWS_49 data aws_iam_policy_document Ensure no IAM policies documents allow "*" as a statement's actions Terraform
97 CKV_AWS_49 resource serverless_aws Ensure no IAM policies documents allow "*" as a statement's actions serverless
98 CKV_AWS_50 resource aws_lambda_function X-ray tracing is enabled for Lambda Terraform
99 CKV_AWS_51 resource aws_ecr_repository Ensure ECR Image Tags are immutable Terraform
100 CKV_AWS_51 resource AWS::ECR::Repository Ensure ECR Image Tags are immutable Cloudformation
101 CKV_AWS_53 resource aws_s3_bucket_public_access_block Ensure S3 bucket has block public ACLS enabled Terraform
102 CKV_AWS_53 resource AWS::S3::Bucket Ensure S3 bucket has block public ACLS enabled Cloudformation
103 CKV_AWS_54 resource aws_s3_bucket_public_access_block Ensure S3 bucket has block public policy enabled Terraform
104 CKV_AWS_54 resource AWS::S3::Bucket Ensure S3 bucket has block public policy enabled Cloudformation
105 CKV_AWS_55 resource aws_s3_bucket_public_access_block Ensure S3 bucket has ignore public ACLs enabled Terraform
106 CKV_AWS_55 resource AWS::S3::Bucket Ensure S3 bucket has ignore public ACLs enabled Cloudformation
107 CKV_AWS_56 resource aws_s3_bucket_public_access_block Ensure S3 bucket has 'restrict_public_bucket' enabled Terraform
108 CKV_AWS_56 resource AWS::S3::Bucket Ensure S3 bucket has 'restrict_public_bucket' enabled Cloudformation
109 CKV_AWS_57 resource aws_s3_bucket S3 Bucket has an ACL defined which allows public WRITE access. Terraform
110 CKV_AWS_57 resource AWS::S3::Bucket Ensure the S3 bucket does not allow WRITE permissions to everyone Cloudformation
111 CKV_AWS_58 resource aws_eks_cluster Ensure EKS Cluster has Secrets Encryption Enabled Terraform
112 CKV_AWS_58 resource AWS::EKS::Cluster Ensure EKS Cluster has Secrets Encryption Enabled Cloudformation
113 CKV_AWS_59 resource aws_api_gateway_method Ensure there is no open access to back-end resources through API Terraform
114 CKV_AWS_59 resource AWS::ApiGateway::Method Ensure there is no open access to back-end resources through API Cloudformation
115 CKV_AWS_60 resource aws_iam_role Ensure IAM role allows only specific services or principals to assume it Terraform
116 CKV_AWS_60 resource AWS::IAM::Role Ensure IAM role allows only specific services or principals to assume it Cloudformation
117 CKV_AWS_61 resource aws_iam_role Ensure IAM role allows only specific principals in account to assume it Terraform
118 CKV_AWS_61 resource AWS::IAM::Role Ensure IAM role allows only specific principals in account to assume it Cloudformation
119 CKV_AWS_62 resource aws_iam_role_policy Ensure IAM policies that allow full "-" administrative privileges are not created Terraform
120 CKV_AWS_62 resource aws_iam_user_policy Ensure IAM policies that allow full "-" administrative privileges are not created Terraform
121 CKV_AWS_62 resource aws_iam_group_policy Ensure IAM policies that allow full "-" administrative privileges are not created Terraform
122 CKV_AWS_62 resource aws_iam_policy Ensure IAM policies that allow full "-" administrative privileges are not created Terraform
123 CKV_AWS_63 resource aws_iam_role_policy Ensure no IAM policies documents allow "*" as a statement's actions Terraform
124 CKV_AWS_63 resource aws_iam_user_policy Ensure no IAM policies documents allow "*" as a statement's actions Terraform
125 CKV_AWS_63 resource aws_iam_group_policy Ensure no IAM policies documents allow "*" as a statement's actions Terraform
126 CKV_AWS_63 resource aws_iam_policy Ensure no IAM policies documents allow "*" as a statement's actions Terraform
127 CKV_AWS_64 resource aws_redshift_cluster Ensure all data stored in the Redshift cluster is securely encrypted at rest Terraform
128 CKV_AWS_64 resource AWS::Redshift::Cluster Ensure all data stored in the Redshift cluster is securely encrypted at rest Cloudformation
129 CKV_AWS_65 resource aws_ecs_cluster Ensure container insights are enabled on ECS cluster Terraform
130 CKV_AWS_65 resource AWS::ECS::Cluster Ensure container insights are enabled on ECS cluster Cloudformation
131 CKV_AWS_66 resource aws_cloudwatch_log_group Ensure that CloudWatch Log Group specifies retention days Terraform
132 CKV_AWS_66 resource AWS::Logs::LogGroup Ensure that CloudWatch Log Group specifies retention days Cloudformation
133 CKV_AWS_67 resource aws_cloudtrail Ensure CloudTrail is enabled in all Regions Terraform
134 CKV_AWS_67 resource AWS::CloudTrail::Trail Ensure CloudTrail is enabled in all Regions Cloudformation
135 CKV_AWS_68 resource aws_cloudfront_distribution CloudFront Distribution should have WAF enabled Terraform
136 CKV_AWS_68 resource AWS::CloudFront::Distribution CloudFront Distribution should have WAF enabled Cloudformation
137 CKV_AWS_69 resource aws_mq_broker Ensure MQ Broker is not publicly exposed Terraform
138 CKV_AWS_69 resource AWS::AmazonMQ::Broker Ensure Amazon MQ Broker should not have public access Cloudformation
139 CKV_AWS_70 resource aws_s3_bucket Ensure S3 bucket does not allow an action with any Principal Terraform
140 CKV_AWS_70 resource aws_s3_bucket_policy Ensure S3 bucket does not allow an action with any Principal Terraform
141 CKV_AWS_71 resource aws_redshift_cluster Ensure Redshift Cluster logging is enabled Terraform
142 CKV_AWS_71 resource AWS::Redshift::Cluster Ensure Redshift Cluster logging is enabled Cloudformation
143 CKV_AWS_72 resource aws_sqs_queue_policy Ensure SQS policy does not allow ALL (*) actions. Terraform
144 CKV_AWS_73 resource aws_api_gateway_stage Ensure API Gateway has X-Ray Tracing enabled Terraform
145 CKV_AWS_73 resource AWS::ApiGateway::Stage Ensure API Gateway has X-Ray Tracing enabled Cloudformation
146 CKV_AWS_74 resource aws_docdb_cluster Ensure DocDB is encrypted at rest (default is unencrypted) Terraform
147 CKV_AWS_74 resource AWS::DocDB::DBCluster Ensure DocDB is encrypted at rest (default is unencrypted) Cloudformation
148 CKV_AWS_75 resource aws_globalaccelerator_accelerator Ensure Global Accelerator accelerator has flow logs enabled Terraform
149 CKV_AWS_76 resource aws_api_gateway_stage Ensure API Gateway has Access Logging enabled Terraform
150 CKV_AWS_76 resource aws_apigatewayv2_stage Ensure API Gateway has Access Logging enabled Terraform
151 CKV_AWS_76 resource AWS::ApiGateway::Stage Ensure API Gateway has Access Logging enabled Cloudformation
152 CKV_AWS_77 resource aws_athena_database Ensure Athena Database is encrypted at rest (default is unencrypted) Terraform
153 CKV_AWS_78 resource aws_codebuild_project Ensure that CodeBuild Project encryption is not disabled Terraform
154 CKV_AWS_78 resource AWS::CodeBuild::Project Ensure that CodeBuild Project encryption is not disabled Cloudformation
155 CKV_AWS_79 resource aws_instance Ensure Instance Metadata Service Version 1 is not enabled Terraform
156 CKV_AWS_79 resource aws_launch_template Ensure Instance Metadata Service Version 1 is not enabled Terraform
157 CKV_AWS_79 resource AWS::EC2::LaunchTemplate Ensure Instance Metadata Service Version 1 is not enabled Cloudformation
158 CKV_AWS_80 resource aws_msk_cluster Ensure MSK Cluster logging is enabled Terraform
159 CKV_AWS_81 resource aws_msk_cluster Ensure MSK Cluster encryption in rest and transit is enabled Terraform
160 CKV_AWS_82 resource aws_athena_workgroup Ensure Athena Workgroup should enforce configuration to prevent client disabling encryption Terraform
161 CKV_AWS_82 resource AWS::Athena::WorkGroup Ensure Athena Workgroup should enforce configuration to prevent client disabling encryption Cloudformation
162 CKV_AWS_83 resource aws_elasticsearch_domain Ensure Elasticsearch Domain enforces HTTPS Terraform
163 CKV_AWS_83 resource AWS::Elasticsearch::Domain Ensure Elasticsearch Domain enforces HTTPS Cloudformation
164 CKV_AWS_84 resource aws_elasticsearch_domain Ensure Elasticsearch Domain Logging is enabled Terraform
165 CKV_AWS_84 resource AWS::Elasticsearch::Domain Ensure Elasticsearch Domain Logging is enabled Cloudformation
166 CKV_AWS_85 resource aws_docdb_cluster Ensure DocDB Logging is enabled Terraform
167 CKV_AWS_85 resource AWS::DocDB::DBCluster Ensure DocDB Logging is enabled Cloudformation
168 CKV_AWS_86 resource aws_cloudfront_distribution Ensure Cloudfront distribution has Access Logging enabled Terraform
169 CKV_AWS_86 resource AWS::CloudFront::Distribution Ensure Cloudfront distribution has Access Logging enabled Cloudformation
170 CKV_AWS_87 resource aws_redshift_cluster Redshift cluster should not be publicly accessible Terraform
171 CKV_AWS_87 resource AWS::Redshift::Cluster Redshift cluster should not be publicly accessible Cloudformation
172 CKV_AWS_88 resource aws_instance EC2 instance should not have public IP. Terraform
173 CKV_AWS_88 resource aws_launch_template EC2 instance should not have public IP. Terraform
174 CKV_AWS_88 resource AWS::EC2::LaunchTemplate EC2 instance should not have public IP. Cloudformation
175 CKV_AWS_88 resource AWS::EC2::Instance EC2 instance should not have public IP. Cloudformation
176 CKV_AWS_89 resource aws_dms_replication_instance DMS replication instance should not be publicly accessible Terraform
177 CKV_AWS_89 resource AWS::DMS::ReplicationInstance DMS replication instance should not be publicly accessible Cloudformation
178 CKV_AWS_90 resource aws_docdb_cluster_parameter_group Ensure DocDB TLS is not disabled Terraform
179 CKV_AWS_90 resource AWS::DocDB::DBClusterParameterGroup Ensure DocDB TLS is not disabled Cloudformation
180 CKV_AWS_91 resource aws_lb Ensure the ELBv2 (Application/Network) has access logging enabled Terraform
181 CKV_AWS_91 resource aws_alb Ensure the ELBv2 (Application/Network) has access logging enabled Terraform
182 CKV_AWS_91 resource AWS::ElasticLoadBalancingV2::LoadBalancer Ensure the ELBv2 (Application/Network) has access logging enabled Cloudformation
183 CKV_AWS_92 resource aws_elb Ensure the ELB has access logging enabled Terraform
184 CKV_AWS_92 resource AWS::ElasticLoadBalancing::LoadBalancer Ensure the ELB has access logging enabled Cloudformation
185 CKV_AWS_93 resource aws_s3_bucket Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes) Terraform
186 CKV_AWS_93 resource aws_s3_bucket_policy Ensure S3 bucket policy does not lockout all but root user. (Prevent lockouts needing root account fixes) Terraform
187 CKV_AWS_94 resource aws_glue_data_catalog_encryption_settings Ensure Glue Data Catalog Encryption is enabled Terraform
188 CKV_AWS_94 resource AWS::Glue::DataCatalogEncryptionSettings Ensure Glue Data Catalog Encryption is enabled Cloudformation
189 CKV_AWS_95 resource AWS::ApiGatewayV2::Stage Ensure API Gateway V2 has Access Logging enabled Cloudformation
190 CKV_AWS_96 resource aws_rds_cluster Ensure all data stored in Aurora is securely encrypted at rest Terraform
191 CKV_AWS_96 resource AWS::RDS::DBCluster Ensure all data stored in Aurrora is securely encrypted at rest Cloudformation
192 CKV_AWS_97 resource aws_ecs_task_definition Ensure Encryption in transit is enabled for EFS volumes in ECS Task definitions Terraform
193 CKV_AWS_97 resource AWS::ECS::TaskDefinition Ensure Encryption in transit is enabled for EFS volumes in ECS Task definitions Cloudformation
194 CKV_AWS_98 resource aws_sagemaker_endpoint_configuration Ensure all data stored in the Sagemaker Endpoint is securely encrypted at rest Terraform
195 CKV_AWS_99 resource aws_glue_security_configuration Ensure Glue Security Configuration Encryption is enabled Terraform
196 CKV_AWS_99 resource AWS::Glue::SecurityConfiguration Ensure Glue Security Configuration Encryption is enabled Cloudformation
197 CKV_AWS_100 resource aws_eks_node_group Ensure Amazon EKS Node group has implict SSH access from 0.0.0.0/0 Terraform
198 CKV_AWS_100 resource AWS::EKS::Nodegroup Ensure Amazon EKS Node group has implict SSH access from 0.0.0.0/0 Cloudformation
199 CKV_AWS_101 resource aws_neptune_cluster Ensure Neptune logging is enabled Terraform
200 CKV_AWS_101 resource AWS::Neptune::DBCluster Ensure Neptune logging is enabled Cloudformation
201 CKV_AWS_102 resource aws_neptune_cluster_instance Ensure Neptune Cluster instance is not publicly available Terraform
202 CKV_AWS_103 resource aws_lb_listener Ensure that load balancer is using TLS 1.2 Terraform
203 CKV_AWS_104 resource aws_docdb_cluster_parameter_group Ensure DocDB has audit logs enabled Terraform
204 CKV_AWS_104 resource AWS::DocDB::DBClusterParameterGroup Ensure DocDB has audit logs enabled Cloudformation
205 CKV_AWS_105 resource aws_redshift_parameter_group Ensure Redshift uses SSL Terraform
206 CKV_AWS_105 resource AWS::Redshift::ClusterParameterGroup Ensure Redshift uses SSL Cloudformation
207 CKV_AWS_106 resource aws_ebs_encryption_by_default Ensure EBS default encryption is enabled Terraform
208 CKV_AWS_107 data aws_iam_policy_document Ensure IAM policies does not allow credentials exposure Terraform
209 CKV_AWS_107 resource AWS::IAM::Policy Ensure IAM policies does not allow credentials exposure Cloudformation
210 CKV_AWS_107 resource AWS::IAM::ManagedPolicy Ensure IAM policies does not allow credentials exposure Cloudformation
211 CKV_AWS_107 resource AWS::IAM::Group Ensure IAM policies does not allow credentials exposure Cloudformation
212 CKV_AWS_107 resource AWS::IAM::Role Ensure IAM policies does not allow credentials exposure Cloudformation
213 CKV_AWS_107 resource AWS::IAM::User Ensure IAM policies does not allow credentials exposure Cloudformation
214 CKV_AWS_108 data aws_iam_policy_document Ensure IAM policies does not allow data exfiltration Terraform
215 CKV_AWS_108 resource AWS::IAM::Policy Ensure IAM policies does not allow data exfiltration Cloudformation
216 CKV_AWS_108 resource AWS::IAM::ManagedPolicy Ensure IAM policies does not allow data exfiltration Cloudformation
217 CKV_AWS_108 resource AWS::IAM::Group Ensure IAM policies does not allow data exfiltration Cloudformation
218 CKV_AWS_108 resource AWS::IAM::Role Ensure IAM policies does not allow data exfiltration Cloudformation
219 CKV_AWS_108 resource AWS::IAM::User Ensure IAM policies does not allow data exfiltration Cloudformation
220 CKV_AWS_109 data aws_iam_policy_document Ensure IAM policies does not allow permissions management / resource exposure without constraints Terraform
221 CKV_AWS_109 resource AWS::IAM::Policy Ensure IAM policies does not allow permissions management without constraints Cloudformation
222 CKV_AWS_109 resource AWS::IAM::ManagedPolicy Ensure IAM policies does not allow permissions management without constraints Cloudformation
223 CKV_AWS_109 resource AWS::IAM::Group Ensure IAM policies does not allow permissions management without constraints Cloudformation
224 CKV_AWS_109 resource AWS::IAM::Role Ensure IAM policies does not allow permissions management without constraints Cloudformation
225 CKV_AWS_109 resource AWS::IAM::User Ensure IAM policies does not allow permissions management without constraints Cloudformation
226 CKV_AWS_110 data aws_iam_policy_document Ensure IAM policies does not allow privilege escalation Terraform
227 CKV_AWS_110 resource AWS::IAM::Policy Ensure IAM policies does not allow privilege escalation Cloudformation
228 CKV_AWS_110 resource AWS::IAM::ManagedPolicy Ensure IAM policies does not allow privilege escalation Cloudformation
229 CKV_AWS_110 resource AWS::IAM::Group Ensure IAM policies does not allow privilege escalation Cloudformation
230 CKV_AWS_110 resource AWS::IAM::Role Ensure IAM policies does not allow privilege escalation Cloudformation
231 CKV_AWS_110 resource AWS::IAM::User Ensure IAM policies does not allow privilege escalation Cloudformation
232 CKV_AWS_111 data aws_iam_policy_document Ensure IAM policies does not allow write access without constraints Terraform
233 CKV_AWS_111 resource AWS::IAM::Policy Ensure IAM policies does not allow write access without constraints Cloudformation
234 CKV_AWS_111 resource AWS::IAM::ManagedPolicy Ensure IAM policies does not allow write access without constraints Cloudformation
235 CKV_AWS_111 resource AWS::IAM::Group Ensure IAM policies does not allow write access without constraints Cloudformation
236 CKV_AWS_111 resource AWS::IAM::Role Ensure IAM policies does not allow write access without constraints Cloudformation
237 CKV_AWS_111 resource AWS::IAM::User Ensure IAM policies does not allow write access without constraints Cloudformation
238 CKV_AWS_112 resource aws_ssm_document Ensure Session Manager data is encrypted in transit Terraform
239 CKV_AWS_113 resource aws_ssm_document Ensure Session Manager logs are enabled and encrypted Terraform
240 CKV_AWS_114 resource aws_emr_cluster Ensure that EMR clusters with Kerberos have Kerberos Realm set Terraform
241 CKV_AWS_115 resource aws_lambda_function Ensure that AWS Lambda function is configured for function-level concurrent execution limit Terraform
242 CKV_AWS_116 resource aws_lambda_function Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ) Terraform
243 CKV_AWS_117 resource aws_lambda_function Ensure that AWS Lambda function is configured inside a VPC Terraform
244 CKV_AWS_118 resource aws_db_instance Ensure that enhanced monitoring is enabled for Amazon RDS instances Terraform
245 CKV_AWS_118 resource aws_rds_cluster_instance Ensure that enhanced monitoring is enabled for Amazon RDS instances Terraform
246 CKV_AWS_119 resource aws_dynamodb_table Ensure DynamoDB Tables are encrypted using KMS Terraform
247 CKV_AWS_120 resource aws_api_gateway_stage Ensure API Gateway caching is enabled Terraform
248 CKV_AWS_120 resource AWS::ApiGateway::Stage Ensure API Gateway caching is enabled Cloudformation
249 CKV_AWS_121 resource aws_config_configuration_aggregator Ensure AWS Config is enabled in all regions Terraform
250 CKV_AWS_122 resource aws_sagemaker_notebook_instance Ensure that direct internet access is disabled for an Amazon SageMaker Notebook Instance Terraform
251 CKV_AWS_123 resource aws_vpc_endpoint_service Ensure that VPC Endpoint Service is configured for Manual Acceptance Terraform
252 CKV_AWS_123 resource AWS::EC2::VPCEndpointService Ensure that VPC Endpoint Service is configured for Manual Acceptance Cloudformation
253 CKV_AWS_124 resource aws_cloudformation_stack Ensure that CloudFormation stacks are sending event notifications to an SNS topic Terraform
254 CKV_AWS_126 resource aws_instance Ensure that detailed monitoring is enabled for EC2 instances Terraform
255 CKV_AWS_127 resource aws_elb Ensure that Elastic Load Balancer(s) uses SSL certificates provided by AWS Certificate Manager Terraform
256 CKV_AWS_128 resource aws_rds_cluster Ensure that an Amazon RDS Clusters have AWS Identity and Access Management (IAM) authentication enabled Terraform
257 CKV_AWS_129 resource aws_db_instance Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled Terraform
258 CKV_AWS_130 resource aws_subnet Ensure VPC subnets do not assign public IP by default Terraform
259 CKV_AWS_131 resource aws_lb Ensure that ALB drops HTTP headers Terraform
260 CKV_AWS_131 resource aws_alb Ensure that ALB drops HTTP headers Terraform
261 CKV_AWS_131 resource AWS::ElasticLoadBalancingV2::LoadBalancer Ensure that ALB drops HTTP headers Cloudformation
262 CKV_AWS_133 resource aws_rds_cluster Ensure that RDS instances has backup policy Terraform
263 CKV_AWS_134 resource aws_elasticache_cluster Ensure that Amazon ElastiCache Redis clusters have automatic backup turned on Terraform
264 CKV_AWS_135 resource aws_instance Ensure that EC2 is EBS optimized Terraform
265 CKV_AWS_136 resource aws_ecr_repository Ensure that ECR repositories are encrypted using KMS Terraform
266 CKV_AWS_136 resource AWS::ECR::Repository Ensure that ECR repositories are encrypted using KMS Cloudformation
267 CKV_AWS_137 resource aws_elasticsearch_domain Ensure that Elasticsearch is configured inside a VPC Terraform
268 CKV_AWS_138 resource aws_elb Ensure that ELB is cross-zone-load-balancing enabled Terraform
269 CKV_AWS_139 resource aws_rds_cluster Ensure that RDS clusters have deletion protection enabled Terraform
270 CKV_AWS_140 resource aws_rds_global_cluster Ensure that RDS global clusters are encrypted Terraform
271 CKV_AWS_141 resource aws_redshift_cluster Ensured that redshift cluster allowing version upgrade by default Terraform
272 CKV_AWS_142 resource aws_redshift_cluster Ensure that Redshift cluster is encrypted by KMS Terraform
273 CKV_AWS_143 resource aws_s3_bucket Ensure that S3 bucket has lock configuration enabled by default Terraform
274 CKV_AWS_144 resource aws_s3_bucket Ensure that S3 bucket has cross-region replication enabled Terraform
275 CKV_AWS_145 resource aws_s3_bucket Ensure that S3 buckets are encrypted with KMS by default Terraform
276 CKV_AWS_146 resource aws_db_cluster_snapshot Ensure that RDS database cluster snapshot is encrypted Terraform
277 CKV_AWS_147 resource aws_codebuild_project Ensure that CodeBuild projects are encrypted Terraform
278 CKV_AWS_148 resource aws_default_vpc Ensure no default VPC is planned to be provisioned Terraform
279 CKV_AWS_149 resource aws_secretsmanager_secret Ensure that Secrets Manager secret is encrypted using KMS Terraform
280 CKV_AWS_150 resource aws_lb Ensure that Load Balancer has deletion protection enabled Terraform
281 CKV_AWS_150 resource aws_alb Ensure that Load Balancer has deletion protection enabled Terraform
282 CKV_AWS_151 resource aws_eks_cluster Ensure Kubernetes Secrets are encrypted using Customer Master Keys (CMKs) managed in AWS KMS Terraform
283 CKV_AWS_152 resource aws_lb Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled Terraform
284 CKV_AWS_152 resource aws_alb Ensure that Load Balancer (Network/Gateway) has cross-zone load balancing enabled Terraform
285 CKV_AWS_153 resource aws_autoscaling_group Autoscaling groups should supply tags to launch configurations Terraform
286 CKV_AWS_154 resource aws_redshift_cluster Ensure Redshift is not deployed outside of a VPC Terraform
287 CKV_AWS_154 resource AWS::Redshift::Cluster Ensure Redshift is not deployed outside of a VPC Cloudformation
288 CKV_AWS_155 resource aws_workspaces_workspace Ensure that Workspace user volumes are encrypted Terraform
289 CKV_AWS_155 resource AWS::WorkSpaces::Workspace Ensure that Workspace user volumes are encrypted Cloudformation
290 CKV_AWS_156 resource aws_workspaces_workspace Ensure that Workspace root volumes are encrypted Terraform
291 CKV_AWS_156 resource AWS::WorkSpaces::Workspace Ensure that Workspace root volumes are encrypted Cloudformation
292 CKV_AWS_157 resource aws_db_instance Ensure that RDS instances have Multi-AZ enabled Terraform
293 CKV_AWS_157 resource AWS::RDS::DBInstance Ensure that RDS instances have Multi-AZ enabled Cloudformation
294 CKV_AWS_158 resource aws_cloudwatch_log_group Ensure that CloudWatch Log Group is encrypted by KMS Terraform
295 CKV_AWS_158 resource AWS::Logs::LogGroup Ensure that CloudWatch Log Group is encrypted by KMS Cloudformation
296 CKV_AWS_159 resource aws_athena_workgroup Ensure that Athena Workgroup is encrypted Terraform
297 CKV_AWS_160 resource aws_timestreamwrite_database Ensure that Timestream database is encrypted with KMS CMK Terraform
298 CKV_AWS_160 resource AWS::Timestream::Database Ensure that Timestream database is encrypted with KMS CMK Cloudformation
299 CKV_AWS_161 resource aws_db_instance Ensure RDS database has IAM authentication enabled Terraform
300 CKV_AWS_161 resource AWS::RDS::DBInstance Ensure RDS database has IAM authentication enabled Cloudformation
301 CKV_AWS_162 resource aws_rds_cluster Ensure RDS cluster has IAM authentication enabled Terraform
302 CKV_AWS_162 resource AWS::RDS::DBCluster Ensure RDS cluster has IAM authentication enabled Cloudformation
303 CKV_AWS_163 resource aws_ecr_repository Ensure ECR image scanning on push is enabled Terraform
304 CKV_AWS_163 resource AWS::ECR::Repository Ensure ECR image scanning on push is enabled Cloudformation
305 CKV_AWS_164 resource aws_transfer_server Ensure Transfer Server is not exposed publicly. Terraform
306 CKV_AWS_164 resource AWS::Transfer::Server Ensure Transfer Server is not exposed publicly. Cloudformation
307 CKV_AWS_165 resource aws_dynamodb_global_table Ensure Dynamodb point in time recovery (backup) is enabled for global tables Terraform
308 CKV_AWS_165 resource AWS::DynamoDB::GlobalTable Ensure Dynamodb global table point in time recovery (backup) is enabled Cloudformation
309 CKV_AWS_166 resource aws_backup_vault Ensure Backup Vault is encrypted at rest using KMS CMK Terraform
310 CKV_AWS_166 resource AWS::Backup::BackupVault Ensure Backup Vault is encrypted at rest using KMS CMK Cloudformation
311 CKV_AWS_167 resource aws_glacier_vault Ensure Glacier Vault access policy is not public by only allowing specific services or principals to access it Terraform
312 CKV_AWS_168 resource aws_sqs_queue_policy Ensure SQS queue policy is not public by only allowing specific services or principals to access it Terraform
313 CKV_AWS_169 resource aws_sns_topic_policy Ensure SNS topic policy is not public by only allowing specific services or principals to access it Terraform
314 CKV_AWS_170 resource aws_qldb_ledger Ensure QLDB ledger permissions mode is set to STANDARD Terraform
315 CKV_AWS_170 resource AWS::QLDB::Ledger Ensure QLDB ledger permissions mode is set to STANDARD Cloudformation
316 CKV_AWS_171 resource aws_emr_security_configuration Ensure Cluster security configuration encryption is using SSE-KMS Terraform
317 CKV_AWS_172 resource aws_qldb_ledger Ensure QLDB ledger has deletion protection enabled Terraform
318 CKV_AWS_172 resource AWS::QLDB::Ledger Ensure QLDB ledger has deletion protection enabled Cloudformation
319 CKV2_AWS_1 resource aws_subnet Ensure that all NACL are attached to subnets Terraform
320 CKV2_AWS_1 resource aws_network_acl Ensure that all NACL are attached to subnets Terraform
321 CKV2_AWS_2 resource aws_volume_attachment Ensure that only encrypted EBS volumes are attached to EC2 instances Terraform
322 CKV2_AWS_2 resource aws_ebs_volume Ensure that only encrypted EBS volumes are attached to EC2 instances Terraform
323 CKV2_AWS_3 resource aws_guardduty_organization_configuration Ensure GuardDuty is enabled to specific org/region Terraform
324 CKV2_AWS_3 resource aws_guardduty_detector Ensure GuardDuty is enabled to specific org/region Terraform
325 CKV2_AWS_4 resource aws_api_gateway_stage Ensure API Gateway stage have logging level defined as appropriate Terraform
326 CKV2_AWS_4 resource aws_api_gateway_method_settings Ensure API Gateway stage have logging level defined as appropriate Terraform
327 CKV2_AWS_5 resource aws_security_group Ensure that Security Groups are attached to an other resource Terraform
328 CKV2_AWS_6 resource aws_s3_bucket Ensure that S3 bucket has a Public Access block Terraform
329 CKV2_AWS_6 resource aws_s3_bucket_public_access_block Ensure that S3 bucket has a Public Access block Terraform
330 CKV2_AWS_7 resource aws_security_group Ensure that Amazon EMR clusters' security groups are not open to the world Terraform
331 CKV2_AWS_7 resource aws_emr_cluster Ensure that Amazon EMR clusters' security groups are not open to the world Terraform
332 CKV2_AWS_8 resource aws_rds_cluster Ensure that RDS clusters has backup plan of AWS Backup Terraform
333 CKV2_AWS_9 resource aws_backup_selection Ensure that EBS are added in the backup plans of AWS Backup Terraform
334 CKV2_AWS_10 resource aws_cloudtrail Ensure CloudTrail trails are integrated with CloudWatch Logs Terraform
335 CKV2_AWS_11 resource aws_vpc Ensure VPC flow logging is enabled in all VPCs Terraform
336 CKV2_AWS_12 resource aws_vpc Ensure the default security group of every VPC restricts all traffic Terraform
337 CKV2_AWS_12 resource aws_default_security_group Ensure the default security group of every VPC restricts all traffic Terraform
338 CKV2_AWS_13 resource aws_redshift_cluster Ensure that Redshift clusters has backup plan of AWS Backup Terraform
339 CKV2_AWS_14 resource aws_iam_group_membership Ensure that IAM groups includes at least one IAM user Terraform
340 CKV2_AWS_14 resource aws_iam_group Ensure that IAM groups includes at least one IAM user Terraform
341 CKV2_AWS_15 resource aws_autoscaling_group Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks. Terraform
342 CKV2_AWS_15 resource aws_elb Ensure that auto Scaling groups that are associated with a load balancer, are using Elastic Load Balancing health checks. Terraform
343 CKV2_AWS_16 resource aws_appautoscaling_target Ensure that Auto Scaling is enabled on your DynamoDB tables Terraform
344 CKV2_AWS_16 resource aws_dynamodb_table Ensure that Auto Scaling is enabled on your DynamoDB tables Terraform
345 CKV2_AWS_18 resource aws_backup_selection Ensure that Elastic File System (Amazon EFS) file systems are added in the backup plans of AWS Backup Terraform
346 CKV2_AWS_19 resource aws_eip Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances Terraform
347 CKV2_AWS_19 resource aws_eip_association Ensure that all EIP addresses allocated to a VPC are attached to EC2 instances Terraform
348 CKV2_AWS_20 resource aws_lb Ensure that ALB redirects HTTP requests into HTTPS ones Terraform
349 CKV2_AWS_20 resource aws_lb_listener Ensure that ALB redirects HTTP requests into HTTPS ones Terraform
350 CKV2_AWS_21 resource aws_iam_group_membership Ensure that all IAM users are members of at least one IAM group. Terraform
351 CKV2_AWS_22 resource aws_iam_user Ensure an IAM User does not have access to the console Terraform
352 CKV2_AWS_23 resource aws_route53_record Route53 A Record has Attached Resource Terraform
353 CKV2_AWS_27 resource aws_db_instance Postgres RDS has Query Logging enabled Terraform
354 CKV2_AWS_27 resource aws_rds_cluster_parameter_group Postgres RDS has Query Logging enabled Terraform
355 CKV2_AWS_28 resource aws_lb Ensure public facing ALB are protected by WAF Terraform
356 CKV2_AWS_29 resource aws_api_gateway_stage Ensure public API gateway are protected by WAF Terraform
357 CKV2_AWS_29 resource aws_api_gateway_rest_api Ensure public API gateway are protected by WAF Terraform
358 CKV_AZURE_1 resource azurerm_linux_virtual_machine Ensure Azure Instance does not use basic authentication(Use SSH Key Instead) Terraform
359 CKV_AZURE_1 resource azurerm_virtual_machine Ensure Azure Instance does not use basic authentication(Use SSH Key Instead) Terraform
360 CKV_AZURE_1 resource Microsoft.Compute/virtualMachines Ensure Azure Instance does not use basic authentication(Use SSH Key Instead) arm
361 CKV_AZURE_2 resource azurerm_managed_disk Ensure Azure managed disk has encryption enabled Terraform
362 CKV_AZURE_2 resource Microsoft.Compute/disks Ensure Azure managed disk have encryption enabled arm
363 CKV_AZURE_3 resource azurerm_storage_account Ensure that 'Secure transfer required' is set to 'Enabled' Terraform
364 CKV_AZURE_3 resource Microsoft.Storage/storageAccounts Ensure that 'supportsHttpsTrafficOnly' is set to 'true' arm
365 CKV_AZURE_4 resource azurerm_kubernetes_cluster Ensure AKS logging to Azure Monitoring is Configured Terraform
366 CKV_AZURE_4 resource Microsoft.ContainerService/managedClusters Ensure AKS logging to Azure Monitoring is Configured arm
367 CKV_AZURE_5 resource azurerm_kubernetes_cluster Ensure RBAC is enabled on AKS clusters Terraform
368 CKV_AZURE_5 resource Microsoft.ContainerService/managedClusters Ensure RBAC is enabled on AKS clusters arm
369 CKV_AZURE_6 resource azurerm_kubernetes_cluster Ensure AKS has an API Server Authorized IP Ranges enabled Terraform
370 CKV_AZURE_6 resource Microsoft.ContainerService/managedClusters Ensure AKS has an API Server Authorized IP Ranges enabled arm
371 CKV_AZURE_7 resource azurerm_kubernetes_cluster Ensure AKS cluster has Network Policy configured Terraform
372 CKV_AZURE_7 resource Microsoft.ContainerService/managedClusters Ensure AKS cluster has Network Policy configured arm
373 CKV_AZURE_8 resource azurerm_kubernetes_cluster Ensure Kube Dashboard is disabled Terraform
374 CKV_AZURE_8 resource Microsoft.ContainerService/managedClusters Ensure Kubernetes Dashboard is disabled arm
375 CKV_AZURE_9 resource azurerm_network_security_rule Ensure that RDP access is restricted from the internet Terraform
376 CKV_AZURE_9 resource azurerm_network_security_group Ensure that RDP access is restricted from the internet Terraform
377 CKV_AZURE_9 resource Microsoft.Network/networkSecurityGroups Ensure that RDP access is restricted from the internet arm
378 CKV_AZURE_9 resource Microsoft.Network/networkSecurityGroups/securityRules Ensure that RDP access is restricted from the internet arm
379 CKV_AZURE_10 resource azurerm_network_security_rule Ensure that SSH access is restricted from the internet Terraform
380 CKV_AZURE_10 resource azurerm_network_security_group Ensure that SSH access is restricted from the internet Terraform
381 CKV_AZURE_10 resource Microsoft.Network/networkSecurityGroups Ensure that SSH access is restricted from the internet arm
382 CKV_AZURE_10 resource Microsoft.Network/networkSecurityGroups/securityRules Ensure that SSH access is restricted from the internet arm
383 CKV_AZURE_11 resource azurerm_mariadb_firewall_rule Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP) Terraform
384 CKV_AZURE_11 resource azurerm_sql_firewall_rule Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP) Terraform
385 CKV_AZURE_11 resource azurerm_postgresql_firewall_rule Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP) Terraform
386 CKV_AZURE_11 resource azurerm_mysql_firewall_rule Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP) Terraform
387 CKV_AZURE_11 resource Microsoft.Sql/servers Ensure no SQL Databases allow ingress from 0.0.0.0/0 (ANY IP) arm
388 CKV_AZURE_12 resource azurerm_network_watcher_flow_log Ensure that Network Security Group Flow Log retention period is 'greater than 90 days' Terraform
389 CKV_AZURE_12 resource Microsoft.Network/networkWatchers/flowLogs Ensure that Network Security Group Flow Log retention period is 'greater than 90 days' arm
390 CKV_AZURE_12 resource Microsoft.Network/networkWatchers/FlowLogs Ensure that Network Security Group Flow Log retention period is 'greater than 90 days' arm
391 CKV_AZURE_12 resource Microsoft.Network/networkWatchers/flowLogs/ Ensure that Network Security Group Flow Log retention period is 'greater than 90 days' arm
392 CKV_AZURE_12 resource Microsoft.Network/networkWatchers/FlowLogs/ Ensure that Network Security Group Flow Log retention period is 'greater than 90 days' arm
393 CKV_AZURE_13 resource azurerm_app_service Ensure App Service Authentication is set on Azure App Service Terraform
394 CKV_AZURE_13 resource Microsoft.Web/sites/config Ensure App Service Authentication is set on Azure App Service arm
395 CKV_AZURE_13 resource config Ensure App Service Authentication is set on Azure App Service arm
396 CKV_AZURE_14 resource azurerm_app_service Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Terraform
397 CKV_AZURE_14 resource Microsoft.Web/sites Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service arm
398 CKV_AZURE_15 resource azurerm_app_service Ensure web app is using the latest version of TLS encryption Terraform
399 CKV_AZURE_15 resource Microsoft.Web/sites Ensure web app is using the latest version of TLS encryption arm
400 CKV_AZURE_16 resource azurerm_app_service Ensure that Register with Azure Active Directory is enabled on App Service Terraform
401 CKV_AZURE_16 resource Microsoft.Web/sites Ensure that Register with Azure Active Directory is enabled on App Service arm
402 CKV_AZURE_17 resource azurerm_app_service Ensure the web app has 'Client Certificates (Incoming client certificates)' set Terraform
403 CKV_AZURE_17 resource Microsoft.Web/sites Ensure the web app has 'Client Certificates (Incoming client certificates)' set arm
404 CKV_AZURE_18 resource azurerm_app_service Ensure that 'HTTP Version' is the latest if used to run the web app Terraform
405 CKV_AZURE_18 resource Microsoft.Web/sites Ensure that 'HTTP Version' is the latest if used to run the web app arm
406 CKV_AZURE_19 resource azurerm_security_center_subscription_pricing Ensure that standard pricing tier is selected Terraform
407 CKV_AZURE_19 resource Microsoft.Security/pricings Ensure that standard pricing tier is selected arm
408 CKV_AZURE_20 resource azurerm_security_center_contact Ensure that security contact 'Phone number' is set Terraform
409 CKV_AZURE_20 resource Microsoft.Security/securityContacts Ensure that security contact 'Phone number' is set arm
410 CKV_AZURE_21 resource azurerm_security_center_contact Ensure that 'Send email notification for high severity alerts' is set to 'On' Terraform
411 CKV_AZURE_21 resource Microsoft.Security/securityContacts Ensure that 'Send email notification for high severity alerts' is set to 'On' arm
412 CKV_AZURE_22 resource azurerm_security_center_contact Ensure that 'Send email notification for high severity alerts' is set to 'On' Terraform
413 CKV_AZURE_22 resource Microsoft.Security/securityContacts Ensure that 'Send email notification for high severity alerts' is set to 'On' arm
414 CKV_AZURE_23 resource azurerm_sql_server Ensure that 'Auditing' is set to 'On' for SQL servers Terraform
415 CKV_AZURE_23 resource azurerm_mssql_server Ensure that 'Auditing' is set to 'On' for SQL servers Terraform
416 CKV_AZURE_23 resource Microsoft.Sql/servers Ensure that 'Auditing' is set to 'Enabled' for SQL servers arm
417 CKV_AZURE_24 resource azurerm_sql_server Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers Terraform
418 CKV_AZURE_24 resource azurerm_mssql_server Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers Terraform
419 CKV_AZURE_24 resource Microsoft.Sql/servers Ensure that 'Auditing' Retention is 'greater than 90 days' for SQL servers arm
420 CKV_AZURE_25 resource azurerm_mssql_server_security_alert_policy Ensure that 'Threat Detection types' is set to 'All' Terraform
421 CKV_AZURE_25 resource Microsoft.Sql/servers/databases Ensure that 'Threat Detection types' is set to 'All' arm
422 CKV_AZURE_26 resource azurerm_mssql_server_security_alert_policy Ensure that 'Send Alerts To' is enabled for MSSQL servers Terraform
423 CKV_AZURE_26 resource Microsoft.Sql/servers/databases Ensure that 'Send Alerts To' is enabled for MSSQL servers arm
424 CKV_AZURE_27 resource azurerm_mssql_server_security_alert_policy Ensure that 'Email service and co-administrators' is 'Enabled' for MSSQL servers Terraform
425 CKV_AZURE_27 resource Microsoft.Sql/servers/databases Ensure that 'Email service and co-administrators' is 'Enabled' for MSSQL servers arm
426 CKV_AZURE_28 resource azurerm_mysql_server Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server Terraform
427 CKV_AZURE_28 resource Microsoft.DBforMySQL/servers Ensure 'Enforce SSL connection' is set to 'ENABLED' for MySQL Database Server arm
428 CKV_AZURE_29 resource azurerm_postgresql_server Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server Terraform
429 CKV_AZURE_29 resource Microsoft.DBforPostgreSQL/servers Ensure 'Enforce SSL connection' is set to 'ENABLED' for PostgreSQL Database Server arm
430 CKV_AZURE_30 resource azurerm_postgresql_configuration Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server Terraform
431 CKV_AZURE_30 resource Microsoft.DBforPostgreSQL/servers/configurations Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server arm
432 CKV_AZURE_30 resource configurations Ensure server parameter 'log_checkpoints' is set to 'ON' for PostgreSQL Database Server arm
433 CKV_AZURE_31 resource azurerm_postgresql_configuration Ensure server parameter 'log_connections' is set to 'ON' for PostgreSQL Database Server Terraform
434 CKV_AZURE_31 resource Microsoft.DBforPostgreSQL/servers/configurations Ensure configuration 'log_connections' is set to 'ON' for PostgreSQL Database Server arm
435 CKV_AZURE_31 resource configurations Ensure configuration 'log_connections' is set to 'ON' for PostgreSQL Database Server arm
436 CKV_AZURE_32 resource azurerm_postgresql_configuration Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server Terraform
437 CKV_AZURE_32 resource Microsoft.DBforPostgreSQL/servers/configurations Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server arm
438 CKV_AZURE_32 resource configurations Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server arm
439 CKV_AZURE_33 resource azurerm_storage_account Ensure Storage logging is enabled for Queue service for read, write and delete requests Terraform
440 CKV_AZURE_33 resource Microsoft.Storage/storageAccounts/queueServices/providers/diagnosticsettings Ensure Storage logging is enabled for Queue service for read, write and delete requests arm
441 CKV_AZURE_34 resource azurerm_storage_container Ensure that 'Public access level' is set to Private for blob containers Terraform
442 CKV_AZURE_34 resource Microsoft.Storage/storageAccounts/blobServices/containers Ensure that 'Public access level' is set to Private for blob containers arm
443 CKV_AZURE_34 resource containers Ensure that 'Public access level' is set to Private for blob containers arm
444 CKV_AZURE_34 resource blobServices/containers Ensure that 'Public access level' is set to Private for blob containers arm
445 CKV_AZURE_35 resource azurerm_storage_account Ensure default network access rule for Storage Accounts is set to deny Terraform
446 CKV_AZURE_35 resource azurerm_storage_account_network_rules Ensure default network access rule for Storage Accounts is set to deny Terraform
447 CKV_AZURE_35 resource Microsoft.Storage/storageAccounts Ensure default network access rule for Storage Accounts is set to deny arm
448 CKV_AZURE_36 resource azurerm_storage_account Ensure 'Trusted Microsoft Services' is enabled for Storage Account access Terraform
449 CKV_AZURE_36 resource azurerm_storage_account_network_rules Ensure 'Trusted Microsoft Services' is enabled for Storage Account access Terraform
450 CKV_AZURE_36 resource Microsoft.Storage/storageAccounts Ensure 'Trusted Microsoft Services' is enabled for Storage Account access arm
451 CKV_AZURE_37 resource azurerm_monitor_log_profile Ensure that Activity Log Retention is set 365 days or greater Terraform
452 CKV_AZURE_37 resource microsoft.insights/logprofiles Ensure that Activity Log Retention is set 365 days or greater arm
453 CKV_AZURE_38 resource azurerm_monitor_log_profile Ensure audit profile captures all the activities Terraform
454 CKV_AZURE_38 resource microsoft.insights/logprofiles Ensure audit profile captures all the activities arm
455 CKV_AZURE_39 resource azurerm_role_definition Ensure that no custom subscription owner roles are created Terraform
456 CKV_AZURE_39 resource Microsoft.Authorization/roleDefinitions Ensure that no custom subscription owner roles are created arm
457 CKV_AZURE_40 resource azurerm_key_vault_key Ensure that the expiration date is set on all keys Terraform
458 CKV_AZURE_41 resource azurerm_key_vault_secret Ensure that the expiration date is set on all secrets Terraform
459 CKV_AZURE_41 resource Microsoft.KeyVault/vaults/secrets Ensure that the expiration date is set on all secrets arm
460 CKV_AZURE_42 resource azurerm_key_vault Ensure the key vault is recoverable Terraform
461 CKV_AZURE_42 resource Microsoft.KeyVault/vaults Ensure the key vault is recoverable arm
462 CKV_AZURE_43 resource azurerm_storage_account Ensure the Storage Account naming rules Terraform
463 CKV_AZURE_44 resource azurerm_storage_account Ensure Storage Account is using the latest version of TLS encryption Terraform
464 CKV_AZURE_45 resource azurerm_virtual_machine Ensure that no sensitive credentials are exposed in VM custom_data Terraform
465 CKV_AZURE_46 resource azurerm_mssql_database_extended_auditing_policy Specifies a retention period of less than 90 days. Terraform
466 CKV_AZURE_47 resource azurerm_mariadb_server Ensure 'Enforce SSL connection' is set to 'ENABLED' for MariaDB servers Terraform
467 CKV_AZURE_48 resource azurerm_mariadb_server Ensure 'public network access enabled' is set to 'False' for MariaDB servers Terraform
468 CKV_AZURE_49 resource azurerm_linux_virtual_machine_scale_set Ensure Azure linux scale set does not use basic authentication(Use SSH Key Instead) Terraform
469 CKV_AZURE_50 resource azurerm_linux_virtual_machine Ensure Virtual Machine Extensions are not Installed Terraform
470 CKV_AZURE_50 resource azurerm_virtual_machine Ensure Virtual Machine Extensions are not Installed Terraform
471 CKV_AZURE_52 resource azurerm_mssql_server Ensure MSSQL is using the latest version of TLS encryption Terraform
472 CKV_AZURE_53 resource azurerm_mysql_server Ensure 'public network access enabled' is set to 'False' for mySQL servers Terraform
473 CKV_AZURE_54 resource azurerm_mysql_server Ensure MySQL is using the latest version of TLS encryption Terraform
474 CKV_AZURE_55 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for Servers Terraform
475 CKV_AZURE_56 resource azurerm_function_app Ensure that function apps enables Authentication Terraform
476 CKV_AZURE_57 resource azurerm_app_service Ensure that CORS disallows every resource to access app services Terraform
477 CKV_AZURE_58 resource azurerm_synapse_workspace Ensure that Azure Synapse workspaces enables managed virtual networks Terraform
478 CKV_AZURE_59 resource azurerm_storage_account Ensure that Storage accounts disallow public access Terraform
479 CKV_AZURE_60 resource azurerm_storage_account Ensure that storage account enables secure transfer Terraform
480 CKV_AZURE_61 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for App Service Terraform
481 CKV_AZURE_62 resource azurerm_function_app Ensure function apps are not accessible from all regions Terraform
482 CKV_AZURE_63 resource azurerm_app_service Ensure that App service enables HTTP logging Terraform
483 CKV_AZURE_64 resource azurerm_storage_sync Ensure that Azure File Sync disables public network access Terraform
484 CKV_AZURE_65 resource azurerm_app_service Ensure that App service enables detailed error messages Terraform
485 CKV_AZURE_66 resource azurerm_app_service Ensure that App service enables failed request tracing Terraform
486 CKV_AZURE_67 resource azurerm_function_app Ensure that 'HTTP Version' is the latest, if used to run the Function app Terraform
487 CKV_AZURE_68 resource azurerm_postgresql_server Ensure that PostgreSQL server disables public network access Terraform
488 CKV_AZURE_69 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for Azure SQL database servers Terraform
489 CKV_AZURE_70 resource azurerm_function_app Ensure that Function apps is only accessible over HTTPS Terraform
490 CKV_AZURE_71 resource azurerm_app_service Ensure that Managed identity provider is enabled for app services Terraform
491 CKV_AZURE_72 resource azurerm_app_service Ensure that remote debugging is not enabled for app services Terraform
492 CKV_AZURE_73 resource azurerm_automation_variable_bool Ensure that Automation account variables are encrypted Terraform
493 CKV_AZURE_73 resource azurerm_automation_variable_string Ensure that Automation account variables are encrypted Terraform
494 CKV_AZURE_73 resource azurerm_automation_variable_int Ensure that Automation account variables are encrypted Terraform
495 CKV_AZURE_73 resource azurerm_automation_variable_datetime Ensure that Automation account variables are encrypted Terraform
496 CKV_AZURE_74 resource azurerm_kusto_cluster Ensure that Azure Data Explorer uses disk encryption Terraform
497 CKV_AZURE_75 resource azurerm_kusto_cluster Ensure that Azure Data Explorer uses double encryption Terraform
498 CKV_AZURE_76 resource azurerm_batch_account Ensure that Azure Batch account uses key vault to encrypt data Terraform
499 CKV_AZURE_77 resource azurerm_network_security_rule Ensure that UDP Services are restricted from the Internet Terraform
500 CKV_AZURE_77 resource azurerm_network_security_group Ensure that UDP Services are restricted from the Internet Terraform
501 CKV_AZURE_78 resource azurerm_app_service Ensure FTP deployments are disabled Terraform
502 CKV_AZURE_79 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for SQL servers on machines Terraform
503 CKV_AZURE_80 resource azurerm_app_service Ensure that 'Net Framework' version is the latest, if used as a part of the web app Terraform
504 CKV_AZURE_81 resource azurerm_app_service Ensure that 'PHP version' is the latest, if used to run the web app Terraform
505 CKV_AZURE_82 resource azurerm_app_service Ensure that 'Python version' is the latest, if used to run the web app Terraform
506 CKV_AZURE_83 resource azurerm_app_service Ensure that 'Java version' is the latest, if used to run the web app Terraform
507 CKV_AZURE_84 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for Storage Terraform
508 CKV_AZURE_85 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for Kubernetes Terraform
509 CKV_AZURE_86 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for Container Registries Terraform
510 CKV_AZURE_87 resource azurerm_security_center_subscription_pricing Ensure that Azure Defender is set to On for Key Vault Terraform
511 CKV_AZURE_88 resource azurerm_app_service Ensure that app services use Azure Files Terraform
512 CKV_AZURE_89 resource azurerm_redis_cache Ensure that Azure Cache for Redis disables public network access Terraform
513 CKV_AZURE_90 resource azurerm_mysql_server Ensure that MySQL server disables public network access Terraform
514 CKV_AZURE_91 resource azurerm_redis_cache Ensure that only SSL are enabled for Cache for Redis Terraform
515 CKV_AZURE_92 resource azurerm_linux_virtual_machine Ensure that Virtual Machines use managed disks Terraform
