Skip to content

bug(cloudformation): hardcoded AWS Access Key In Lambda #7074

@kylos101

Description

@kylos101

Expected Behavior

The rule triggers when variable name appears sensitive.

Actual Behavior

The rule triggers if a variables value is 20 or 40 chars in length. It doesn't check the key name like the documentation implies. 🐛

Steps to Reproduce the Problem

Try this, it'll fail, even though foo is not a sensitive variable name.

      Environment:
        Variables:
          foo: "12345678901234567890"

Specifications

(N/A if not applicable)

  • Version: 2.0.1
  • Platform: Linux

Metadata

Metadata

Assignees

No one assigned

    Labels

    awsPR related with AWS CloudbugSomething isn't workingcloudformationCloudFormation querycommunityCommunity contributionqueryNew query feature

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions