Create ec2.tf

[varunsh-coder]

This file is from Terragoat.

[step-security-bot]

Please find StepSecurity AI-CodeWise code comments below.

Code Comments

ec2.tf

• [High]Sensitive data exposure
  The AWS Secret Access Key is exposed in clear text in user data. Store sensitive configuration data securely in environment variables or other secrets management tools.
• [High]Unencrypted volume
  The EBS volume is unencrypted. Set the encrypted attribute of aws_ebs_volume resource to 'true'.
• [Medium]Security group vulnerabilities
  The security group allows SSH traffic from anywhere in the world. Restrict traffic to allow SSH traffic to specific IP ranges or even better, specific IPs that require access.
• [Medium]Security group vulnerabilities
  The security group allows traffic to anywhere in the world on port 80. Restrict traffic to allow HTTP traffic from specific IP ranges or even better, specific IPs that require access.
• [Low]Using plain text secrets in Terraform code is a bad practice
  AWS Secret Access Key and Access Key Id are stored as plain text in the variables tf file. Use the following syntax to store AWS Secret Access Key and Access Key Id: https://www.terraform.io/docs/language/values/variables.html#sensitive-values

Feedback

We appreciate your feedback in helping us improve the service! To provide feedback, please use emojis on this comment. If you find the comments helpful, give them a 👍. If they aren't useful, kindly express that with a 👎. If you have questions or detailed feedback, please create n GitHub issue in StepSecurity/AI-CodeWise.