You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Adds a SSM inventory sync bucket and associated policy which grants the SSM service permission to add objects as long as they are in they originate from MP OU.
Next step will be to add a resource data sync to the bootstrap so that all other environments can send their inventory data to this central bucket.
How has this been tested?
Terraform plan in status checks.
Deployment Plan / Instructions
Will this deployment impact the platform and / or services on it?
{Please write here}
Checklist (check x in [ ] of list items)
I have performed a self-review of my own code
All checks have passed
I have made corresponding changes to the documentation
Plan and discussed how it should be deployed to PROD (If needed)
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-14T14:02:57Z INFO [vulndb] Need to update DB
2024-11-14T14:02:57Z INFO [vulndb] Downloading vulnerability DB...
2024-11-14T14:02:57Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-14T14:03:00Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-14T14:03:00Z INFO [vuln] Vulnerability scanning is enabled
2024-11-14T14:03:00Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-14T14:03:00Z INFO [misconfig] Need to update the built-in checks
2024-11-14T14:03:00Z INFO [misconfig] Downloading the built-in checks...
2024-11-14T14:03:00Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 1.09294ms, allowed: 44000/minute\n\n"
2024-11-14T14:03:00Z INFO [secret] Secret scanning is enabled
2024-11-14T14:03:00Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-14T14:03:00Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-14T14:03:01Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:10Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-14T14:03:12Z INFO Number of language-specific files num=0
2024-11-14T14:03:12Z INFO Detected config files num=7
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-14 14:03:14,966 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-14 14:03:14,966 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-14 14:03:14,966 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-14 14:03:14,966 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-14 14:03:14,966 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-14 14:03:14,984 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-14 14:03:14,984 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 240, Failed checks: 0, Skipped checks: 28
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-14T14:02:57Z INFO [vulndb] Need to update DB
2024-11-14T14:02:57Z INFO [vulndb] Downloading vulnerability DB...2024-11-14T14:02:57Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-14T14:03:00Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-14T14:03:00Z INFO [vuln] Vulnerability scanning is enabled
2024-11-14T14:03:00Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-14T14:03:00Z INFO [misconfig] Need to update the built-in checks
2024-11-14T14:03:00Z INFO [misconfig] Downloading the built-in checks...2024-11-14T14:03:00Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 1.09294ms, allowed: 44000/minute\n\n"2024-11-14T14:03:00Z INFO [secret] Secret scanning is enabled
2024-11-14T14:03:00Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-14T14:03:00Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-14T14:03:01Z INFO [terraformscanner] Scanning root module file_path="."2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:10Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-14T14:03:12Z INFO Number of language-specific files num=02024-11-14T14:03:12Z INFO Detected config files num=7trivy_exitcode=0
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-15T09:15:35Z INFO [vulndb] Need to update DB
2024-11-15T09:15:35Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T09:15:35Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T09:15:37Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T09:15:37Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T09:15:37Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T09:15:37Z INFO [misconfig] Need to update the built-in checks
2024-11-15T09:15:37Z INFO [misconfig] Downloading the built-in checks...
2024-11-15T09:15:37Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-checks/blobs/sha256:c2b4fe1cd51083ede5606a38fb24e7fafb06fd2632c9cf6d9c63f5a80a6c67dc: TOOMANYREQUESTS: retry-after: 375.598µs, allowed: 44000/minute"
2024-11-15T09:15:37Z INFO [secret] Secret scanning is enabled
2024-11-15T09:15:37Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T09:15:37Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-15T09:15:38Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-15T09:15:43Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-15T09:15:43Z INFO Number of language-specific files num=0
2024-11-15T09:15:43Z INFO Detected config files num=7
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-15 09:15:46,171 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:15:46,172 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:15:46,172 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-15 09:15:46,172 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:15:46,172 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:15:46,185 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-15 09:15:46,185 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 240, Failed checks: 0, Skipped checks: 28
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-15T09:15:35Z INFO [vulndb] Need to update DB
2024-11-15T09:15:35Z INFO [vulndb] Downloading vulnerability DB...2024-11-15T09:15:35Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T09:15:37Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T09:15:37Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T09:15:37Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T09:15:37Z INFO [misconfig] Need to update the built-in checks
2024-11-15T09:15:37Z INFO [misconfig] Downloading the built-in checks...2024-11-15T09:15:37Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-checks/blobs/sha256:c2b4fe1cd51083ede5606a38fb24e7fafb06fd2632c9cf6d9c63f5a80a6c67dc: TOOMANYREQUESTS: retry-after: 375.598µs, allowed: 44000/minute"2024-11-15T09:15:37Z INFO [secret] Secret scanning is enabled
2024-11-15T09:15:37Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T09:15:37Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-15T09:15:38Z INFO [terraformscanner] Scanning root module file_path="."2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-15T09:15:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-15T09:15:43Z INFO Number of language-specific files num=02024-11-15T09:15:43Z INFO Detected config files num=7trivy_exitcode=0
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-15T09:37:05Z INFO [vulndb] Need to update DB
2024-11-15T09:37:05Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T09:37:05Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T09:37:08Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T09:37:08Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T09:37:08Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T09:37:08Z INFO [misconfig] Need to update the built-in checks
2024-11-15T09:37:08Z INFO [misconfig] Downloading the built-in checks...