516 CKV_AZURE_92 resource azurerm_windows_virtual_machine Ensure that Virtual Machines use managed disks Terraform
517 CKV_AZURE_93 resource azurerm_managed_disk Ensure that managed disks use a specific set of disk encryption sets for the customer-managed key encryption Terraform
518 CKV_AZURE_94 resource azurerm_mysql_server Ensure that My SQL server enables geo-redundant backups Terraform
519 CKV_AZURE_95 resource azurerm_virtual_machine_scale_set Ensure that automatic OS image patching is enabled for Virtual Machine Scale Sets Terraform
520 CKV_AZURE_96 resource azurerm_mysql_server Ensure that MySQL server enables infrastructure encryption Terraform
521 CKV_AZURE_97 resource azurerm_linux_virtual_machine_scale_set Ensure that Virtual machine scale sets have encryption at host enabled Terraform
522 CKV_AZURE_97 resource azurerm_windows_virtual_machine_scale_set Ensure that Virtual machine scale sets have encryption at host enabled Terraform
523 CKV_AZURE_98 resource azurerm_container_group Ensure that Azure Container group is deployed into virtual network Terraform
524 CKV_AZURE_99 resource azurerm_cosmosdb_account Ensure Cosmos DB accounts have restricted access Terraform
525 CKV_AZURE_100 resource azurerm_cosmosdb_account Ensure that Cosmos DB accounts have customer-managed keys to encrypt data at rest Terraform
526 CKV_AZURE_101 resource azurerm_cosmosdb_account Ensure that Azure Cosmos DB disables public network access Terraform
527 CKV_AZURE_102 resource azurerm_postgresql_server Ensure that PostgreSQL server enables geo-redundant backups Terraform
528 CKV_AZURE_103 resource azurerm_data_factory Ensure that Azure Data Factory uses Git repository for source control Terraform
529 CKV_AZURE_104 resource azurerm_data_factory Ensure that Azure Data factory public network access is disabled Terraform
530 CKV_AZURE_105 resource azurerm_data_lake_store Ensure that Data Lake Store accounts enables encryption Terraform
531 CKV_AZURE_106 resource azurerm_eventgrid_domain Ensure that Azure Event Grid Domain public network access is disabled Terraform
532 CKV_AZURE_107 resource azurerm_api_management Ensure that API management services use virtual networks Terraform
533 CKV_AZURE_108 resource azurerm_iothub Ensure that Azure IoT Hub disables public network access Terraform
534 CKV_AZURE_109 resource azurerm_key_vault Ensure that key vault allows firewall rules settings Terraform
535 CKV_AZURE_110 resource azurerm_key_vault Ensure that key vault enables purge protection Terraform
536 CKV_AZURE_111 resource azurerm_key_vault Ensure that key vault enables soft delete Terraform
537 CKV_AZURE_112 resource azurerm_key_vault_key Ensure that key vault key is backed by HSM Terraform
538 CKV_AZURE_113 resource azurerm_mssql_server Ensure that SQL server disables public network access Terraform
539 CKV_AZURE_114 resource azurerm_key_vault_secret Ensure that key vault secrets have "content_type" set Terraform
540 CKV_AZURE_115 resource azurerm_kubernetes_cluster Ensure that AKS enables private clusters Terraform
541 CKV_AZURE_116 resource azurerm_kubernetes_cluster Ensure that AKS uses Azure Policies Add-on Terraform
542 CKV_AZURE_117 resource azurerm_kubernetes_cluster Ensure that AKS uses disk encryption set Terraform
543 CKV_AZURE_118 resource azurerm_network_interface Ensure that Network Interfaces disable IP forwarding Terraform
544 CKV_AZURE_119 resource azurerm_network_interface Ensure that Network Interfaces don't use public IPs Terraform
545 CKV_AZURE_120 resource azurerm_application_gateway Ensure that Application Gateway enables WAF Terraform
546 CKV_AZURE_121 resource azurerm_frontdoor Ensure that Azure Front Door enables WAF Terraform
547 CKV_AZURE_122 resource azurerm_web_application_firewall_policy Ensure that Application Gateway uses WAF in "Detection" or "Prevention" modes Terraform
548 CKV_AZURE_123 resource azurerm_frontdoor_firewall_policy Ensure that Azure Front Door uses WAF in "Detection" or "Prevention" modes Terraform
549 CKV_AZURE_124 resource azurerm_search_service Ensure that Azure Cognitive Search disables public network access Terraform
550 CKV_AZURE_125 resource azurerm_service_fabric_cluster Ensures that Service Fabric use three levels of protection available Terraform
551 CKV_AZURE_126 resource azurerm_service_fabric_cluster Ensures that Active Directory is used for authentication for Service Fabric Terraform
552 CKV_AZURE_127 resource azurerm_mysql_server Ensure that My SQL server enables Threat detection policy Terraform
553 CKV_AZURE_128 resource azurerm_postgresql_server Ensure that PostgreSQL server enables Threat detection policy Terraform
554 CKV_AZURE_129 resource azurerm_mariadb_server Ensure that MariaDB server enables geo-redundant backups Terraform
555 CKV_AZURE_130 resource azurerm_postgresql_server Ensure that PostgreSQL server enables infrastructure encryption Terraform
556 CKV_AZURE_131 resource azurerm_security_center_contact Ensure that 'Security contact emails' is set Terraform
557 CKV_AZURE_131 parameter secureString SecureString parameter should not have hardcoded default values arm
558 CKV2_AZURE_1 resource azurerm_storage_account Ensure storage for critical data are encrypted with Customer Managed Key Terraform
559 CKV2_AZURE_2 resource azurerm_sql_server Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account Terraform
560 CKV2_AZURE_2 resource azurerm_mssql_server_security_alert_policy Ensure that Vulnerability Assessment (VA) is enabled on a SQL server by setting a Storage Account Terraform
561 CKV2_AZURE_3 resource azurerm_mssql_server_vulnerability_assessment Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server Terraform
562 CKV2_AZURE_3 resource azurerm_sql_server Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server Terraform
563 CKV2_AZURE_3 resource azurerm_mssql_server_security_alert_policy Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server Terraform
564 CKV2_AZURE_4 resource azurerm_mssql_server_vulnerability_assessment Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server Terraform
565 CKV2_AZURE_4 resource azurerm_sql_server Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server Terraform
566 CKV2_AZURE_4 resource azurerm_mssql_server_security_alert_policy Ensure that VA setting Periodic Recurring Scans is enabled on a SQL server Terraform
567 CKV2_AZURE_5 resource azurerm_mssql_server_vulnerability_assessment Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server Terraform
568 CKV2_AZURE_5 resource azurerm_sql_server Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server Terraform
569 CKV2_AZURE_5 resource azurerm_mssql_server_security_alert_policy Ensure that VA setting 'Also send email notifications to admins and subscription owners' is set for a SQL server Terraform
570 CKV2_AZURE_6 resource azurerm_sql_server Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled Terraform
571 CKV2_AZURE_6 resource azurerm_sql_firewall_rule Ensure 'Allow access to Azure services' for PostgreSQL Database Server is disabled Terraform
572 CKV2_AZURE_7 resource azurerm_sql_server Ensure that Azure Active Directory Admin is configured Terraform
573 CKV2_AZURE_8 resource azurerm_storage_container Ensure the storage container storing the activity logs is not publicly accessible Terraform
574 CKV2_AZURE_8 resource azurerm_monitor_activity_log_alert Ensure the storage container storing the activity logs is not publicly accessible Terraform
575 CKV2_AZURE_9 resource azurerm_virtual_machine Ensure Virtual Machines are utilizing Managed Disks Terraform
576 CKV2_AZURE_10 resource azurerm_virtual_machine_extension Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines Terraform
577 CKV2_AZURE_10 resource azurerm_virtual_machine Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines Terraform
578 CKV2_AZURE_11 resource azurerm_kusto_cluster Ensure that Azure Data Explorer encryption at rest uses a customer-managed key Terraform
579 CKV2_AZURE_12 resource azurerm_virtual_machine Ensure that virtual machines are backed up using Azure Backup Terraform
580 CKV2_AZURE_13 resource azurerm_sql_server Ensure that sql servers enables data security policy Terraform
581 CKV2_AZURE_13 resource azurerm_mssql_server_security_alert_policy Ensure that sql servers enables data security policy Terraform
582 CKV2_AZURE_14 resource azurerm_managed_disk Ensure that Unattached disks are encrypted Terraform
583 CKV2_AZURE_14 resource azurerm_virtual_machine Ensure that Unattached disks are encrypted Terraform
584 CKV2_AZURE_15 resource azurerm_data_factory Ensure that Azure data factories are encrypted with a customer-managed key Terraform
585 CKV2_AZURE_16 resource azurerm_mysql_server_key Ensure that MySQL server enables customer-managed key for encryption Terraform
586 CKV2_AZURE_16 resource azurerm_mysql_server Ensure that MySQL server enables customer-managed key for encryption Terraform
587 CKV2_AZURE_17 resource azurerm_postgresql_server Ensure that PostgreSQL server enables customer-managed key for encryption Terraform
588 CKV2_AZURE_17 resource azurerm_postgresql_server_key Ensure that PostgreSQL server enables customer-managed key for encryption Terraform
589 CKV2_AZURE_18 resource azurerm_storage_account_customer_managed_key Ensure that Storage Accounts use customer-managed key for encryption Terraform
590 CKV2_AZURE_18 resource azurerm_storage_account Ensure that Storage Accounts use customer-managed key for encryption Terraform
591 CKV2_AZURE_19 resource azurerm_synapse_workspace Ensure that Azure Synapse workspaces have no IP firewall rules attached Terraform
592 CKV2_AZURE_20 resource azurerm_storage_table Ensure Storage logging is enabled for Table service for read requests Terraform
593 CKV2_AZURE_20 resource azurerm_storage_account Ensure Storage logging is enabled for Table service for read requests Terraform
594 CKV2_AZURE_20 resource azurerm_log_analytics_storage_insights Ensure Storage logging is enabled for Table service for read requests Terraform
595 CKV2_AZURE_21 resource azurerm_storage_container Ensure Storage logging is enabled for Blob service for read requests Terraform
596 CKV2_AZURE_21 resource azurerm_storage_account Ensure Storage logging is enabled for Blob service for read requests Terraform
597 CKV2_AZURE_21 resource azurerm_log_analytics_storage_insights Ensure Storage logging is enabled for Blob service for read requests Terraform
598 CKV_DOCKER_1 dockerfile EXPOSE Ensure port 22 is not exposed dockerfile
599 CKV_DOCKER_2 dockerfile * Ensure that HEALTHCHECK instructions have been added to container images dockerfile
600 CKV_DOCKER_3 dockerfile * Ensure that a user for the container has been created dockerfile
601 CKV_DOCKER_4 dockerfile ADD Ensure that COPY is used instead of ADD in Dockerfiles dockerfile
602 CKV_DOCKER_5 dockerfile RUN Ensure update instructions are not use alone in the Dockerfile dockerfile
603 CKV_DOCKER_6 dockerfile MAINTAINER Ensure that LABEL maintainer is used instead of MAINTAINER (deprecated) dockerfile
604 CKV_DOCKER_7 dockerfile FROM Ensure the base image uses a non latest version tag dockerfile
605 CKV_DOCKER_8 dockerfile USER Ensure the last USER is not root dockerfile
606 CKV_GCP_1 resource google_container_cluster Ensure Stackdriver Logging is set to Enabled on Kubernetes Engine Clusters Terraform
607 CKV_GCP_2 resource google_compute_firewall Ensure Google compute firewall ingress does not allow unrestricted ssh access Terraform
608 CKV_GCP_3 resource google_compute_firewall Ensure Google compute firewall ingress does not allow unrestricted rdp access Terraform
609 CKV_GCP_4 resource google_compute_ssl_policy Ensure no HTTPS or SSL proxy load balancers permit SSL policies with weak cipher suites Terraform
610 CKV_GCP_6 resource google_sql_database_instance Ensure all Cloud SQL database instance requires all incoming connections to use SSL Terraform
611 CKV_GCP_7 resource google_container_cluster Ensure Legacy Authorization is set to Disabled on Kubernetes Engine Clusters Terraform
612 CKV_GCP_8 resource google_container_cluster Ensure Stackdriver Monitoring is set to Enabled on Kubernetes Engine Clusters Terraform
613 CKV_GCP_9 resource google_container_node_pool Ensure 'Automatic node repair' is enabled for Kubernetes Clusters Terraform
614 CKV_GCP_10 resource google_container_node_pool Ensure 'Automatic node upgrade' is enabled for Kubernetes Clusters Terraform
615 CKV_GCP_11 resource google_sql_database_instance Ensure that Cloud SQL database Instances are not open to the world Terraform
616 CKV_GCP_12 resource google_container_cluster Ensure Network Policy is enabled on Kubernetes Engine Clusters Terraform
617 CKV_GCP_13 resource google_container_cluster Ensure a client certificate is used by clients to authenticate to Kubernetes Engine Clusters Terraform
618 CKV_GCP_14 resource google_sql_database_instance Ensure all Cloud SQL database instance have backup configuration enabled Terraform
619 CKV_GCP_15 resource google_bigquery_dataset Ensure that BigQuery datasets are not anonymously or publicly accessible Terraform
620 CKV_GCP_16 resource google_dns_managed_zone Ensure that DNSSEC is enabled for Cloud DNS Terraform
621 CKV_GCP_17 resource google_dns_managed_zone Ensure that RSASHA1 is not used for the zone-signing and key-signing keys in Cloud DNS DNSSEC Terraform
622 CKV_GCP_18 resource google_container_cluster Ensure GKE Control Plane is not public Terraform
623 CKV_GCP_19 resource google_container_cluster Ensure GKE basic auth is disabled Terraform
624 CKV_GCP_20 resource google_container_cluster Ensure master authorized networks is set to enabled in GKE clusters Terraform
625 CKV_GCP_21 resource google_container_cluster Ensure Kubernetes Clusters are configured with Labels Terraform
626 CKV_GCP_22 resource google_container_node_pool Ensure Container-Optimized OS (cos) is used for Kubernetes Engine Clusters Node image Terraform
627 CKV_GCP_23 resource google_container_cluster Ensure Kubernetes Cluster is created with Alias IP ranges enabled Terraform
628 CKV_GCP_24 resource google_container_cluster Ensure PodSecurityPolicy controller is enabled on the Kubernetes Engine Clusters Terraform
629 CKV_GCP_25 resource google_container_cluster Ensure Kubernetes Cluster is created with Private cluster enabled Terraform
630 CKV_GCP_26 resource google_compute_subnetwork Ensure that VPC Flow Logs is enabled for every subnet in a VPC Network Terraform
631 CKV_GCP_27 resource google_project Ensure that the default network does not exist in a project Terraform
632 CKV_GCP_28 resource google_storage_bucket_iam_member Ensure that Cloud Storage bucket is not anonymously or publicly accessible Terraform
633 CKV_GCP_28 resource google_storage_bucket_iam_binding Ensure that Cloud Storage bucket is not anonymously or publicly accessible Terraform
634 CKV_GCP_29 resource google_storage_bucket Ensure that Cloud Storage buckets have uniform bucket-level access enabled Terraform
635 CKV_GCP_30 resource google_compute_instance Ensure that instances are not configured to use the default service account Terraform
636 CKV_GCP_31 resource google_compute_instance Ensure that instances are not configured to use the default service account with full access to all Cloud APIs Terraform
637 CKV_GCP_32 resource google_compute_instance Ensure 'Block Project-wide SSH keys' is enabled for VM instances Terraform
638 CKV_GCP_33 resource google_compute_project_metadata Ensure oslogin is enabled for a Project Terraform
639 CKV_GCP_34 resource google_compute_instance Ensure that no instance in the project overrides the project setting for enabling OSLogin(OSLogin needs to be enabled in project metadata for all instances) Terraform
640 CKV_GCP_35 resource google_compute_instance Ensure 'Enable connecting to serial ports' is not enabled for VM Instance Terraform
641 CKV_GCP_36 resource google_compute_instance Ensure that IP forwarding is not enabled on Instances Terraform
642 CKV_GCP_37 resource google_compute_disk Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK) Terraform
643 CKV_GCP_38 resource google_compute_instance Ensure VM disks for critical VMs are encrypted with Customer Supplied Encryption Keys (CSEK) Terraform
644 CKV_GCP_39 resource google_compute_instance Ensure Compute instances are launched with Shielded VM enabled Terraform
645 CKV_GCP_40 resource google_compute_instance Ensure that Compute instances do not have public IP addresses Terraform
646 CKV_GCP_41 resource google_project_iam_member Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level Terraform
