Fixed issue with CKV_AZURE_227

bridgecrewio · Oct 12, 2023 · 60dff0e · 60dff0e
1 parent 6039e9f
commit 60dff0e
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/checkov/terraform/checks/resource/azure/AKSEncryptionAtHostEnabled.py b/checkov/terraform/checks/resource/azure/AKSEncryptionAtHostEnabled.py
@@ -22,7 +22,11 @@ def __init__(self) -> None:
                          missing_block_result=CheckResult.FAILED)
 
     def get_inspected_key(self) -> str:
-        return "enable_host_encryption"
+        if self.entity_type == "azurerm_kubernetes_cluster":
+            return "default_node_pool/[0]/enable_host_encryption"
+        else:
+            return "enable_host_encryption"
+
 
 
 check = AKSEncryptionAtHostEnabled()