2024-11-15T09:37:08Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-checks/blobs/sha256:c2b4fe1cd51083ede5606a38fb24e7fafb06fd2632c9cf6d9c63f5a80a6c67dc: TOOMANYREQUESTS: retry-after: 354.945µs, allowed: 44000/minute"
2024-11-15T09:37:08Z INFO [secret] Secret scanning is enabled
2024-11-15T09:37:08Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T09:37:08Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-15T09:37:08Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:12Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-15T09:37:14Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-15T09:37:14Z INFO Number of language-specific files num=0
2024-11-15T09:37:14Z INFO Detected config files num=7
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-15 09:37:16,686 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:37:16,686 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:37:16,686 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-15 09:37:16,686 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:37:16,686 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-15 09:37:16,706 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-15 09:37:16,706 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 240, Failed checks: 0, Skipped checks: 28
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-15T09:37:05Z INFO [vulndb] Need to update DB
2024-11-15T09:37:05Z INFO [vulndb] Downloading vulnerability DB...2024-11-15T09:37:05Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T09:37:08Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T09:37:08Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T09:37:08Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T09:37:08Z INFO [misconfig] Need to update the built-in checks
2024-11-15T09:37:08Z INFO [misconfig] Downloading the built-in checks...2024-11-15T09:37:08Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-checks/blobs/sha256:c2b4fe1cd51083ede5606a38fb24e7fafb06fd2632c9cf6d9c63f5a80a6c67dc: TOOMANYREQUESTS: retry-after: 354.945µs, allowed: 44000/minute"2024-11-15T09:37:08Z INFO [secret] Secret scanning is enabled
2024-11-15T09:37:08Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T09:37:08Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-15T09:37:08Z INFO [terraformscanner] Scanning root module file_path="."2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:12Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-15T09:37:14Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-15T09:37:14Z INFO Number of language-specific files num=02024-11-15T09:37:14Z INFO Detected config files num=7trivy_exitcode=0
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-15T10:28:21Z INFO [vulndb] Need to update DB
2024-11-15T10:28:21Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T10:28:21Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T10:28:23Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T10:28:23Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T10:28:23Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T10:28:23Z INFO [misconfig] Need to update the built-in checks
2024-11-15T10:28:23Z INFO [misconfig] Downloading the built-in checks...
2024-11-15T10:28:23Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-checks/blobs/sha256:c2b4fe1cd51083ede5606a38fb24e7fafb06fd2632c9cf6d9c63f5a80a6c67dc: TOOMANYREQUESTS: retry-after: 63.061µs, allowed: 44000/minute"
2024-11-15T10:28:23Z INFO [secret] Secret scanning is enabled
2024-11-15T10:28:23Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T10:28:23Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-15T10:28:24Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:27Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T10:28:29Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T10:28:29Z INFO Number of language-specific files num=0
2024-11-15T10:28:29Z INFO Detected config files num=7
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-15 10:28:32,004 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-15 10:28:32,004 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-15 10:28:32,004 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-15 10:28:32,004 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-15 10:28:32,004 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-15 10:28:32,023 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-15 10:28:32,024 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 240, Failed checks: 0, Skipped checks: 28
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-15T10:28:21Z INFO [vulndb] Need to update DB
2024-11-15T10:28:21Z INFO [vulndb] Downloading vulnerability DB...2024-11-15T10:28:21Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T10:28:23Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T10:28:23Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T10:28:23Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T10:28:23Z INFO [misconfig] Need to update the built-in checks
2024-11-15T10:28:23Z INFO [misconfig] Downloading the built-in checks...2024-11-15T10:28:23Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: oci download error: failed to fetch the layer: GET https://ghcr.io/v2/aquasecurity/trivy-checks/blobs/sha256:c2b4fe1cd51083ede5606a38fb24e7fafb06fd2632c9cf6d9c63f5a80a6c67dc: TOOMANYREQUESTS: retry-after: 63.061µs, allowed: 44000/minute"2024-11-15T10:28:23Z INFO [secret] Secret scanning is enabled
2024-11-15T10:28:23Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T10:28:23Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-15T10:28:24Z INFO [terraformscanner] Scanning root module file_path="."2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:27Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T10:28:29Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T10:28:29Z INFO Number of language-specific files num=02024-11-15T10:28:29Z INFO Detected config files num=7trivy_exitcode=0
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-15T11:22:29Z INFO [vulndb] Need to update DB
2024-11-15T11:22:29Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T11:22:29Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T11:22:31Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T11:22:31Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T11:22:31Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T11:22:31Z INFO [misconfig] Need to update the built-in checks
2024-11-15T11:22:31Z INFO [misconfig] Downloading the built-in checks...
