Giters

fugue / regula

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

Home Page:https://regula.dev/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[BUG] FG_R00105 - Can't set encryption properties on secondary replication group

maynardflies opened this issue · comments

commented

Describe the bug
The rule looks for encryption to be enabled on all resources of type aws_elasticache_replication_group. However, setting transit_encryption_enabled on a aws_elasticache_replication_group with the global_replication_group_id results in an error: "global_replication_group_id": conflicts with transit_encryption_enabled. The rule should only look for the property on aws_elasticache_replication_group instances with global_replication_group_id unset (primary)