647 CKV_GCP_41 resource google_project_iam_binding Ensure that IAM users are not assigned the Service Account User or Service Account Token Creator roles at project level Terraform
648 CKV_GCP_42 resource google_project_iam_member Ensure that Service Account has no Admin privileges Terraform
649 CKV_GCP_43 resource google_kms_crypto_key Ensure KMS encryption keys are rotated within a period of 90 days Terraform
650 CKV_GCP_44 resource google_folder_iam_member Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level Terraform
651 CKV_GCP_44 resource google_folder_iam_binding Ensure no roles that enable to impersonate and manage all service accounts are used at a folder level Terraform
652 CKV_GCP_45 resource google_organization_iam_member Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level Terraform
653 CKV_GCP_45 resource google_organization_iam_binding Ensure no roles that enable to impersonate and manage all service accounts are used at an organization level Terraform
654 CKV_GCP_46 resource google_project_iam_member Ensure Default Service account is not used at a project level Terraform
655 CKV_GCP_46 resource google_project_iam_binding Ensure Default Service account is not used at a project level Terraform
656 CKV_GCP_47 resource google_organization_iam_member Ensure default service account is not used at an organization level Terraform
657 CKV_GCP_47 resource google_organization_iam_binding Ensure default service account is not used at an organization level Terraform
658 CKV_GCP_48 resource google_folder_iam_member Ensure Default Service account is not used at a folder level Terraform
659 CKV_GCP_48 resource google_folder_iam_binding Ensure Default Service account is not used at a folder level Terraform
660 CKV_GCP_49 resource google_project_iam_member Ensure no roles that enable to impersonate and manage all service accounts are used at a project level Terraform
661 CKV_GCP_49 resource google_project_iam_binding Ensure no roles that enable to impersonate and manage all service accounts are used at a project level Terraform
662 CKV_GCP_50 resource google_sql_database_instance Ensure MySQL database 'local_infile' flag is set to 'off' Terraform
663 CKV_GCP_51 resource google_sql_database_instance Ensure PostgreSQL database 'log_checkpoints' flag is set to 'on' Terraform
664 CKV_GCP_52 resource google_sql_database_instance Ensure PostgreSQL database 'log_connections' flag is set to 'on' Terraform
665 CKV_GCP_53 resource google_sql_database_instance Ensure PostgreSQL database 'log_disconnections' flag is set to 'on' Terraform
666 CKV_GCP_54 resource google_sql_database_instance Ensure PostgreSQL database 'log_lock_waits' flag is set to 'on' Terraform
667 CKV_GCP_55 resource google_sql_database_instance Ensure PostgreSQL database 'log_min_messages' flag is set to a valid value Terraform
668 CKV_GCP_56 resource google_sql_database_instance Ensure PostgreSQL database 'log_temp_files flag is set to '0' Terraform
669 CKV_GCP_57 resource google_sql_database_instance Ensure PostgreSQL database 'log_min_duration_statement' flag is set to '-1' Terraform
670 CKV_GCP_58 resource google_sql_database_instance Ensure SQL database 'cross db ownership chaining' flag is set to 'off' Terraform
671 CKV_GCP_59 resource google_sql_database_instance Ensure SQL database 'contained database authentication' flag is set to 'off' Terraform
672 CKV_GCP_60 resource google_sql_database_instance Ensure SQL database do not have public IP Terraform
673 CKV_GCP_61 resource google_container_cluster Enable VPC Flow Logs and Intranode Visibility Terraform
674 CKV_GCP_62 resource google_storage_bucket Bucket should log access Terraform
675 CKV_GCP_63 resource google_storage_bucket Bucket should not log to itself Terraform
676 CKV_GCP_64 resource google_container_cluster Ensure clusters are created with Private Nodes Terraform
677 CKV_GCP_65 resource google_container_cluster Manage Kubernetes RBAC users with Google Groups for GKE Terraform
678 CKV_GCP_66 resource google_container_cluster Ensure use of Binary Authorization Terraform
679 CKV_GCP_67 resource google_container_cluster Ensure legacy Compute Engine instance metadata APIs are Disabled Terraform
680 CKV_GCP_68 resource google_container_cluster Ensure Secure Boot for Shielded GKE Nodes is Enabled Terraform
681 CKV_GCP_68 resource google_container_node_pool Ensure Secure Boot for Shielded GKE Nodes is Enabled Terraform
682 CKV_GCP_69 resource google_container_cluster Ensure the GKE Metadata Server is Enabled Terraform
683 CKV_GCP_69 resource google_container_node_pool Ensure the GKE Metadata Server is Enabled Terraform
684 CKV_GCP_70 resource google_container_cluster Ensure the GKE Release Channel is set Terraform
685 CKV_GCP_71 resource google_container_cluster Ensure Shielded GKE Nodes are Enabled Terraform
686 CKV_GCP_72 resource google_container_cluster Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled Terraform
687 CKV_GCP_72 resource google_container_node_pool Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled Terraform
688 CKV2_GCP_1 resource google_project_default_service_accounts Ensure GKE clusters are not running using the Compute Engine default service account Terraform
689 CKV2_GCP_2 resource google_compute_network Ensure legacy networks do not exist for a project Terraform
690 CKV2_GCP_3 resource google_healthcare_dataset_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
691 CKV2_GCP_3 resource google_folder_iam_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
692 CKV2_GCP_3 resource google_container_analysis_occurrence Ensure that there are only GCP-managed service account keys for each service account Terraform
693 CKV2_GCP_3 resource google_compute_disk Ensure that there are only GCP-managed service account keys for each service account Terraform
694 CKV2_GCP_3 resource google_monitoring_dashboard Ensure that there are only GCP-managed service account keys for each service account Terraform
695 CKV2_GCP_3 resource google_compute_region_instance_group_manager Ensure that there are only GCP-managed service account keys for each service account Terraform
696 CKV2_GCP_3 resource google_access_context_manager_access_level Ensure that there are only GCP-managed service account keys for each service account Terraform
697 CKV2_GCP_3 resource google_monitoring_service Ensure that there are only GCP-managed service account keys for each service account Terraform
698 CKV2_GCP_3 resource google_monitoring_notification_channel Ensure that there are only GCP-managed service account keys for each service account Terraform
699 CKV2_GCP_3 resource google_app_engine_flexible_app_version Ensure that there are only GCP-managed service account keys for each service account Terraform
700 CKV2_GCP_3 resource google_compute_http_health_check Ensure that there are only GCP-managed service account keys for each service account Terraform
701 CKV2_GCP_3 resource google_app_engine_service_split_traffic Ensure that there are only GCP-managed service account keys for each service account Terraform
702 CKV2_GCP_3 resource google_bigquery_job Ensure that there are only GCP-managed service account keys for each service account Terraform
703 CKV2_GCP_3 resource google_dataproc_job_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
704 CKV2_GCP_3 resource google_firestore_index Ensure that there are only GCP-managed service account keys for each service account Terraform
705 CKV2_GCP_3 resource google_endpoints_service_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
706 CKV2_GCP_3 resource google_cloudiot_device Ensure that there are only GCP-managed service account keys for each service account Terraform
707 CKV2_GCP_3 resource google_iap_client Ensure that there are only GCP-managed service account keys for each service account Terraform
708 CKV2_GCP_3 resource google_resource_manager_lien Ensure that there are only GCP-managed service account keys for each service account Terraform
709 CKV2_GCP_3 resource google_monitoring_slo Ensure that there are only GCP-managed service account keys for each service account Terraform
710 CKV2_GCP_3 resource google_compute_snapshot Ensure that there are only GCP-managed service account keys for each service account Terraform
711 CKV2_GCP_3 resource google_bigtable_table Ensure that there are only GCP-managed service account keys for each service account Terraform
712 CKV2_GCP_3 resource google_runtimeconfig_config Ensure that there are only GCP-managed service account keys for each service account Terraform
713 CKV2_GCP_3 resource google_spanner_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
714 CKV2_GCP_3 resource google_redis_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
715 CKV2_GCP_3 resource google_sourcerepo_repository Ensure that there are only GCP-managed service account keys for each service account Terraform
716 CKV2_GCP_3 resource google_compute_node_group Ensure that there are only GCP-managed service account keys for each service account Terraform
717 CKV2_GCP_3 resource google_compute_reservation Ensure that there are only GCP-managed service account keys for each service account Terraform
718 CKV2_GCP_3 resource google_project_iam_custom_role Ensure that there are only GCP-managed service account keys for each service account Terraform
719 CKV2_GCP_3 resource google_dataflow_flex_template_job Ensure that there are only GCP-managed service account keys for each service account Terraform
720 CKV2_GCP_3 resource google_data_catalog_entry Ensure that there are only GCP-managed service account keys for each service account Terraform
721 CKV2_GCP_3 resource google_cloud_asset_organization_feed Ensure that there are only GCP-managed service account keys for each service account Terraform
722 CKV2_GCP_3 resource google_data_catalog_tag Ensure that there are only GCP-managed service account keys for each service account Terraform
723 CKV2_GCP_3 resource google_secret_manager_secret_version Ensure that there are only GCP-managed service account keys for each service account Terraform
724 CKV2_GCP_3 resource google_folder Ensure that there are only GCP-managed service account keys for each service account Terraform
725 CKV2_GCP_3 resource google_spanner_database Ensure that there are only GCP-managed service account keys for each service account Terraform
726 CKV2_GCP_3 resource google_storage_object_access_control Ensure that there are only GCP-managed service account keys for each service account Terraform
727 CKV2_GCP_3 resource google_compute_backend_service_signed_url_key Ensure that there are only GCP-managed service account keys for each service account Terraform
728 CKV2_GCP_3 resource google_compute_image Ensure that there are only GCP-managed service account keys for each service account Terraform
729 CKV2_GCP_3 resource google_organization_iam_custom_role Ensure that there are only GCP-managed service account keys for each service account Terraform
730 CKV2_GCP_3 resource google_sql_ssl_cert Ensure that there are only GCP-managed service account keys for each service account Terraform
731 CKV2_GCP_3 resource google_pubsub_subscription Ensure that there are only GCP-managed service account keys for each service account Terraform
732 CKV2_GCP_3 resource google_project_iam_member Ensure that there are only GCP-managed service account keys for each service account Terraform
733 CKV2_GCP_3 resource google_os_login_ssh_public_key Ensure that there are only GCP-managed service account keys for each service account Terraform
734 CKV2_GCP_3 resource google_cloudbuild_trigger Ensure that there are only GCP-managed service account keys for each service account Terraform
735 CKV2_GCP_3 resource google_compute_subnetwork_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
736 CKV2_GCP_3 resource google_pubsub_topic_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
737 CKV2_GCP_3 resource google_kms_secret_ciphertext Ensure that there are only GCP-managed service account keys for each service account Terraform
738 CKV2_GCP_3 resource google_compute_network_peering Ensure that there are only GCP-managed service account keys for each service account Terraform
739 CKV2_GCP_3 resource google_compute_target_pool Ensure that there are only GCP-managed service account keys for each service account Terraform
740 CKV2_GCP_3 resource google_iap_web_type_app_engine_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
741 CKV2_GCP_3 resource google_scc_source Ensure that there are only GCP-managed service account keys for each service account Terraform
742 CKV2_GCP_3 resource google_healthcare_hl7_v2_store_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
743 CKV2_GCP_3 resource google_storage_bucket_iam_binding Ensure that there are only GCP-managed service account keys for each service account Terraform
744 CKV2_GCP_3 resource google_storage_transfer_job Ensure that there are only GCP-managed service account keys for each service account Terraform
745 CKV2_GCP_3 resource google_compute_region_health_check Ensure that there are only GCP-managed service account keys for each service account Terraform
746 CKV2_GCP_3 resource google_sql_source_representation_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
747 CKV2_GCP_3 resource google_compute_project_metadata_item Ensure that there are only GCP-managed service account keys for each service account Terraform
748 CKV2_GCP_3 resource google_cloud_scheduler_job Ensure that there are only GCP-managed service account keys for each service account Terraform
749 CKV2_GCP_3 resource google_storage_bucket_access_control Ensure that there are only GCP-managed service account keys for each service account Terraform
750 CKV2_GCP_3 resource google_dns_managed_zone Ensure that there are only GCP-managed service account keys for each service account Terraform
751 CKV2_GCP_3 resource google_storage_notification Ensure that there are only GCP-managed service account keys for each service account Terraform
752 CKV2_GCP_3 resource google_compute_network Ensure that there are only GCP-managed service account keys for each service account Terraform
753 CKV2_GCP_3 resource google_bigtable_app_profile Ensure that there are only GCP-managed service account keys for each service account Terraform
754 CKV2_GCP_3 resource google_healthcare_dicom_store Ensure that there are only GCP-managed service account keys for each service account Terraform
755 CKV2_GCP_3 resource google_network_management_connectivity_test_resource Ensure that there are only GCP-managed service account keys for each service account Terraform
756 CKV2_GCP_3 resource google_service_account_key Ensure that there are only GCP-managed service account keys for each service account Terraform
757 CKV2_GCP_3 resource google_organization_iam_audit_config Ensure that there are only GCP-managed service account keys for each service account Terraform
758 CKV2_GCP_3 resource google_billing_account_iam_member Ensure that there are only GCP-managed service account keys for each service account Terraform
759 CKV2_GCP_3 resource google_compute_interconnect_attachment Ensure that there are only GCP-managed service account keys for each service account Terraform
760 CKV2_GCP_3 resource google_compute_address Ensure that there are only GCP-managed service account keys for each service account Terraform
761 CKV2_GCP_3 resource google_compute_router_bgp_peer Ensure that there are only GCP-managed service account keys for each service account Terraform
762 CKV2_GCP_3 resource google_project_organization_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
763 CKV2_GCP_3 resource google_endpoints_service Ensure that there are only GCP-managed service account keys for each service account Terraform
764 CKV2_GCP_3 resource google_bigquery_table Ensure that there are only GCP-managed service account keys for each service account Terraform
765 CKV2_GCP_3 resource google_folder_iam_audit_config Ensure that there are only GCP-managed service account keys for each service account Terraform
766 CKV2_GCP_3 resource google_compute_autoscaler Ensure that there are only GCP-managed service account keys for each service account Terraform
767 CKV2_GCP_3 resource google_identity_platform_oauth_idp_config Ensure that there are only GCP-managed service account keys for each service account Terraform
768 CKV2_GCP_3 resource google_os_config_patch_deployment Ensure that there are only GCP-managed service account keys for each service account Terraform