160.60 KiB / 160.60 KiB [---------------------------------------------------------] 100.00% ? p/s 0s2024-11-15T11:22:31Z INFO [secret] Secret scanning is enabled
2024-11-15T11:22:31Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T11:22:31Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-15T11:22:32Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:41Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T11:22:43Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-15T11:22:43Z INFO Number of language-specific files num=0
2024-11-15T11:22:43Z INFO Detected config files num=7
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-15 11:22:47,046 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-15 11:22:47,046 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-15 11:22:47,046 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-15 11:22:47,046 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-15 11:22:47,046 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-15 11:22:47,068 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-15 11:22:47,068 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 240, Failed checks: 0, Skipped checks: 28
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-15T11:22:29Z INFO [vulndb] Need to update DB
2024-11-15T11:22:29Z INFO [vulndb] Downloading vulnerability DB...2024-11-15T11:22:29Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T11:22:31Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T11:22:31Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T11:22:31Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T11:22:31Z INFO [misconfig] Need to update the built-in checks
2024-11-15T11:22:31Z INFO [misconfig] Downloading the built-in checks...160.60 KiB /160.60 KiB [---------------------------------------------------------] 100.00%? p/s 0s2024-11-15T11:22:31Z INFO [secret] Secret scanning is enabled
2024-11-15T11:22:31Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T11:22:31Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-15T11:22:32Z INFO [terraformscanner] Scanning root module file_path="."2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:41Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T11:22:43Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-15T11:22:43Z INFO Number of language-specific files num=02024-11-15T11:22:43Z INFO Detected config files num=7trivy_exitcode=0
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-15T13:48:16Z INFO [vulndb] Need to update DB
2024-11-15T13:48:16Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T13:48:16Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T13:48:18Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T13:48:18Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T13:48:18Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T13:48:18Z INFO [misconfig] Need to update the built-in checks
2024-11-15T13:48:18Z INFO [misconfig] Downloading the built-in checks...
160.60 KiB / 160.60 KiB [------------------------------------------------------] 100.00% ? p/s 100ms2024-11-15T13:48:19Z INFO [secret] Secret scanning is enabled
2024-11-15T13:48:19Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T13:48:19Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-15T13:48:20Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:24Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-15T13:48:26Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-15T13:48:26Z INFO Number of language-specific files num=0
2024-11-15T13:48:26Z INFO Detected config files num=7
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-15 13:48:29,499 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-15 13:48:29,499 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-15 13:48:29,499 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-15 13:48:29,499 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-15 13:48:29,499 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-15 13:48:29,517 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-15 13:48:29,518 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 239, Failed checks: 0, Skipped checks: 29
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-15T13:48:16Z INFO [vulndb] Need to update DB
2024-11-15T13:48:16Z INFO [vulndb] Downloading vulnerability DB...2024-11-15T13:48:16Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T13:48:18Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T13:48:18Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T13:48:18Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T13:48:18Z INFO [misconfig] Need to update the built-in checks
2024-11-15T13:48:18Z INFO [misconfig] Downloading the built-in checks...160.60 KiB /160.60 KiB [------------------------------------------------------] 100.00%? p/s 100ms2024-11-15T13:48:19Z INFO [secret] Secret scanning is enabled
2024-11-15T13:48:19Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T13:48:19Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-15T13:48:20Z INFO [terraformscanner] Scanning root module file_path="."2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:24Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-15T13:48:26Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-15T13:48:26Z INFO Number of language-specific files num=02024-11-15T13:48:26Z INFO Detected config files num=7trivy_exitcode=0
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-15T14:01:39Z INFO [vulndb] Need to update DB
2024-11-15T14:01:39Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T14:01:39Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T14:01:41Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T14:01:41Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T14:01:41Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T14:01:41Z INFO [misconfig] Need to update the built-in checks
2024-11-15T14:01:41Z INFO [misconfig] Downloading the built-in checks...
