update built in DB_INSTANCE rule for Terraform

stelligent · Sep 28, 2018 · 73ac3ae · 73ac3ae
1 parent 7ae4185
commit 73ac3ae
Showing 1 changed file with 5 additions and 4 deletions.
diff --git a/cli/assets/terraform.yml b/cli/assets/terraform.yml
@@ -577,10 +577,11 @@ rules:
     resource: aws_db_instance
     severity: FAILURE
     assertions:
-      - key: storage_encrypted
-        op: is-true
-      - key: kms_key_id
-        op: present
+      - or:
+        - key: storage_encrypted
+          op: is-true
+        - key: kms_key_id
+          op: present
 
   - id: ELB
     message: ELB checks