769 CKV2_GCP_3 resource google_cloud_run_service Ensure that there are only GCP-managed service account keys for each service account Terraform
770 CKV2_GCP_3 resource google_folder_organization_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
771 CKV2_GCP_3 resource google_secret_manager_secret Ensure that there are only GCP-managed service account keys for each service account Terraform
772 CKV2_GCP_3 resource google_cloud_asset_folder_feed Ensure that there are only GCP-managed service account keys for each service account Terraform
773 CKV2_GCP_3 resource google_monitoring_uptime_check_config Ensure that there are only GCP-managed service account keys for each service account Terraform
774 CKV2_GCP_3 resource google_compute_forwarding_rule Ensure that there are only GCP-managed service account keys for each service account Terraform
775 CKV2_GCP_3 resource google_compute_instance_from_template Ensure that there are only GCP-managed service account keys for each service account Terraform
776 CKV2_GCP_3 resource google_logging_billing_account_bucket_config Ensure that there are only GCP-managed service account keys for each service account Terraform
777 CKV2_GCP_3 resource google_bigtable_instance_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
778 CKV2_GCP_3 resource google_logging_folder_sink Ensure that there are only GCP-managed service account keys for each service account Terraform
779 CKV2_GCP_3 resource google_dataproc_cluster Ensure that there are only GCP-managed service account keys for each service account Terraform
780 CKV2_GCP_3 resource google_compute_region_target_https_proxy Ensure that there are only GCP-managed service account keys for each service account Terraform
781 CKV2_GCP_3 resource google_storage_bucket_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
782 CKV2_GCP_3 resource google_spanner_instance_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
783 CKV2_GCP_3 resource google_app_engine_application_url_dispatch_rules Ensure that there are only GCP-managed service account keys for each service account Terraform
784 CKV2_GCP_3 resource google_storage_object_acl Ensure that there are only GCP-managed service account keys for each service account Terraform
785 CKV2_GCP_3 resource google_billing_account_iam_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
786 CKV2_GCP_3 resource google_usage_export_bucket Ensure that there are only GCP-managed service account keys for each service account Terraform
787 CKV2_GCP_3 resource google_service_account_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
788 CKV2_GCP_3 resource google_spanner_database_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
789 CKV2_GCP_3 resource google_service_networking_connection Ensure that there are only GCP-managed service account keys for each service account Terraform
790 CKV2_GCP_3 resource google_compute_region_disk Ensure that there are only GCP-managed service account keys for each service account Terraform
791 CKV2_GCP_3 resource google_compute_vpn_gateway Ensure that there are only GCP-managed service account keys for each service account Terraform
792 CKV2_GCP_3 resource google_bigquery_dataset Ensure that there are only GCP-managed service account keys for each service account Terraform
793 CKV2_GCP_3 resource google_compute_target_tcp_proxy Ensure that there are only GCP-managed service account keys for each service account Terraform
794 CKV2_GCP_3 resource google_bigtable_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
795 CKV2_GCP_3 resource google_access_context_manager_service_perimeter_resource Ensure that there are only GCP-managed service account keys for each service account Terraform
796 CKV2_GCP_3 resource google_identity_platform_tenant_inbound_saml_config Ensure that there are only GCP-managed service account keys for each service account Terraform
797 CKV2_GCP_3 resource google_project_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
798 CKV2_GCP_3 resource google_project_service Ensure that there are only GCP-managed service account keys for each service account Terraform
799 CKV2_GCP_3 resource google_compute_attached_disk Ensure that there are only GCP-managed service account keys for each service account Terraform
800 CKV2_GCP_3 resource google_composer_environment Ensure that there are only GCP-managed service account keys for each service account Terraform
801 CKV2_GCP_3 resource google_compute_region_autoscaler Ensure that there are only GCP-managed service account keys for each service account Terraform
802 CKV2_GCP_3 resource google_datastore_index Ensure that there are only GCP-managed service account keys for each service account Terraform
803 CKV2_GCP_3 resource google_dialogflow_intent Ensure that there are only GCP-managed service account keys for each service account Terraform
804 CKV2_GCP_3 resource google_runtimeconfig_config_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
805 CKV2_GCP_3 resource google_storage_hmac_key Ensure that there are only GCP-managed service account keys for each service account Terraform
806 CKV2_GCP_3 resource google_bigtable_gc_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
807 CKV2_GCP_3 resource google_logging_organization_sink Ensure that there are only GCP-managed service account keys for each service account Terraform
808 CKV2_GCP_3 resource google_compute_region_backend_service Ensure that there are only GCP-managed service account keys for each service account Terraform
809 CKV2_GCP_3 resource google_iap_tunnel_instance_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
810 CKV2_GCP_3 resource google_compute_backend_bucket Ensure that there are only GCP-managed service account keys for each service account Terraform
811 CKV2_GCP_3 resource google_dataflow_job Ensure that there are only GCP-managed service account keys for each service account Terraform
812 CKV2_GCP_3 resource google_iap_web_backend_service_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
813 CKV2_GCP_3 resource google_logging_project_exclusion Ensure that there are only GCP-managed service account keys for each service account Terraform
814 CKV2_GCP_3 resource google_iap_web_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
815 CKV2_GCP_3 resource google_project_iam_binding Ensure that there are only GCP-managed service account keys for each service account Terraform
816 CKV2_GCP_3 resource google_compute_target_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
817 CKV2_GCP_3 resource google_kms_key_ring Ensure that there are only GCP-managed service account keys for each service account Terraform
818 CKV2_GCP_3 resource google_compute_target_ssl_proxy Ensure that there are only GCP-managed service account keys for each service account Terraform
819 CKV2_GCP_3 resource google_compute_security_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
820 CKV2_GCP_3 resource google_pubsub_topic Ensure that there are only GCP-managed service account keys for each service account Terraform
821 CKV2_GCP_3 resource google_dialogflow_entity_type Ensure that there are only GCP-managed service account keys for each service account Terraform
822 CKV2_GCP_3 resource google_container_registry Ensure that there are only GCP-managed service account keys for each service account Terraform
823 CKV2_GCP_3 resource google_binary_authorization_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
824 CKV2_GCP_3 resource google_compute_network_peering_routes_config Ensure that there are only GCP-managed service account keys for each service account Terraform
825 CKV2_GCP_3 resource google_compute_ssl_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
826 CKV2_GCP_3 resource google_compute_https_health_check Ensure that there are only GCP-managed service account keys for each service account Terraform
827 CKV2_GCP_3 resource google_logging_folder_bucket_config Ensure that there are only GCP-managed service account keys for each service account Terraform
828 CKV2_GCP_3 resource google_compute_network_endpoint Ensure that there are only GCP-managed service account keys for each service account Terraform
829 CKV2_GCP_3 resource google_compute_instance_template Ensure that there are only GCP-managed service account keys for each service account Terraform
830 CKV2_GCP_3 resource google_logging_billing_account_exclusion Ensure that there are only GCP-managed service account keys for each service account Terraform
831 CKV2_GCP_3 resource google_compute_vpn_tunnel Ensure that there are only GCP-managed service account keys for each service account Terraform
832 CKV2_GCP_3 resource google_secret_manager_secret_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
833 CKV2_GCP_3 resource google_compute_region_target_http_proxy Ensure that there are only GCP-managed service account keys for each service account Terraform
834 CKV2_GCP_3 resource google_healthcare_dataset Ensure that there are only GCP-managed service account keys for each service account Terraform
835 CKV2_GCP_3 resource google_tpu_node Ensure that there are only GCP-managed service account keys for each service account Terraform
836 CKV2_GCP_3 resource google_compute_instance_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
837 CKV2_GCP_3 resource google_bigquery_data_transfer_config Ensure that there are only GCP-managed service account keys for each service account Terraform
838 CKV2_GCP_3 resource google_organization_iam_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
839 CKV2_GCP_3 resource google_billing_account_iam_binding Ensure that there are only GCP-managed service account keys for each service account Terraform
840 CKV2_GCP_3 resource google_access_context_manager_service_perimeter Ensure that there are only GCP-managed service account keys for each service account Terraform
841 CKV2_GCP_3 resource google_compute_firewall Ensure that there are only GCP-managed service account keys for each service account Terraform
842 CKV2_GCP_3 resource google_compute_global_network_endpoint_group Ensure that there are only GCP-managed service account keys for each service account Terraform
843 CKV2_GCP_3 resource google_storage_default_object_access_control Ensure that there are only GCP-managed service account keys for each service account Terraform
844 CKV2_GCP_3 resource google_storage_bucket_object Ensure that there are only GCP-managed service account keys for each service account Terraform
845 CKV2_GCP_3 resource google_iap_brand Ensure that there are only GCP-managed service account keys for each service account Terraform
846 CKV2_GCP_3 resource google_compute_node_template Ensure that there are only GCP-managed service account keys for each service account Terraform
847 CKV2_GCP_3 resource google_compute_router Ensure that there are only GCP-managed service account keys for each service account Terraform
848 CKV2_GCP_3 resource google_compute_ssl_certificate Ensure that there are only GCP-managed service account keys for each service account Terraform
849 CKV2_GCP_3 resource google_kms_key_ring_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
850 CKV2_GCP_3 resource google_storage_bucket_acl Ensure that there are only GCP-managed service account keys for each service account Terraform
851 CKV2_GCP_3 resource google_container_analysis_note Ensure that there are only GCP-managed service account keys for each service account Terraform
852 CKV2_GCP_3 resource google_iap_app_engine_version_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
853 CKV2_GCP_3 resource google_app_engine_application Ensure that there are only GCP-managed service account keys for each service account Terraform
854 CKV2_GCP_3 resource google_compute_route Ensure that there are only GCP-managed service account keys for each service account Terraform
855 CKV2_GCP_3 resource google_compute_resource_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
856 CKV2_GCP_3 resource google_logging_folder_exclusion Ensure that there are only GCP-managed service account keys for each service account Terraform
857 CKV2_GCP_3 resource google_app_engine_domain_mapping Ensure that there are only GCP-managed service account keys for each service account Terraform
858 CKV2_GCP_3 resource google_vpc_access_connector Ensure that there are only GCP-managed service account keys for each service account Terraform
859 CKV2_GCP_3 resource google_healthcare_fhir_store Ensure that there are only GCP-managed service account keys for each service account Terraform
860 CKV2_GCP_3 resource google_compute_subnetwork Ensure that there are only GCP-managed service account keys for each service account Terraform
861 CKV2_GCP_3 resource google_organization_iam_binding Ensure that there are only GCP-managed service account keys for each service account Terraform
862 CKV2_GCP_3 resource google_compute_project_default_network_tier Ensure that there are only GCP-managed service account keys for each service account Terraform
863 CKV2_GCP_3 resource google_healthcare_fhir_store_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
864 CKV2_GCP_3 resource google_compute_region_ssl_certificate Ensure that there are only GCP-managed service account keys for each service account Terraform
865 CKV2_GCP_3 resource google_deployment_manager_deployment Ensure that there are only GCP-managed service account keys for each service account Terraform
866 CKV2_GCP_3 resource google_bigquery_dataset_access Ensure that there are only GCP-managed service account keys for each service account Terraform
867 CKV2_GCP_3 resource google_organization_iam_member Ensure that there are only GCP-managed service account keys for each service account Terraform
868 CKV2_GCP_3 resource google_bigquery_dataset_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
869 CKV2_GCP_3 resource google_cloud_asset_project_feed Ensure that there are only GCP-managed service account keys for each service account Terraform
870 CKV2_GCP_3 resource google_container_cluster Ensure that there are only GCP-managed service account keys for each service account Terraform
871 CKV2_GCP_3 resource google_folder_iam_binding Ensure that there are only GCP-managed service account keys for each service account Terraform
872 CKV2_GCP_3 resource google_cloud_run_service_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
873 CKV2_GCP_3 resource google_compute_project_metadata Ensure that there are only GCP-managed service account keys for each service account Terraform
874 CKV2_GCP_3 resource google_compute_network_endpoint_group Ensure that there are only GCP-managed service account keys for each service account Terraform
875 CKV2_GCP_3 resource google_folder_iam_member Ensure that there are only GCP-managed service account keys for each service account Terraform
876 CKV2_GCP_3 resource google_data_catalog_entry_group_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
877 CKV2_GCP_3 resource google_dataproc_cluster_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
878 CKV2_GCP_3 resource google_compute_global_network_endpoint Ensure that there are only GCP-managed service account keys for each service account Terraform
879 CKV2_GCP_3 resource google_identity_platform_tenant Ensure that there are only GCP-managed service account keys for each service account Terraform
880 CKV2_GCP_3 resource google_kms_crypto_key Ensure that there are only GCP-managed service account keys for each service account Terraform
881 CKV2_GCP_3 resource google_logging_organization_bucket_config Ensure that there are only GCP-managed service account keys for each service account Terraform
882 CKV2_GCP_3 resource google_cloud_run_domain_mapping Ensure that there are only GCP-managed service account keys for each service account Terraform
883 CKV2_GCP_3 resource google_compute_router_interface Ensure that there are only GCP-managed service account keys for each service account Terraform
884 CKV2_GCP_3 resource google_compute_region_disk_resource_policy_attachment Ensure that there are only GCP-managed service account keys for each service account Terraform
885 CKV2_GCP_3 resource google_container_node_pool Ensure that there are only GCP-managed service account keys for each service account Terraform
886 CKV2_GCP_3 resource google_kms_crypto_key_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
887 CKV2_GCP_3 resource google_app_engine_firewall_rule Ensure that there are only GCP-managed service account keys for each service account Terraform
888 CKV2_GCP_3 resource google_logging_billing_account_sink Ensure that there are only GCP-managed service account keys for each service account Terraform
889 CKV2_GCP_3 resource google_dns_record_set Ensure that there are only GCP-managed service account keys for each service account Terraform
890 CKV2_GCP_3 resource google_iap_app_engine_service_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
891 CKV2_GCP_3 resource google_storage_default_object_acl Ensure that there are only GCP-managed service account keys for each service account Terraform
892 CKV2_GCP_3 resource google_healthcare_hl7_v2_store Ensure that there are only GCP-managed service account keys for each service account Terraform
893 CKV2_GCP_3 resource google_healthcare_dicom_store_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
894 CKV2_GCP_3 resource google_sql_database Ensure that there are only GCP-managed service account keys for each service account Terraform
895 CKV2_GCP_3 resource google_monitoring_alert_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
896 CKV2_GCP_3 resource google_compute_region_url_map Ensure that there are only GCP-managed service account keys for each service account Terraform
897 CKV2_GCP_3 resource google_compute_instance_group_manager Ensure that there are only GCP-managed service account keys for each service account Terraform
898 CKV2_GCP_3 resource google_compute_router_nat Ensure that there are only GCP-managed service account keys for each service account Terraform
899 CKV2_GCP_3 resource google_compute_target_http_proxy Ensure that there are only GCP-managed service account keys for each service account Terraform
900 CKV2_GCP_3 resource google_sql_user Ensure that there are only GCP-managed service account keys for each service account Terraform
901 CKV2_GCP_3 resource google_compute_instance_group_named_port Ensure that there are only GCP-managed service account keys for each service account Terraform
902 CKV2_GCP_3 resource google_sourcerepo_repository_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
903 CKV2_GCP_3 resource google_logging_project_sink Ensure that there are only GCP-managed service account keys for each service account Terraform
904 CKV2_GCP_3 resource google_dataproc_job Ensure that there are only GCP-managed service account keys for each service account Terraform
905 CKV2_GCP_3 resource google_storage_bucket_iam_member Ensure that there are only GCP-managed service account keys for each service account Terraform
906 CKV2_GCP_3 resource google_app_engine_standard_app_version Ensure that there are only GCP-managed service account keys for each service account Terraform
907 CKV2_GCP_3 resource google_access_context_manager_access_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
908 CKV2_GCP_3 resource google_identity_platform_tenant_oauth_idp_config Ensure that there are only GCP-managed service account keys for each service account Terraform
909 CKV2_GCP_3 resource google_monitoring_metric_descriptor Ensure that there are only GCP-managed service account keys for each service account Terraform
910 CKV2_GCP_3 resource google_compute_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
911 CKV2_GCP_3 resource google_data_catalog_entry_group Ensure that there are only GCP-managed service account keys for each service account Terraform
912 CKV2_GCP_3 resource google_filestore_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
913 CKV2_GCP_3 resource google_cloudfunctions_cloud_function_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
914 CKV2_GCP_3 resource google_compute_backend_service Ensure that there are only GCP-managed service account keys for each service account Terraform
915 CKV2_GCP_3 resource google_identity_platform_tenant_default_supported_idp_config Ensure that there are only GCP-managed service account keys for each service account Terraform
916 CKV2_GCP_3 resource google_compute_health_check Ensure that there are only GCP-managed service account keys for each service account Terraform
917 CKV2_GCP_3 resource google_runtimeconfig_variable Ensure that there are only GCP-managed service account keys for each service account Terraform
918 CKV2_GCP_3 resource google_storage_bucket Ensure that there are only GCP-managed service account keys for each service account Terraform
919 CKV2_GCP_3 resource google_active_directory_domain Ensure that there are only GCP-managed service account keys for each service account Terraform
920 CKV2_GCP_3 resource google_logging_project_bucket_config Ensure that there are only GCP-managed service account keys for each service account Terraform
921 CKV2_GCP_3 resource google_project Ensure that there are only GCP-managed service account keys for each service account Terraform
922 CKV2_GCP_3 resource google_compute_target_https_proxy Ensure that there are only GCP-managed service account keys for each service account Terraform
923 CKV2_GCP_3 resource google_cloudfunctions_function Ensure that there are only GCP-managed service account keys for each service account Terraform
924 CKV2_GCP_3 resource google_identity_platform_default_supported_idp_config Ensure that there are only GCP-managed service account keys for each service account Terraform
925 CKV2_GCP_3 resource google_binary_authorization_attestor_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
926 CKV2_GCP_3 resource google_dialogflow_agent Ensure that there are only GCP-managed service account keys for each service account Terraform
927 CKV2_GCP_3 resource google_logging_organization_exclusion Ensure that there are only GCP-managed service account keys for each service account Terraform
928 CKV2_GCP_3 resource google_compute_global_forwarding_rule Ensure that there are only GCP-managed service account keys for each service account Terraform
929 CKV2_GCP_3 resource google_cloudiot_device_registry Ensure that there are only GCP-managed service account keys for each service account Terraform
930 CKV2_GCP_3 resource google_data_catalog_tag_template Ensure that there are only GCP-managed service account keys for each service account Terraform
931 CKV2_GCP_3 resource google_dns_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
932 CKV2_GCP_3 resource google_cloud_tasks_queue Ensure that there are only GCP-managed service account keys for each service account Terraform
933 CKV2_GCP_3 resource google_binary_authorization_attestor Ensure that there are only GCP-managed service account keys for each service account Terraform
934 CKV2_GCP_3 resource google_compute_url_map Ensure that there are only GCP-managed service account keys for each service account Terraform
935 CKV2_GCP_3 resource google_compute_disk_resource_policy_attachment Ensure that there are only GCP-managed service account keys for each service account Terraform
936 CKV2_GCP_3 resource google_ml_engine_model Ensure that there are only GCP-managed service account keys for each service account Terraform
937 CKV2_GCP_3 resource google_compute_shared_vpc_service_project Ensure that there are only GCP-managed service account keys for each service account Terraform
938 CKV2_GCP_3 resource google_pubsub_subscription_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
939 CKV2_GCP_3 resource google_compute_shared_vpc_host_project Ensure that there are only GCP-managed service account keys for each service account Terraform
940 CKV2_GCP_3 resource google_kms_key_ring_import_job Ensure that there are only GCP-managed service account keys for each service account Terraform
941 CKV2_GCP_3 resource google_sql_database_instance Ensure that there are only GCP-managed service account keys for each service account Terraform
942 CKV2_GCP_3 resource google_identity_platform_inbound_saml_config Ensure that there are only GCP-managed service account keys for each service account Terraform
943 CKV2_GCP_3 resource google_iap_web_type_compute_iam Ensure that there are only GCP-managed service account keys for each service account Terraform
944 CKV2_GCP_3 resource google_monitoring_group Ensure that there are only GCP-managed service account keys for each service account Terraform
945 CKV2_GCP_3 resource google_organization_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
946 CKV2_GCP_3 resource google_compute_backend_bucket_signed_url_key Ensure that there are only GCP-managed service account keys for each service account Terraform
947 CKV2_GCP_3 resource google_compute_instance_group Ensure that there are only GCP-managed service account keys for each service account Terraform
948 CKV2_GCP_3 resource google_dataproc_autoscaling_policy Ensure that there are only GCP-managed service account keys for each service account Terraform
949 CKV2_GCP_3 resource google_service_account Ensure that there are only GCP-managed service account keys for each service account Terraform
950 CKV2_GCP_3 resource google_logging_metric Ensure that there are only GCP-managed service account keys for each service account Terraform
951 CKV2_GCP_3 resource google_compute_global_address Ensure that there are only GCP-managed service account keys for each service account Terraform
952 CKV2_GCP_4 resource google_logging_folder_sink Ensure that retention policies on log buckets are configured using Bucket Lock Terraform
953 CKV2_GCP_4 resource google_logging_organization_sink Ensure that retention policies on log buckets are configured using Bucket Lock Terraform
954 CKV2_GCP_4 resource google_logging_project_sink Ensure that retention policies on log buckets are configured using Bucket Lock Terraform
955 CKV2_GCP_4 resource google_storage_bucket Ensure that retention policies on log buckets are configured using Bucket Lock Terraform
956 CKV2_GCP_5 resource google_project_iam_audit_config Ensure that Cloud Audit Logging is configured properly across all services and all users from a project Terraform
957 CKV2_GCP_5 resource google_project Ensure that Cloud Audit Logging is configured properly across all services and all users from a project Terraform
958 CKV2_GCP_6 resource google_kms_crypto_key_iam_member Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible Terraform
959 CKV2_GCP_6 resource google_kms_crypto_key Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible Terraform
960 CKV2_GCP_6 resource google_kms_crypto_key_iam_binding Ensure that Cloud KMS cryptokeys are not anonymously or publicly accessible Terraform
961 CKV2_GCP_7 resource google_sql_user Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges Terraform
962 CKV2_GCP_7 resource google_sql_database_instance Ensure that a MySQL database instance does not allow anyone to connect with administrative privileges Terraform
963 CKV_GIT_1 resource github_repository Ensure Repository is Private Terraform
964 CKV_K8S_1 resource PodSecurityPolicy Do not admit containers wishing to share the host process ID namespace Kubernetes
965 CKV_K8S_2 resource PodSecurityPolicy Do not admit privileged containers Kubernetes
966 CKV_K8S_3 resource PodSecurityPolicy Do not admit containers wishing to share the host IPC namespace Kubernetes
967 CKV_K8S_4 resource PodSecurityPolicy Do not admit containers wishing to share the host network namespace Kubernetes
968 CKV_K8S_5 resource PodSecurityPolicy Containers should not run with allowPrivilegeEscalation Kubernetes
969 CKV_K8S_6 resource PodSecurityPolicy Do not admit root containers Kubernetes
970 CKV_K8S_7 resource PodSecurityPolicy Do not admit containers with the NET_RAW capability Kubernetes
971 CKV_K8S_8 resource containers Liveness Probe Should be Configured Kubernetes
972 CKV_K8S_9 resource containers Readiness Probe Should be Configured Kubernetes
973 CKV_K8S_10 resource containers CPU requests should be set Kubernetes
974 CKV_K8S_10 resource initContainers CPU requests should be set Kubernetes
975 CKV_K8S_11 resource containers CPU limits should be set Kubernetes
976 CKV_K8S_11 resource initContainers CPU limits should be set Kubernetes
977 CKV_K8S_12 resource containers Memory requests should be set Kubernetes
978 CKV_K8S_12 resource initContainers Memory requests should be set Kubernetes
979 CKV_K8S_13 resource containers Memory limits should be set Kubernetes
980 CKV_K8S_13 resource initContainers Memory limits should be set Kubernetes
981 CKV_K8S_14 resource containers Image Tag should be fixed - not latest or blank Kubernetes
982 CKV_K8S_14 resource initContainers Image Tag should be fixed - not latest or blank Kubernetes
983 CKV_K8S_15 resource containers Image Pull Policy should be Always Kubernetes
984 CKV_K8S_15 resource initContainers Image Pull Policy should be Always Kubernetes
985 CKV_K8S_16 resource containers Container should not be privileged Kubernetes
986 CKV_K8S_16 resource initContainers Container should not be privileged Kubernetes
987 CKV_K8S_17 resource Pod Containers should not share the host process ID namespace Kubernetes
988 CKV_K8S_17 resource Deployment Containers should not share the host process ID namespace Kubernetes
989 CKV_K8S_17 resource DaemonSet Containers should not share the host process ID namespace Kubernetes
990 CKV_K8S_17 resource StatefulSet Containers should not share the host process ID namespace Kubernetes
991 CKV_K8S_17 resource ReplicaSet Containers should not share the host process ID namespace Kubernetes
992 CKV_K8S_17 resource ReplicationController Containers should not share the host process ID namespace Kubernetes
993 CKV_K8S_17 resource Job Containers should not share the host process ID namespace Kubernetes
994 CKV_K8S_17 resource CronJob Containers should not share the host process ID namespace Kubernetes
995 CKV_K8S_18 resource Pod Containers should not share the host IPC namespace Kubernetes
996 CKV_K8S_18 resource Deployment Containers should not share the host IPC namespace Kubernetes
997 CKV_K8S_18 resource DaemonSet Containers should not share the host IPC namespace Kubernetes
998 CKV_K8S_18 resource StatefulSet Containers should not share the host IPC namespace Kubernetes
999 CKV_K8S_18 resource ReplicaSet Containers should not share the host IPC namespace Kubernetes
1000 CKV_K8S_18 resource ReplicationController Containers should not share the host IPC namespace Kubernetes
1001 CKV_K8S_18 resource Job Containers should not share the host IPC namespace Kubernetes
1002 CKV_K8S_18 resource CronJob Containers should not share the host IPC namespace Kubernetes
1003 CKV_K8S_19 resource Pod Containers should not share the host network namespace Kubernetes
1004 CKV_K8S_19 resource Deployment Containers should not share the host network namespace Kubernetes
1005 CKV_K8S_19 resource DaemonSet Containers should not share the host network namespace Kubernetes
1006 CKV_K8S_19 resource StatefulSet Containers should not share the host network namespace Kubernetes
1007 CKV_K8S_19 resource ReplicaSet Containers should not share the host network namespace Kubernetes
1008 CKV_K8S_19 resource ReplicationController Containers should not share the host network namespace Kubernetes
1009 CKV_K8S_19 resource Job Containers should not share the host network namespace Kubernetes
1010 CKV_K8S_19 resource CronJob Containers should not share the host network namespace Kubernetes
1011 CKV_K8S_20 resource containers Containers should not run with allowPrivilegeEscalation Kubernetes
1012 CKV_K8S_20 resource initContainers Containers should not run with allowPrivilegeEscalation Kubernetes
1013 CKV_K8S_21 resource Service The default namespace should not be used Kubernetes
1014 CKV_K8S_21 resource Pod The default namespace should not be used Kubernetes
1015 CKV_K8S_21 resource Deployment The default namespace should not be used Kubernetes
1016 CKV_K8S_21 resource DaemonSet The default namespace should not be used Kubernetes
1017 CKV_K8S_21 resource StatefulSet The default namespace should not be used Kubernetes
1018 CKV_K8S_21 resource ReplicaSet The default namespace should not be used Kubernetes
1019 CKV_K8S_21 resource ReplicationController The default namespace should not be used Kubernetes
1020 CKV_K8S_21 resource Job The default namespace should not be used Kubernetes
1021 CKV_K8S_21 resource CronJob The default namespace should not be used Kubernetes
1022 CKV_K8S_21 resource Secret The default namespace should not be used Kubernetes
1023 CKV_K8S_21 resource ServiceAccount The default namespace should not be used Kubernetes
1024 CKV_K8S_21 resource Role The default namespace should not be used Kubernetes
1025 CKV_K8S_21 resource RoleBinding The default namespace should not be used Kubernetes
