Add checkov skip for AWS-managed encryption

laurencegoolsby · laurencegoolsby · commit bc0c3559178c · 2026-01-22T22:02:44.000-05:00
diff --git a/infra/modules/storage/main.tf b/infra/modules/storage/main.tf
@@ -9,4 +9,5 @@ resource "aws_s3_bucket" "storage" {
   # checkov:skip=CKV_AWS_144:Cross region replication not required by default
   # checkov:skip=CKV2_AWS_62:S3 bucket does not need notifications enabled
   # checkov:skip=CKV_AWS_21:Bucket versioning is not needed
+  # checkov:skip=CKV_AWS_145:AWS-managed encryption (AES256) used when use_aws_managed_encryption=true
 }

Original file line number	Diff line number	Diff line change
`@@ -9,4 +9,5 @@ resource "aws_s3_bucket" "storage" {`
`9`	`9`	`# checkov:skip=CKV_AWS_144:Cross region replication not required by default`
`10`	`10`	`# checkov:skip=CKV2_AWS_62:S3 bucket does not need notifications enabled`
`11`	`11`	`# checkov:skip=CKV_AWS_21:Bucket versioning is not needed`
	`12`	`+ # checkov:skip=CKV_AWS_145:AWS-managed encryption (AES256) used when use_aws_managed_encryption=true`
`12`	`13`	`}`