Skip to content

fix(query): add a missing SSE way for SQS#4984

Merged
cx-joao-reigota merged 2 commits into
Checkmarx:masterfrom
jycamier:query/fix_add_missing_sse_way_for_sqs
Mar 15, 2022
Merged

fix(query): add a missing SSE way for SQS#4984
cx-joao-reigota merged 2 commits into
Checkmarx:masterfrom
jycamier:query/fix_add_missing_sse_way_for_sqs

Conversation

@jycamier

Copy link
Copy Markdown
Contributor

Context

From the documentation, there are 2 way to add SSE on a AWS SQS :

  1. SSE-SQS
  2. SSE-KMS

Currently, the query terraform/aws/sqs_with_sse_disabled check only SSE-KMS.

Proposed Changes

  • Update the query terraform/aws/sqs_with_sse_disabled to check if one of the 2 ways is set and not null

I submit this contribution under the Apache-2.0 license.

@kicsbot

kicsbot commented Mar 14, 2022

Copy link
Copy Markdown
Contributor

Scan submitted to Checkmarx

@kicsbot

kicsbot commented Mar 14, 2022

Copy link
Copy Markdown
Contributor

Logo
Checkmarx SAST - Scan Summary & Details

Cx-SAST Summary

Total of 5 vulnerabilities
High 0 High
Medium 0 Medium
Low 5 Low
Info 0 Info

Violation Summary

No policy violation found

@jycamier jycamier force-pushed the query/fix_add_missing_sse_way_for_sqs branch from a9b1855 to 9e84019 Compare March 14, 2022 21:36

@rafaela-soares rafaela-soares left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello, @jycamier!

Such a great observation and contribution! Thank you so much 🚀

Please, take a look at the minor suggestions:

Comment thread assets/queries/terraform/aws/sqs_with_sse_disabled/query.rego Outdated
@rafaela-soares rafaela-soares added community Community contribution query New query feature labels Mar 15, 2022
Co-authored-by: Rafaela Soares <rafaela.soares@checkmarx.com>
@jycamier

Copy link
Copy Markdown
Contributor Author

Hello @rafaela-soares
Your welcome ! You're very active and you answer very quickly : it's very pleasant too.
I like to contribute on Kics and I use it massively.

I've updated / accepted your suggestion change.

@rafaela-soares rafaela-soares left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🚀

Thank you so much for the feedback, @jycamier!

We are very grateful for your amazing contributions, suggestions and iterations! 😊

Let's continue to Keep Infrastructure as Code (more) Secure together 🚀

@cx-joao-reigota cx-joao-reigota merged commit d73cc3f into Checkmarx:master Mar 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

community Community contribution query New query feature

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants