Skip to content

Ato 656/merge remaining orch lambdas into staging #4688

Ato 656/merge remaining orch lambdas into staging

Ato 656/merge remaining orch lambdas into staging #4688

Triggered via pull request May 24, 2024 16:59
Status Success
Total duration 53s
Artifacts

checkov.yml

on: pull_request
scan-orch
32s
scan-orch
Matrix: scan
Fit to window
Zoom out
Zoom in

Annotations

60 errors
scan (account-management)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (account-management)
CKV_AWS_237: "Ensure Create before destroy for API Gateway"
scan (account-management)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (account-management)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (account-management)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (account-management)
CKV_AWS_120: "Ensure API Gateway caching is enabled"
scan (account-management)
CKV_AWS_225: "Ensure API Gateway method setting caching is enabled"
scan (account-management)
CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
scan (account-management)
CKV_AWS_50: "X-Ray tracing is enabled for Lambda"
scan (account-management)
CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
scan (delivery-receipts)
CKV_AWS_237: "Ensure Create before destroy for API Gateway"
scan (delivery-receipts)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (delivery-receipts)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (delivery-receipts)
CKV_AWS_120: "Ensure API Gateway caching is enabled"
scan (delivery-receipts)
CKV_AWS_225: "Ensure API Gateway method setting caching is enabled"
scan (delivery-receipts)
CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"
scan (delivery-receipts)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (delivery-receipts)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (delivery-receipts)
CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
scan (delivery-receipts)
CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
scan (test-services)
CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
scan (test-services)
CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
scan (test-services)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (test-services)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (test-services)
CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"
scan (test-services)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (test-services)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (test-services)
CKV_AWS_237: "Ensure Create before destroy for API Gateway"
scan (test-services)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (test-services)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (shared)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (shared)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (shared)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (shared)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (shared)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (shared)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (shared)
CKV_AWS_119: "Ensure DynamoDB Tables are encrypted using a KMS Customer Managed CMK"
scan (shared)
CKV_AWS_119: "Ensure DynamoDB Tables are encrypted using a KMS Customer Managed CMK"
scan (shared)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (shared)
CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"
scan (utils)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (utils)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (utils)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (utils)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (utils)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (utils)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (utils)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (utils)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (utils)
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
scan (utils)
CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"
scan (oidc)
CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
scan (oidc)
CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
scan (oidc)
CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
scan (oidc)
CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
scan (oidc)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (oidc)
CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
scan (oidc)
CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"
scan (oidc)
CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"
scan (oidc)
CKV_AWS_116: "Ensure that AWS Lambda function is configured for a Dead Letter Queue(DLQ)"
scan (oidc)
CKV_AWS_115: "Ensure that AWS Lambda function is configured for function-level concurrent execution limit"