Skip to content

Commit ea02287

Browse files
committed
re-add tfsec suppressed checks
1 parent c77ef4e commit ea02287

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

main.tf

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -129,9 +129,12 @@ resource "aws_iam_role_policy_attachment" "custom_policy" {
129129
resource "aws_iam_role_policy" "aws_policy" {
130130
name = "${var.name}-aws-access"
131131
role = aws_iam_role.awsserviceroleforimagebuilder.id
132+
#checkov:skip=CKV_AWS_290:The policy must allow *
133+
#checkov:skip=CKV_AWS_355:The policy must allow *
132134
policy = data.aws_iam_policy_document.aws_policy.json
133135
}
134136

137+
#tfsec:ignore:aws-iam-no-policy-wildcards
135138
data "aws_iam_policy_document" "aws_policy" {
136139

137140
statement {

0 commit comments

Comments
 (0)