Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CKV_AWS_45: False Positive #6917

Open
tyroneyellowcard opened this issue Dec 20, 2024 · 0 comments · May be fixed by #6921
Open

CKV_AWS_45: False Positive #6917

tyroneyellowcard opened this issue Dec 20, 2024 · 0 comments · May be fixed by #6921
Labels
checks Check additions or changes

Comments

@tyroneyellowcard
Copy link

Describe the issue
CKV_AWS_45
Checkov is alerting that CKV_AWS_45: "Ensure no hard-coded secrets exist in Lambda environment" on an environment variable that has the value of 48 characters which might be the reason it is getting a false positive based off #5743.

Examples
"NameOfLambdaFunction": {
"Type": "AWS::Lambda::Function",
"Properties": {
"Environment": {
"Variables": {
"STAGE": "staging",
"LAMBDA": "handler.handlerverylongcustomhandlernameforservi"
}
}

Version (please complete the following information):

  • Checkov Version [3.2.330]

Additional context
Changing the name of the lambda handler is some times possible but other times it requires updates in many places and across services which can be problematic. Is there anything that can be done to reduce these false positives? Or would I need to look at replicating the checkov policy as a custom policy and adding in a condition to pass the check if the value contains "handler"?

@tyroneyellowcard tyroneyellowcard added the checks Check additions or changes label Dec 20, 2024
@tsmithv11 tsmithv11 linked a pull request Dec 23, 2024 that will close this issue
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
checks Check additions or changes
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant