Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion main.tf
Original file line number Diff line number Diff line change
@@ -1,7 +1,13 @@
provider "aws" {
region = "us-east-2"
access_key = "AKIAJSIE37KKMHXI3BJQ"
secret_key = "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"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

High Secret Finding

Cloud Key

More Details
Attribute Value
SHA256 c49f9f799d4ea0e754b1830eda01e8e71d9814412c7cfc0d3744e43ecac513da
Key Type AWS Secret Access Key
Long Term Expiry Yes
Provider ID AKIAJSIE37KKMHXI3BJQ

Rule ID: SECRET-SYSTEM-1


To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason

If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).

}

resource "aws_s3_bucket" "wiz" {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Medium IaC Finding

S3 Bucket versioning should be enabled
on resource aws_s3_bucket[wiz]

More Details
This rule checks whether the S3 Bucket versioning is enabled. This rule fails if the `Status` field is not set to `Enabled`. S3 Versioning allows keeping multiple versions of an object in one bucket. Versioning-enabled buckets can help you recover objects from accidental deletion or overwrites.

Expected

S3 Bucket Versioning is disabled

Found

S3 Bucket Versioning should be enabled

Security Frameworks: b2141187-0cbd-41c5-b392-6e3584a51a12, 434ea60a-efc4-45be-9c69-537779a3558c, 8046e2b2-8823-4e94-a082-39dc9aa415e1, fecbcd2d-dbb9-49bd-9721-48e6e2501b5e, wf-id-105, wf-id-39, wf-id-16, 6e3958ac-d01d-4c4e-bd74-f678c9e02300, wf-id-5, 10b16c00-1894-45d2-9c57-d45a9ebeb93a, 6a4e92aa-f00c-4426-9add-f35959951b95, 92b4316a-191d-45f6-a841-106e1c9af9e3, 695a722c-93dc-4d96-a109-1ea59e77b77e, c3245b7c-92e2-4fcc-8839-4cc1ce413dfb, 32dbe93b-7840-476c-ab4e-d20d0110ef63, 3e41cf6d-e231-43ff-bc12-1760a95c9955, bbfd8a1d-9bed-4976-aa60-3e9b350fded2, 7735e098-647d-4d57-91b5-bc680fb69ab0, wf-id-3, ba636dbf-7c6c-416e-ab0f-3616e385967c, d5e6d16e-b452-4414-8d77-f719038c9bb5, d1270103-032d-4b65-ac9c-906aadde7d5a, 1f612f11-7273-4aa8-8214-133eea182b1a, b71b830a-3b9b-4b86-ba71-fd58b14ba0e2, 512b082b-43f5-4d82-ae38-bbc8da721b0c, 1a94a20c-d020-4fef-bfc8-313183265936, 13f2c304-813f-4b94-8a50-59887771f872, 55d4ef51-0d2f-4154-9633-3db1113f014d, 6930b9dc-00d1-45ac-8571-6225820d6f5c, 1814393d-1b7c-4f9f-aad7-bd4690dff69f, 86166614-75c0-44b3-a281-836559f472e7, 92843eb0-66e5-4fbf-84f4-826075521ef6, 9d2f9c9f-10c0-4157-bbd5-eefeafb50f6b, wf-id-1, wf-id-48, b24f7bc6-6360-497e-9846-655bbb42c090, bb831fb0-03f0-4516-b02d-bb82163da994, b6482082-27a2-4d2c-a0a2-1756c384b3e1, a4c9b72b-0a8b-4002-ac85-fc3f9cb90767, d917ea1a-1af6-480c-b608-27b4c9bfe474, wf-id-90, e64ac551-b69f-434f-8e20-376d1d910b80, 0dcd6f9f-e26e-427e-a75b-0acaff9c5b22, wf-id-101, bd209138-cbad-4b83-bbd1-73d96f86e7ea, wf-id-120, ff9bf4c6-7acc-4933-8996-adda2155d55a, a41e357f-c453-4889-90ba-ecdb00ca5c60, 8fdac460-5094-4444-b759-7d1df59667d5, 72808552-f2a6-4149-b54d-f89ddaf5f77a, wf-id-13, wf-id-87, 7ecd236d-f71b-4710-94a8-56cf17acd1dd, 1a22b5e3-8c61-4ee5-aaf1-f906e76727eb, 8d280612-ce6e-4bb1-999a-07a7fa4f1363, 92e9ee2d-1ab3-4583-a2a8-f00040e19027, 95c60493-ddc3-4c15-8985-f8c91872ae63


Rule ID: f4ac6273-757e-4297-990a-3a38b6c5ef3e


To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason

If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).

bucket = "my-tf-test-bucket"

versioning {
enabled = true
enabled = false
}
}
Loading