fix: Make unauthorized pattern match exact (#50)

terraform-aws-modules · Jan 10, 2023 · 03d43d5 · 03d43d5
1 parent 53792c5
commit 03d43d5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/cis-alarms/main.tf b/modules/cis-alarms/main.tf
@@ -1,7 +1,7 @@
 locals {
   all_controls = {
     UnauthorizedAPICalls = {
-      pattern     = "{ (($.errorCode=\"*UnauthorizedOperation\") || ($.errorCode=\"AccessDenied*\")) }"
+      pattern     = "{ ($.errorCode=\"*UnauthorizedOperation\") || ($.errorCode=\"AccessDenied*\") }"
       description = "Monitoring unauthorized API calls will help reveal application errors and may reduce time to detect malicious activity."
     }