New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AWS TF/Pulumi Providers: add configuration options to address checkov warnings #719

Open

7 tasks

raksiv opened this issue Jan 7, 2025 · 0 comments

Labels

Member

raksiv commented Jan 7, 2025

The following configurations make it easier for users to override Nitric defaults, note that they often will incur additional cost when activated.

CKV_AWS_119 / CKV_AWS_136: DynamoDB and ECR encryption with KMS
CKV_AWS_163: ECR image scanning on push
CKV_AWS_28: DynamoDB point-in-time recovery (PITR)
CKV_AWS_116: Lambda function configured for a Dead Letter Queue (DLQ)
CKV_AWS_76: API Gateway access logging enabled
CKV_AWS_50: X-Ray tracing for Lambda
CKV_AWS_272: Lambda code-signing validation

raksiv added the enhancement label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment