[PFMENG-1145] Release IAM module from version 4 aws provider (#16)

.github/workflows/ci.yml

@@ -13,3 +13,4 @@ jobs:
     uses: SPHTech-Platform/reusable-workflows/.github/workflows/terraform.yaml@main
     with:
       upload_sarif: false
+      checkov_skip_check: CKV_TF_1,CKV_AWS_338

modules/cluster/data.tf

@@ -3,6 +3,8 @@ data "aws_region" "current" {}
 data "aws_caller_identity" "current" {}
 
 data "aws_iam_policy_document" "cloudwatch_logs_allow_kms" {
+  #checkov:skip=CKV_AWS_356: Accept risk of using wildcard resource
+
   statement {
     sid    = "Enable IAM User Permissions"
     effect = "Allow"

modules/cluster/main.tf

@@ -20,6 +20,8 @@ resource "aws_kms_key" "cloudwatch" {
 
 
 resource "aws_kms_key" "cluster" {
+  #checkov:skip=CKV2_AWS_64:Accept risk of no KMS key policy
+
   description             = "Key for data between the local client and the container"
   enable_key_rotation     = true
   deletion_window_in_days = 7

modules/iam/versions.tf

@@ -1,9 +1,8 @@
 terraform {
-  required_version = ">= 1.3"
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "~> 4.0"
+      version = ">= 4.0"
     }
   }
 }

modules/service/main.tf

@@ -72,6 +72,8 @@ data "aws_ecs_task_definition" "this" {
 }
 
 resource "aws_ecs_service" "this" {
+  #checkov:skip=CKV_AWS_332: Already defaulting to latest FARGATE platform version
+
   name    = var.name
   cluster = var.cluster_id