2024-11-15T14:01:42Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 116.825µs, allowed: 44000/minute\n\n"
2024-11-15T14:01:42Z INFO [secret] Secret scanning is enabled
2024-11-15T14:01:42Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T14:01:42Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-15T14:01:43Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:01:54Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-15T14:01:54Z INFO Number of language-specific files num=0
2024-11-15T14:01:54Z INFO Detected config files num=7
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-15 14:01:57,034 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:01:57,034 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:01:57,034 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-15 14:01:57,034 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:01:57,034 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:01:57,047 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-15 14:01:57,047 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 239, Failed checks: 0, Skipped checks: 29
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-15T14:01:39Z INFO [vulndb] Need to update DB
2024-11-15T14:01:39Z INFO [vulndb] Downloading vulnerability DB...2024-11-15T14:01:39Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T14:01:41Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T14:01:41Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T14:01:41Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T14:01:41Z INFO [misconfig] Need to update the built-in checks
2024-11-15T14:01:41Z INFO [misconfig] Downloading the built-in checks...2024-11-15T14:01:42Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 116.825µs, allowed: 44000/minute\n\n"2024-11-15T14:01:42Z INFO [secret] Secret scanning is enabled
2024-11-15T14:01:42Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T14:01:42Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-15T14:01:43Z INFO [terraformscanner] Scanning root module file_path="."2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:01:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-15T14:01:54Z INFO Number of language-specific files num=02024-11-15T14:01:54Z INFO Detected config files num=7trivy_exitcode=0
Trivy will check the following folders:
terraform/modernisation-platform-account
Running Trivy in terraform/modernisation-platform-account
2024-11-15T14:26:45Z INFO [vulndb] Need to update DB
2024-11-15T14:26:45Z INFO [vulndb] Downloading vulnerability DB...
2024-11-15T14:26:45Z INFO [vulndb] Downloading artifact... repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T14:26:47Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"
2024-11-15T14:26:47Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T14:26:47Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T14:26:47Z INFO [misconfig] Need to update the built-in checks
2024-11-15T14:26:47Z INFO [misconfig] Downloading the built-in checks...
2024-11-15T14:26:47Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 256.717µs, allowed: 44000/minute\n\n"
2024-11-15T14:26:47Z INFO [secret] Secret scanning is enabled
2024-11-15T14:26:47Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T14:26:47Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection
2024-11-15T14:26:48Z INFO [terraform scanner] Scanning root module file_path="."
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-account: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-assumable-roles: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-group-with-policies: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:52Z ERROR [terraform evaluator] Failed to load module. Maybe try 'terraform init'? err="open modules/iam-user: no such file or directory"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-sns-topic-encryption-use-cmk" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-no-user-attached-policies" range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-s3-encryption-customer-key" range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"
2024-11-15T14:26:54Z INFO [terraform executor] Ignore finding rule="aws-iam-enforce-group-mfa" range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"
2024-11-15T14:26:54Z INFO Number of language-specific files num=0
2024-11-15T14:26:54Z INFO Detected config files num=8
trivy_exitcode=0
</details> #### `Checkov Scan` Success
<details><summary>Show Output</summary>
```hcl
*****************************
Checkov will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Checkov in terraform/modernisation-platform-account
Excluding the following checks: CKV_GIT_1,CKV_AWS_126,CKV2_AWS_38,CKV2_AWS_39
2024-11-15 14:26:57,305 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:26:57,305 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-terraform-iam-superadmins?ref=bea5d084de2f810eee5326562ad6d9d104a2aa05:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:26:57,305 [MainThread ] [WARNI] Failed to download module terraform-aws-modules/iam/aws//modules/iam-group-with-policies:~> 5.0 (for external modules, the --download-external-modules flag is required)
2024-11-15 14:26:57,305 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-role?ref=62b8a16c73d8e4422cd81923e46948e8f4b5cf48:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:26:57,305 [MainThread ] [WARNI] Failed to download module github.com/ministryofjustice/modernisation-platform-github-oidc-provider?ref=82f546bd5f002674138a2ccdade7d7618c6758b3:None (for external modules, the --download-external-modules flag is required)
2024-11-15 14:26:57,324 [MainThread ] [WARNI] [ArmLocalGraph] created 0 vertices
2024-11-15 14:26:57,324 [MainThread ] [WARNI] [ArmLocalGraph] created 0 edges
terraform scan results:
Passed checks: 239, Failed checks: 0, Skipped checks: 29
checkov_exitcode=0
CTFLint Scan Success
Show Output
*****************************
Setting default tflint config...