1026 CKV_K8S_21 resource ConfigMap The default namespace should not be used Kubernetes
1027 CKV_K8S_21 resource Ingress The default namespace should not be used Kubernetes
1028 CKV_K8S_22 resource containers Use read-only filesystem for containers where possible Kubernetes
1029 CKV_K8S_22 resource initContainers Use read-only filesystem for containers where possible Kubernetes
1030 CKV_K8S_23 resource Pod Minimize the admission of root containers Kubernetes
1031 CKV_K8S_23 resource Deployment Minimize the admission of root containers Kubernetes
1032 CKV_K8S_23 resource DaemonSet Minimize the admission of root containers Kubernetes
1033 CKV_K8S_23 resource StatefulSet Minimize the admission of root containers Kubernetes
1034 CKV_K8S_23 resource ReplicaSet Minimize the admission of root containers Kubernetes
1035 CKV_K8S_23 resource ReplicationController Minimize the admission of root containers Kubernetes
1036 CKV_K8S_23 resource Job Minimize the admission of root containers Kubernetes
1037 CKV_K8S_23 resource CronJob Minimize the admission of root containers Kubernetes
1038 CKV_K8S_24 resource PodSecurityPolicy Do not allow containers with added capability Kubernetes
1039 CKV_K8S_25 resource containers Minimize the admission of containers with added capability Kubernetes
1040 CKV_K8S_25 resource initContainers Minimize the admission of containers with added capability Kubernetes
1041 CKV_K8S_26 resource containers Do not specify hostPort unless absolutely necessary Kubernetes
1042 CKV_K8S_26 resource initContainers Do not specify hostPort unless absolutely necessary Kubernetes
1043 CKV_K8S_27 resource Pod Do not expose the docker daemon socket to containers Kubernetes
1044 CKV_K8S_27 resource Deployment Do not expose the docker daemon socket to containers Kubernetes
1045 CKV_K8S_27 resource DaemonSet Do not expose the docker daemon socket to containers Kubernetes
1046 CKV_K8S_27 resource StatefulSet Do not expose the docker daemon socket to containers Kubernetes
1047 CKV_K8S_27 resource ReplicaSet Do not expose the docker daemon socket to containers Kubernetes
1048 CKV_K8S_27 resource ReplicationController Do not expose the docker daemon socket to containers Kubernetes
1049 CKV_K8S_27 resource Job Do not expose the docker daemon socket to containers Kubernetes
1050 CKV_K8S_27 resource CronJob Do not expose the docker daemon socket to containers Kubernetes
1051 CKV_K8S_28 resource containers Minimize the admission of containers with the NET_RAW capability Kubernetes
1052 CKV_K8S_28 resource initContainers Minimize the admission of containers with the NET_RAW capability Kubernetes
1053 CKV_K8S_29 resource Pod Apply security context to your pods and containers Kubernetes
1054 CKV_K8S_29 resource Deployment Apply security context to your pods and containers Kubernetes
1055 CKV_K8S_29 resource DaemonSet Apply security context to your pods and containers Kubernetes
1056 CKV_K8S_29 resource StatefulSet Apply security context to your pods and containers Kubernetes
1057 CKV_K8S_29 resource ReplicaSet Apply security context to your pods and containers Kubernetes
1058 CKV_K8S_29 resource ReplicationController Apply security context to your pods and containers Kubernetes
1059 CKV_K8S_29 resource Job Apply security context to your pods and containers Kubernetes
1060 CKV_K8S_29 resource CronJob Apply security context to your pods and containers Kubernetes
1061 CKV_K8S_30 resource containers Apply security context to your pods and containers Kubernetes
1062 CKV_K8S_30 resource initContainers Apply security context to your pods and containers Kubernetes
1063 CKV_K8S_31 resource Pod Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1064 CKV_K8S_31 resource Deployment Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1065 CKV_K8S_31 resource DaemonSet Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1066 CKV_K8S_31 resource StatefulSet Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1067 CKV_K8S_31 resource ReplicaSet Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1068 CKV_K8S_31 resource ReplicationController Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1069 CKV_K8S_31 resource Job Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1070 CKV_K8S_31 resource CronJob Ensure that the seccomp profile is set to docker/default or runtime/default Kubernetes
1071 CKV_K8S_32 resource PodSecurityPolicy Ensure default seccomp profile set to docker/default or runtime/default Kubernetes
1072 CKV_K8S_33 resource containers Ensure the Kubernetes dashboard is not deployed Kubernetes
1073 CKV_K8S_33 resource initContainers Ensure the Kubernetes dashboard is not deployed Kubernetes
1074 CKV_K8S_34 resource containers Ensure that Tiller (Helm v2) is not deployed Kubernetes
1075 CKV_K8S_34 resource initContainers Ensure that Tiller (Helm v2) is not deployed Kubernetes
1076 CKV_K8S_35 resource containers Prefer using secrets as files over secrets as environment variables Kubernetes
1077 CKV_K8S_35 resource initContainers Prefer using secrets as files over secrets as environment variables Kubernetes
1078 CKV_K8S_36 resource PodSecurityPolicy Minimize the admission of containers with capabilities assigned Kubernetes
1079 CKV_K8S_37 resource containers Minimize the admission of containers with capabilities assigned Kubernetes
1080 CKV_K8S_37 resource initContainers Minimize the admission of containers with capabilities assigned Kubernetes
1081 CKV_K8S_38 resource Pod Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1082 CKV_K8S_38 resource Deployment Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1083 CKV_K8S_38 resource DaemonSet Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1084 CKV_K8S_38 resource StatefulSet Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1085 CKV_K8S_38 resource ReplicaSet Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1086 CKV_K8S_38 resource ReplicationController Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1087 CKV_K8S_38 resource Job Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1088 CKV_K8S_38 resource CronJob Ensure that Service Account Tokens are only mounted where necessary Kubernetes
1089 CKV_K8S_39 resource containers Do not use the CAP_SYS_ADMIN linux capability Kubernetes
1090 CKV_K8S_39 resource initContainers Do not use the CAP_SYS_ADMIN linux capability Kubernetes
1091 CKV_K8S_40 resource Pod Containers should run as a high UID to avoid host conflict Kubernetes
1092 CKV_K8S_40 resource Deployment Containers should run as a high UID to avoid host conflict Kubernetes
1093 CKV_K8S_40 resource DaemonSet Containers should run as a high UID to avoid host conflict Kubernetes
1094 CKV_K8S_40 resource StatefulSet Containers should run as a high UID to avoid host conflict Kubernetes
1095 CKV_K8S_40 resource ReplicaSet Containers should run as a high UID to avoid host conflict Kubernetes
1096 CKV_K8S_40 resource ReplicationController Containers should run as a high UID to avoid host conflict Kubernetes
1097 CKV_K8S_40 resource Job Containers should run as a high UID to avoid host conflict Kubernetes
1098 CKV_K8S_40 resource CronJob Containers should run as a high UID to avoid host conflict Kubernetes
1099 CKV_K8S_41 resource ServiceAccount Ensure that default service accounts are not actively used Kubernetes
1100 CKV_K8S_42 resource RoleBinding Ensure that default service accounts are not actively used Kubernetes
1101 CKV_K8S_42 resource ClusterRoleBinding Ensure that default service accounts are not actively used Kubernetes
1102 CKV_K8S_43 resource containers Image should use digest Kubernetes
1103 CKV_K8S_43 resource initContainers Image should use digest Kubernetes
1104 CKV_K8S_44 resource Service Ensure that the Tiller Service (Helm v2) is deleted Kubernetes
1105 CKV_K8S_45 resource containers Ensure the Tiller Deployment (Helm V2) is not accessible from within the cluster Kubernetes
1106 CKV_K8S_45 resource initContainers Ensure the Tiller Deployment (Helm V2) is not accessible from within the cluster Kubernetes
1107 CKV_K8S_49 resource Role Minimize wildcard use in Roles and ClusterRoles Kubernetes
1108 CKV_K8S_49 resource ClusterRole Minimize wildcard use in Roles and ClusterRoles Kubernetes
1109 CKV_K8S_68 resource containers Ensure that the --anonymous-auth argument is set to false Kubernetes
1110 CKV_K8S_69 resource containers Ensure that the --basic-auth-file argument is not set Kubernetes
1111 CKV_K8S_70 resource containers Ensure that the --token-auth-file argument is not set Kubernetes
1112 CKV_K8S_71 resource containers Ensure that the --kubelet-https argument is set to true Kubernetes
1113 CKV_K8S_72 resource containers Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate Kubernetes
1114 CKV_K8S_73 resource containers Ensure that the --kubelet-certificate-authority argument is set as appropriate Kubernetes
1115 CKV_K8S_74 resource containers Ensure that the --authorization-mode argument is not set to AlwaysAllow Kubernetes
1116 CKV_K8S_75 resource containers Ensure that the --authorization-mode argument includes Node Kubernetes
1117 CKV_K8S_77 resource containers Ensure that the --authorization-mode argument includes RBAC Kubernetes
1118 CKV_K8S_78 resource AdmissionConfiguration Ensure that the admission control plugin EventRateLimit is set Kubernetes
1119 CKV_K8S_79 resource containers Ensure that the admission control plugin AlwaysAdmit is not set Kubernetes
1120 CKV_K8S_80 resource containers Ensure that the admission control plugin AlwaysPullImages is set Kubernetes
1121 CKV_K8S_81 resource containers Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used Kubernetes
1122 CKV_K8S_82 resource containers Ensure that the admission control plugin ServiceAccount is set Kubernetes
1123 CKV_K8S_83 resource containers Ensure that the admission control plugin NamespaceLifecycle is set Kubernetes
1124 CKV_K8S_84 resource containers Ensure that the admission control plugin PodSecurityPolicy is set Kubernetes
1125 CKV_K8S_85 resource containers Ensure that the admission control plugin NodeRestriction is set Kubernetes
1126 CKV_K8S_86 resource containers Ensure that the --insecure-bind-address argument is not set Kubernetes
1127 CKV_K8S_88 resource containers Ensure that the --insecure-port argument is set to 0 Kubernetes
1128 CKV_K8S_89 resource containers Ensure that the --secure-port argument is not set to 0 Kubernetes
1129 CKV_K8S_90 resource containers Ensure that the --profiling argument is set to false Kubernetes
1130 CKV_K8S_91 resource containers Ensure that the --audit-log-path argument is set Kubernetes
1131 CKV_K8S_92 resource containers Ensure that the --audit-log-maxage argument is set to 30 or as appropriate Kubernetes
1132 CKV_K8S_93 resource containers Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate Kubernetes
1133 CKV_K8S_94 resource containers Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate Kubernetes
1134 CKV_K8S_95 resource containers Ensure that the --request-timeout argument is set as appropriate Kubernetes
1135 CKV_K8S_96 resource containers Ensure that the --service-account-lookup argument is set to true Kubernetes
1136 CKV_K8S_97 resource containers Ensure that the --service-account-key-file argument is set as appropriate Kubernetes
1137 CKV_K8S_99 resource containers Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate Kubernetes
1138 CKV_K8S_100 resource containers Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate Kubernetes
1139 CKV_K8S_102 resource containers Ensure that the --etcd-ca-file argument is set as appropriate Kubernetes
1140 CKV_K8S_104 resource containers Ensure that encryption providers are appropriately configured Kubernetes
1141 CKV_K8S_105 resource containers Ensure that the API Server only makes use of Strong Cryptographic Ciphers Kubernetes
1142 CKV_K8S_106 resource containers Ensure that the --terminated-pod-gc-threshold argument is set as appropriate Kubernetes
1143 CKV_K8S_107 resource containers Ensure that the --profiling argument is set to false Kubernetes
1144 CKV_K8S_108 resource containers Ensure that the --use-service-account-credentials argument is set to true Kubernetes
1145 CKV_K8S_110 resource containers Ensure that the --service-account-private-key-file argument is set as appropriate Kubernetes
1146 CKV_K8S_111 resource containers Ensure that the --root-ca-file argument is set as appropriate Kubernetes
1147 CKV_K8S_112 resource containers Ensure that the RotateKubeletServerCertificate argument is set to true Kubernetes
1148 CKV_K8S_113 resource containers Ensure that the --bind-address argument is set to 127.0.0.1 Kubernetes
1149 CKV_K8S_114 resource containers Ensure that the --profiling argument is set to false Kubernetes
1150 CKV_K8S_115 resource containers Ensure that the --bind-address argument is set to 127.0.0.1 Kubernetes
1151 CKV_K8S_116 resource containers Ensure that the --cert-file and --key-file arguments are set as appropriate Kubernetes
1152 CKV_K8S_117 resource containers Ensure that the --client-cert-auth argument is set to true Kubernetes
1153 CKV_K8S_118 resource containers Ensure that the --auto-tls argument is not set to true Kubernetes
1154 CKV_K8S_119 resource containers Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate Kubernetes
1155 CKV_K8S_121 resource Pod Ensure that the --peer-client-cert-auth argument is set to true Kubernetes
1156 CKV_K8S_138 resource containers Ensure that the --anonymous-auth argument is set to false Kubernetes
1157 CKV_K8S_139 resource containers Ensure that the --authorization-mode argument is not set to AlwaysAllow Kubernetes
1158 CKV_K8S_140 resource containers Ensure that the --client-ca-file argument is set as appropriate Kubernetes
1159 CKV_K8S_141 resource containers Ensure that the --read-only-port argument is set to 0 Kubernetes
1160 CKV_K8S_143 resource containers Ensure that the --streaming-connection-idle-timeout argument is not set to 0 Kubernetes
1161 CKV_K8S_144 resource containers Ensure that the --protect-kernel-defaults argument is set to true Kubernetes
1162 CKV_K8S_145 resource containers Ensure that the --make-iptables-util-chains argument is set to true Kubernetes
1163 CKV_K8S_146 resource containers Ensure that the --hostname-override argument is not set Kubernetes
1164 CKV_K8S_147 resource containers Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture Kubernetes
1165 CKV_K8S_148 resource containers Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate Kubernetes
1166 CKV_K8S_149 resource containers Ensure that the --rotate-certificates argument is not set to false Kubernetes
1167 CKV_K8S_150 resource containers Ensure that the RotateKubeletServerCertificate argument is set to true Kubernetes
1168 CKV_K8S_151 resource containers Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers Kubernetes
1169 CKV_LIN_1 provider linode Ensure no hard coded Linode tokens exist in provider Terraform
1170 CKV_LIN_2 resource linode_instance Ensure SSH key set in authorized_keys Terraform
1171 CKV_SECRET_1 Artifactory Credentials secrets Artifactory Credentials Artifactory Credentials
1172 CKV_SECRET_2 AWS Access Key secrets AWS Access Key AWS Access Key
1173 CKV_SECRET_3 Azure Storage Account access key secrets Azure Storage Account access key Azure Storage Account access key
1174 CKV_SECRET_4 Basic Auth Credentials secrets Basic Auth Credentials Basic Auth Credentials
1175 CKV_SECRET_5 Cloudant Credentials secrets Cloudant Credentials Cloudant Credentials
1176 CKV_SECRET_6 Base64 High Entropy String secrets Base64 High Entropy String Base64 High Entropy String
1177 CKV_SECRET_7 IBM Cloud IAM Key secrets IBM Cloud IAM Key IBM Cloud IAM Key
1178 CKV_SECRET_8 IBM COS HMAC Credentials secrets IBM COS HMAC Credentials IBM COS HMAC Credentials
1179 CKV_SECRET_9 JSON Web Token secrets JSON Web Token JSON Web Token
1180 CKV_SECRET_11 Mailchimp Access Key secrets Mailchimp Access Key Mailchimp Access Key
1181 CKV_SECRET_12 NPM tokens secrets NPM tokens NPM tokens
1182 CKV_SECRET_13 Private Key secrets Private Key Private Key
1183 CKV_SECRET_14 Slack Token secrets Slack Token Slack Token
1184 CKV_SECRET_15 SoftLayer Credentials secrets SoftLayer Credentials SoftLayer Credentials
1185 CKV_SECRET_16 Square OAuth Secret secrets Square OAuth Secret Square OAuth Secret
1186 CKV_SECRET_17 Stripe Access Key secrets Stripe Access Key Stripe Access Key
1187 CKV_SECRET_18 Twilio API Key secrets Twilio API Key Twilio API Key
1188 CKV_SECRET_19 Hex High Entropy String secrets Hex High Entropy String Hex High Entropy String