From 1e6ef02867d4cb3f61acb019370d353d26763dfd Mon Sep 17 00:00:00 2001 From: Sourav Kundu Date: Thu, 3 Oct 2024 11:48:36 -0500 Subject: [PATCH] checkov suppress --- infra/security_group.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/infra/security_group.tf b/infra/security_group.tf index 37e2725..2effa5c 100644 --- a/infra/security_group.tf +++ b/infra/security_group.tf @@ -20,6 +20,8 @@ resource "aws_security_group_rule" "ingress_load_balancer" { protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] security_group_id = aws_security_group.custom_sg.id + #checkov:skip=CKV_AWS_260: "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80" + #This is non prod and hence enabled. } #https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group_rule resource "aws_security_group_rule" "egress_load_balancer" { @@ -30,8 +32,6 @@ resource "aws_security_group_rule" "egress_load_balancer" { protocol = "tcp" cidr_blocks = ["0.0.0.0/0"] security_group_id = aws_security_group.custom_sg.id - #checkov:skip=CKV_AWS_260: "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80" - #This is non prod and hence enabled. } #https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/security_group resource "aws_security_group" "container_sg" {