Running tflint --init...
Installing "terraform" plugin...
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version:0.9.1)
tflint will check the following folders:
terraform/modernisation-platform-account
*****************************
Running tflint in terraform/modernisation-platform-account
Excluding the following checks: terraform_unused_declarations
tflint_exitcode=0
Trivy Scan Success
Show Output
*****************************
Trivy will check the following folders:
terraform/modernisation-platform-account
*****************************
Running Trivy in terraform/modernisation-platform-account
2024-11-15T14:26:45Z INFO [vulndb] Need to update DB
2024-11-15T14:26:45Z INFO [vulndb] Downloading vulnerability DB...2024-11-15T14:26:45Z INFO [vulndb] Downloading artifact...repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T14:26:47Z INFO [vulndb] Artifact successfully downloaded repo="public.ecr.aws/aquasecurity/trivy-db:2"2024-11-15T14:26:47Z INFO [vuln] Vulnerability scanning is enabled
2024-11-15T14:26:47Z INFO [misconfig] Misconfiguration scanning is enabled
2024-11-15T14:26:47Z INFO [misconfig] Need to update the built-in checks
2024-11-15T14:26:47Z INFO [misconfig] Downloading the built-in checks...2024-11-15T14:26:47Z ERROR [misconfig] Falling back to embedded checks err="failed to download built-in policies: download error: OCI repository error: 1 error occurred:\n\t* GET https://ghcr.io/v2/aquasecurity/trivy-checks/manifests/1: TOOMANYREQUESTS: retry-after: 256.717µs, allowed: 44000/minute\n\n"2024-11-15T14:26:47Z INFO [secret] Secret scanning is enabled
2024-11-15T14:26:47Z INFO [secret] If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2024-11-15T14:26:47Z INFO [secret] Please see also https://aquasecurity.github.io/trivy/v0.57/docs/scanner/secret#recommendation for faster secret detection2024-11-15T14:26:48Z INFO [terraformscanner] Scanning root module file_path="."2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-account: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-assumable-roles: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-group-with-policies: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:52Z ERROR [terraformevaluator] Failed to load module. Maybe try 'terraform init'?err="open modules/iam-user: no such file or directory"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-sns-topic-encryption-use-cmk"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/modules/config/main.tf:40"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-no-user-attached-policies"range="terraform-aws-modules/iam/aws/modules/iam-user/modules/iam-user/main.tf:1-10"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-s3-encryption-customer-key"range="github.com/ministryofjustice/modernisation-platform-terraform-baselines?ref=dd8a60be4cc6d726803f49301930795d266188d8/github.com/ministryofjustice/modernisation-platform-terraform-s3-bucket?ref=8688bc15a08fbf5a4f4eef9b7433c5a417df8df1/main.tf:157-165"2024-11-15T14:26:54Z INFO [terraformexecutor] Ignore finding rule="aws-iam-enforce-group-mfa"range="git::https:/github.com/terraform-aws-modules/terraform-aws-iam?ref=e20e0b9a42084bbc885fd5abb18b8744810bd567/modules/iam-group-with-policies/main.tf:5-10"2024-11-15T14:26:54Z INFO Number of language-specific files num=02024-11-15T14:26:54Z INFO Detected config files num=8trivy_exitcode=0
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A reference to the issue / Description of it
#8360
How does this PR fix the problem?
Adds a SSM inventory sync bucket and associated policy which grants the SSM service permission to add objects as long as they are in they originate from MP OU.
Next step will be to add a resource data sync to the bootstrap so that all other environments can send their inventory data to this central bucket.
How has this been tested?
Terraform plan in status checks.
Deployment Plan / Instructions
Will this deployment impact the platform and / or services on it?
{Please write here}
Checklist (check
xin[ ]of list items)Additional comments (if any)
{Please write here}