checkov

Merge pull request #1209 from govuk-one-login/AUT-1706/env-var-csp #385

Annotations

10 errors

CKV_AWS_91: "Ensure the ELBv2 (Application/Network) has access logging enabled"

CKV_AWS_150: "Ensure that Load Balancer has deletion protection enabled"

CKV_AWS_131: "Ensure that ALB drops HTTP headers"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"

CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"

CKV_AWS_191: "Ensure Elasticache replication group is encrypted by KMS using a customer managed Key (CMK)"

CKV_AWS_23: "Ensure every security groups rule has a description"