checkov

AUT-3992: Move feature switches inside EnvironmentConfiguration #5199

Annotations

10 errors and 1 warning

CKV_AWS_124: "Ensure that CloudFormation stacks are sending event notifications to an SNS topic"

CKV_AWS_124: "Ensure that CloudFormation stacks are sending event notifications to an SNS topic"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"

CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"

CKV_AWS_336: "Ensure ECS containers are limited to read-only access to root filesystems"

CKV_AWS_191: "Ensure ElastiCache replication group is encrypted by KMS using a customer managed Key (CMK)"

CKV_AWS_23: "Ensure every security group and rule has a description"

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636