Gomboc remediation requested by Justin - cfngoat.yaml#1
Gomboc remediation requested by Justin - cfngoat.yaml#1gomboc-ai-beta[bot] wants to merge 2 commits into
Conversation
![gomboc-ai-beta[bot]](https://avatars.githubusercontent.com/in/345512?s=60&v=4){kind=small}
| EC2Instance: | ||
| Type: AWS::EC2::Instance | ||
| Properties: | ||
| Monitoring: true |
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Detailed Monitoring.
| Type: AWS::EC2::Instance | ||
| Properties: | ||
| Monitoring: true | ||
| DisableApiTermination: true |
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Deletion Protection.
| @@ -350,6 +352,8 @@ Resources: | |||
| Type: AWS::S3::Bucket | |||
| DeletionPolicy: Delete | |||
| Properties: | |||
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Data Versioning.
| Type: AWS::S3::Bucket | ||
| DeletionPolicy: Delete | ||
| Properties: | ||
| VersioningConfiguration: |
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Data Versioning.
| # Key does not have rotation enabled | ||
| Type: AWS::KMS::Key | ||
| Properties: | ||
| EnableKeyRotation: true |
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Enforce Key Rotation.
| Type: AWS::RDS::DBInstance | ||
| DeletionPolicy: Delete | ||
| Properties: | ||
| DeletionProtection: true |
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Deletion Protection.
| DeletionPolicy: Delete | ||
| Properties: | ||
| DeletionProtection: true | ||
| EnableIAMDatabaseAuthentication: true |
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Client Authentication via IAM SigV4.
| @@ -487,7 +494,7 @@ Resources: | |||
| BackupRetentionPeriod: 0 | |||
| StorageEncrypted: False | |||
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Prevent Public Access via Explicit Setting.
| @@ -690,6 +697,8 @@ Resources: | |||
| # EC2 have plain text secrets in user data | |||
There was a problem hiding this comment.
I have crafted this remediation to satisfy the policy requiring
all applicable resources to implement Detailed Monitoring.
The security team requested a scan on the repository Gomboc-AI-Dev/cfngoat, branch master, directory cfngoat.yaml with the help of Gomboc AI. There are observations for 6 security policies. There are 7 affected resources of 4 different types. Gomboc created 11 code fixes to address these policy gaps, requiring 1 files to be modified. A complete log of the request can be found here.
View the details on Gomboc's Portal