Giters

fugue / regula

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

Home Page:https://regula.dev/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] AWS TF rule FG_R00054 failure

alleynec opened this issue · comments

commented

Describe the bug
the aws tf rule FG_R00054 failed even with a aws_flog_log resource defined. I can provide the actual terraform code if needed.

How you're running Regula
I'm using TF 1.2.5, TF aws provider 4.2.0, opa 0.42.2 and regula's 2.8.1 library of rules. I'm using the opa eval command with the regula aws TF rules to evaluate TF config

Operating System
Ubuntu-20

Steps to reproduce
I created a tfplan.json file based on the TF config then ran this command to evaluate the regula rules:
opa eval --format pretty --input tfplan.json --data regula/rego/lib --data regula/rego/rules/tf/aws --data regula/rego/examples/aws/useast1_only.rego --data waivers.rego 'data.fugue.regula.report'

IaC Configuration
I implemented in a github action even when executing locally, I still got the same error on FG_R00054

commented

I tried with the recent regula 2.9.0 library and the result occured.

commented

@jason-fugue This seems like a repeat issue of #220. I can't get this rule to pass for some reason on regula 2.9.0.